MurphyA/hacker-news huggingface dataset:
by rectang | 2025-11-26 19:22:51+00:00
It you're conscious of the guardrails you're putting in, are you really "vibe coding"? The whole idea behind "vibe" coding is that you don't pay close attention to what the LLM gives you, you just go along with the "vibe".

I've built a couple systems where most of the code was generated by LLM prompts, but I wouldn't describe what I did as "vibe coding". Instead I was reviewing judiciously and applying my software engineering experience to ensure that the codebase was evolvable and maintainable. Not everything required careful review because certain subsystems were low risk and tolerant of sloppiness, but knowing where to watch like a hawk or hand code something was part of what I did.

I question the extent to which effective guardrails can be put in place as a general case. My impression matches what I've seen from others, which is that LLMs make senior devs who know how to supervise them more powerful — but I'm less certain about junior devs.
Show HN: Bookmark Manager Zero – On-device bookmark integrity checks
by AbsoluteXYZero | 2025-11-26 19:23:12+00:00
I built a Firefox/Chrome extension that monitors the health and safety of your browser bookmarks entirely locally. No accounts, no servers, no analytics. Any changes to your native browser bookmarks (or the same bookmarks within the extension) are instantly synced; deletions include a 5-second undo window.

It checks for:

dead/parked links

suspicious redirects

changes in domain behavior

duplicates

optional integration for user-supplied API keys for VirusTotal / Google Safe Browsing / Yandex

It also keeps 7-day cached results and alerts you if a previously safe bookmark becomes suspicious. All analysis runs on-device and the code is fully open source.

Firefox: https://github.com/AbsoluteXYZero/Bookmark-Manager-Zero-Fire...

https://addons.mozilla.org/en-US/firefox/addon/bookmark-mana...

Chrome: https://github.com/AbsoluteXYZero/Bookmark-Manager-Zero-Chro...

https://chromewebstore.google.com/detail/bookmark-manager-ze...

Chrome Web Store reviews lag behind, so the Chrome version is currently one release behind Firefox.

Known limitations: relies partially on external plaintext blocklists → possible false positives/negatives. Preview images are fetched via the public mShots screenshot service (nothing else leaves the browser).

Feedback appreciated.
by fatihpense | 2025-11-26 19:23:23+00:00
I like the post first explains just what happened in enough detail, then comes with conclusions. It is more helpful to me as a data point.

As the style, images seem weird at first, but they help conveying emotions, point of view. Somehow, they also help with attention for me.

As another commenter said, it seems that guardrails will be important. I believe, 'software is managing complexity' at the end of the day. The complexity and decision-among-options will continue to exist. They need to live and taken care of somewhere.
by kentm | 2025-11-26 19:23:25+00:00
Yeah, Voyager 1 was launched on a Titan IIIE. I don't really want to do the delta v calculations, but if we look at mass to LEO as a rough proxy, Titan IIIE does 15,400 kg and the Falcon Heavy does around 50,000 kg (with re-use). New Glenn can apparently do 45,000 kg. Doesn't take into account gravity assists, but 3x the capacity before Falcon Superheavy or refueling gives us a helluva lot of leeway.

Its not "interstellar speeds" but I'm pretty sure we could get probes further out than Voyager 1 faster if we put the money behind it.
by dpark | 2025-11-26 19:23:38+00:00
I don’t actually work in Rust. I think I understand what you’re going for, though. The choice to use panic as a way of propagating errors is fundamentally problematic when it can arise from code you don’t control and potentially cannot even inspect.

I don’t necessarily agree that malloc should be okay (buggy code could try to allocate a TB of memory and OOMKiller won’t fix it) but I can understand that it’s probably workable in most cases.

Unfortunately I think the fix here would require a compatibility break.
by DrSusanCalvin | 2025-11-26 19:24:16+00:00
Thanks, interesting. However, that just seems like a protocol like any other, with no real reason why you "can't" formally verify it. Is there something special about a consensus algorithm / protocol that makes it any more difficult to verify than any other algorithm which doesn't yet have a formally verified implementation?

Edit: https://link.springer.com/chapter/10.1007/978-3-319-48989-6_...
by woolion | 2025-11-26 19:24:23+00:00
Oh, thank you for your reply. We may have different definitions of style and what editing would mean.

If you look for example at "Mermaid Disciplinary Committee", every single image is in a very different style, each that you can consider a default of what the model assume would be for the specific prompt. It's quite obvious that these styles were 'baked in' the models, and it's not clear how much you can steer in a specific style. If you look at "The Yarrctic Circle", a lot more models default to a kind of "generic concept art" style (the "by greg rutkowski" meme) but even then I would classify the results as at least 5 distinct styles. So for me this benchmark is not checking style at all, unless you consider style to be just around 4 categories (cartoon, anime, realistic, painterly).

So regarding image editing, I did my own tests at the first release of Flux tools, and found that it was almost impossible to get any decent results on some specific styles, specifically cartoon and concept art styles. I think the tools focus on what imaginary marketing people would want (like "put this can of sugary beverage into an idyllic scene") rather than such use cases. So editing like "color this" or other changes would just be terrible, and certainly unusable.
by keeda | 2025-11-26 19:24:42+00:00
Study from the Federal Reserve Bank of St. Louis based on national survey data and other statistics indicating GenAI may already be impacting labor productivity at a national level.

Relevant quotes:

> When we feed these estimates into a standard aggregate production model, this suggests that generative AI may have increased labor productivity by up to 1.3% since the introduction of ChatGPT. This is consistent with recent estimates of aggregate labor productivity in the U.S. nonfarm business sector. For example, productivity increased at an average rate of 1.43% per year from 2015-2019, before the COVID-19 pandemic. By contrast, from the fourth quarter of 2022 through the second quarter of 2025, aggregate labor productivity increased by 2.16% on an annualized basis. Relative to its prepandemic trend, this corresponds to excess cumulative productivity growth of 1.89 percentage points since ChatGPT was publicly released.

...

> We stress that this correlation cannot be interpreted as causal, and that labor productivity is determined by many factors. However, the current results are suggestive that generative AI may already be noticeably affecting industry-level productivity.
by JustExAWS | 2025-11-26 19:24:51+00:00
If you are “consulting” on an hourly rate, you’re doing it wrong. The company and I get paid for delivering projects not the number of hours we work. A smaller project may just say they have me for 6 weeks with known deliverable. I’m rarely working 40 hours a week.

When I did do one short term project independently, I gave them the amount I was going to charge for the project based on the requirements.

All consulting companies - including the division at AWS - always eventually expand to the staff augmentation model where you assign warm bodies and the client assigns the work. I have always refused to touch that kind of work with a ten foot pole.

All of my consulting work has been working full time and salaries for either the consulting division of AWS where I got the same structured 4 year base + RSUs as every other employee or now making the same amount (with a lot less stress and better benefits) in cash.

I’m working much less now than I ever have in my life partially because I’m getting paid for my expertise and not for how much code I can pump out.
by nextaccountic | 2025-11-26 19:24:57+00:00
> it will likely be harder to block

Maybe users will employ LLMs to block ads? There's a problem in that local LLMs are less powerful and so would have a hard time blocking stealth ads crafted from a more powerful LLM, and would also add latency (remote LLMs add latency too, but the user may not want to pay double for that)
by ivan_gammel | 2025-11-26 19:25:03+00:00
I like your confidence, but I think you missed a few things here and there.

Training datasets are repetitive too. Let’s say, you feed some pretty large code bases to an LLM: how many times there will be a for loop? Or how many times Newton laws (or any other important ideas) are mentioned there? Not once, not two times, but many more. How many times you will encounter a description of Paris, London or St.Petersburg? If you eliminate repetition, how much data will actually be left there? And what’s the point anyway: this repetition is required part of the training, because it places that data in context, linking it to everything else.

Is repetition that we have in our sensory inputs really different? If you had children or had opportunity to observe how do they learn, they are never confined in the same static repetition cycle. They experience things again and again in a dynamic environment that evolves over time. When they draw a line, they get instant feedback and learn from it, so that next line is different. When they watch something on TV for fifth time, they do not sit still, they interact — and learn, through dancing, repeating phrases and singing songs. In a familiar environment that they have seen so many times, they notice subtle changes and ask about them. What was that sound? What was that blinking light outside? Who just came in and what’s in that box? Our ability to analyze and generalize probably comes from those small observations that happen again and again.

Even more importantly, when nothing is changing, they learn through getting bored. Show me an LLM that can get bored when digging through another pointless conversation on Reddit. When sensory inputs do not bring anything valuable, children learn to compensate through imagination and games, finding the ways to utilize those inputs better.

You measure quality of data using wrong metrics. The intelligence is not defined by the number of known facts, but by the ability to adapt and deal with the unknown. The inputs that humans use prepare us for that better than all written knowledge of the world available to LLM.
by homebrewer | 2025-11-26 19:25:38+00:00
It uses that time to parse the source into an AST and build a search index to provide type-aware symbol search, information for autocomplete and refactoring if you request it, etc. Sure it will be slower than simply highlighting the code and then doing nothing with it...

If you use IDEA as a glorified text editor, you're using less than 1% of what it's capable of. It's a complete waste of computing resources then.
by array_key_first | 2025-11-26 19:26:28+00:00
The metrics are bad. Data driven decision making is a very easy trap. If you capture the wrong data then you just optimize for worse stuff.

Classic example: reactions and watch time as measuring engagement. Leads to shittier content being promoted because the more garbage something is, the more outraged people will be.

And that's why Facebook has "optimized" itself to be as shitty of a platform as humanly possible.
by itrash | 2025-11-26 19:27:06+00:00
Yes, the experience is pretty bad, we were doing baremetal, so I assume there were only a single user on it. The tooling and its documentation was really bad too, actually we based ourselves on the asahi project and its documentation and some open-source project that did a lot of work on reverse engineering all of the system we used.

From a user based perspective, using the remote desktop feature was a pain and I don't think any of our users were actually using it, the main use was : CI, AI training and bitcoin mining.
by civilian | 2025-11-26 19:28:05+00:00
This article makes sense when you figure out that the author's assumption is that vibe-coded == bad.

It sounds like this startup headed for closure anyway, with it's failing revenue, "At the same time, the current revenue projection calls for the end of the business within a few more months."

So, the vibe-coded app is a hail mary by the CEO / investors? If you're already just a few months from closing shop, maybe switching to a vibe-coded up saves you a ton of engineering headcount and gives you a chance? Changes the math on how you price the product?

Maybe slugs were meant for better things than engineering
by frumplestlatz | 2025-11-26 19:28:19+00:00
Invariants aren’t invariant if they’re variant.

This is literally what “invariant” means, and what a type system is built to model.

Declaring an invariant in the type system that you then violate is not correct code. I truly can’t even begin to guess at why you’re so voracious in your defense of this particularly poor practice.

[edit]

HN rate limits kicking in, so here’s my reply. I work for a FAANG but I’m not going to say which one. You or a relative are, with almost 100% certainty, relying on code written to that philosophy, by me, daily and widely.
by toomuchtodo | 2025-11-26 19:28:47+00:00
> Update: after years of being on the wish list of a ton of top AWS teams, AWS released a built-in version of this feature about two weeks after we published this. Never let it be said gentle ribbing doesn’t work. Also, thanks AWS! We meant it when we said that the only thing better than having something easy to deploy was not needing to deploy anything at all. Everything in this post about workload identity is still relevant but you should probably use upstream’s implementation unless you have a good reason not to (for example, private validators for whom you need a VPC endpoint).

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_pr...

Previous:

https://news.ycombinator.com/item?id=45834299 - November 2025 (0 comments)
by ladyanita22 | 2025-11-26 19:28:57+00:00
Which distro supports partial upgrades? AFAIK no major distro supports it.

The only difference between Arch and any other regular distro is simply that in Arch there are no major upgrade versions, so any breaking changes you have to perform them manually. Period.

In the rest, they do it for you. But they update key components as well and/or stop getting updated at some point (same as not updating Arch).

For example, I am a happy Fedora user, but I don't get why they don't upgrade the Plasma or Gnome version in the same release but they do upgrade the kernel, when the kernel update may bring more breaking changes...
by nickelpro | 2025-11-26 19:29:08+00:00
> The community doesn't need to be a 'house party,' but the license guarantees the right for a community to form when the original author walks away.

Which is why the license is the only thing that matters. Without the license you don't have the community. It will happen with some code, it won't happen to other code. Without the license, or without the code, it never happens.

The only thing you need to do as an open source software developer is release your code under an open source license. You don't need to respond to or even maintain an issue tracker, you don't need to accept MRs into your upstream, you don't need to care about anyone else using your code.

Open source places no other obligations on a developer other than the license. To say otherwise is to fundamentally misunderstand what open source is.
by mynameisash | 2025-11-26 19:30:32+00:00
You know, I tried F# like eight-ish years ago, and I loved it, but I couldn't break into doing it with enough regularity and depth that it made sense for me. I still do a decent amount of C# at work, and with my experience in Rust (algebraic data types, etc.), I imagine that F# would really help out a lot in our .NET code.
by jonathanstrange | 2025-11-26 19:30:51+00:00
The point is that the comparison is rubbish because Amazon offers way more than Hetzner. If you compare apples with oranges, you get the result that they're different, and that's the gist of the video we're talking about. I'll spare you a car analogy since I'm sure you understand what I'm saying without one. Companies choose Amazon AWS because having peace of mind and contracting out liability is worth the price. It's not complicated and honestly not worth making a video about. That's all I have to say. Have a good day!
by johnfn | 2025-11-26 19:30:52+00:00
One reported benefit from Ozempic is that it improves self control. For instance, there are some studies that show it's easier to stop smoking on Ozempic[1]. I can't think of any way that would be modulated just by being less overweight.

[1]: https://www.goodrx.com/classes/glp-1-agonists/semaglutide-fo...
by jauntywundrkind | 2025-11-26 19:31:19+00:00
In absolute numbers maybe it's a lot, but I doubt even 10% are EC2 only.

Even "only" ECS users often benefit from load balancing there. Other clouds sometimes have their own (Hetzner), but generally it's kind of a hard problem to do well, if you don't have a cloud service like Elastic IP's that you can use to handle fail over.

Generally everywhere I've worked has been pretty excited to have a lot more than just ecs managed for them. There's still a strong perception that other people managing services is a wonderful freedom. I'd love some day if the stance could shift some, if the everyday operator felt a little more secure doing some of their own platform engineering, if folks had faith in that. Having a solid secure day-2 stance starts with simple pieces but isnt simple, is quite hard, with inherent complexity: I'm excited by those many folks out there saddling up for open source platform engineering works (operators/controllers).
by throw_a_grenade | 2025-11-26 19:31:27+00:00
EU (and preceding organisations since European Coal and Steel Community) were created so that there will be no war in Europe. How exactly this objective is achieved is of secondary importance. It is economic institution, because someone calculated that this will be best shot, but if (or when) calculation credibly shifts (for example, that it would be better for them to be a religion, a feudal system, or a federation -- whatever), it will morph into something else.

I'd say that it has 100% fulfilled its primary goal that there is no military conflict between major European states for like 80 years and counting, which is longest period ever recorded and a historical anomaly. The means of how it was executed is obviously a matter of debate, mistakes were made etc., but we over here generally make love, not war.
by throw9174 | 2025-11-26 19:31:56+00:00
Doesn't this kind of argument prove too much?

Consider an alternate reality without food standards and regulations. Things like the melamine incident are commonplace and people regularly suffer due to contaminated food. Someone argues "perhaps the corporations should stop poisoning our food". Then someone else responds "Stop demonizing the executives, their objective is to make a profit, which they get from the consumers. The consumers are the ones buying the contaminated food, the executives aren't. If people don't want to get sick, they should exercise more diligence."

It's easy to offload coordination problems on the people who make imperfect decisions as a consequence, but saying "just don't have coordination problems, then" is rarely useful if one wants to mitigate those problems.
by strangattractor | 2025-11-26 19:32:08+00:00
I get confused about the word "adoption". By adoption is it meant that a company tried to use AI, determined it useful and continues to use it. Just trying something out is not adoption in my mind. Companies try and abandon things all the time.

It has been my experience that technology has to perform significantly better than people do before it gets massively adopted. Self driving cars come to mind. Tesla has self driving that almost works everywhere but Waymo has self driving that really works in certain areas. Adoption rates for consumers has been much higher with Waymo (I was surrounded by 4 yesterday) and they are expanding rather rapidly. I have yet to see a self driving Tesla.
by itake | 2025-11-26 19:32:54+00:00
The feat, from the perspective you describe, isn't that remarkable. Humanity has tons of projects that meet these exact standards throughout our history:

> We built something meant to work for decades, knowing the people who launched it would never see the end of the story.

> We pointed a metal box into the dark with the assumption that the future would exist and might care.

> It’s proof that humans will build absurdly long-horizon projects anyway, even when the ROI is almost entirely knowledge and perspective.

The pyramids, the Bible, governments, or even businesses [0] are all human constructs that last way beyond their creators (and their intention), with and without their creator's intention.

> we ever build a civilization stable enough to think in centuries without collapsing every few decades.

This is a valid point though

[0] - https://en.wikipedia.org/wiki/List_of_oldest_companies
by 1vuio0pswjnm7 | 2025-11-26 19:33:03+00:00
"Majority of Americans block ads"

https://allaboutcookies.org/ad-blocker-adoption

"Majority of Americans now use ad blockers"

https://www.theregister.com/2024/03/27/america_ad_blocker/

Was there "concrete evidence" that "the majority of Europeans wanted" the rights granted to them under the GDPR

If we examine each of the rights that the public possesses, perhaps many of them would be unfamiliar or unknown to a majority of the public

Is it reasonable to imply that for each and every one of those rights there is "concrete evidence" that "a majority of the public" wants them, even when they are not familiar with them or do not know of their existence
by notaustinpowers | 2025-11-26 19:33:03+00:00
Health insurance payouts are socialized, but the health insurance company and healthcare providers are privatized. The insurance company and the healthcare providers are now incentivized to increase pricing of policies and services, since the cost is shared anyway.

Couple that in with laws that hamper the effectiveness of health insurance (can't negotiate drug pricing, denial of necessary care, absurdly high deductibles) and many quickly see that health insurance really just feels like a scam.

The regulations are in the favor of the insurance providers and major healthcare corporations. There have been decades of erosions to regulations on both the patient and healthcare provider side.

Couple that in with the recent announcement that many nursing and healthcare degrees are no longer considered "professional degrees" and are therefore now further restricting access to these career fields, US healthcare is about to get a lot worse.
by pixelpoet | 2025-11-26 19:33:06+00:00
Oh my god, the smarminess... yes, nobody except you understands, of course. Thank goodness we have you to grace us with wisdom, while also declining to actually argue a point and just repeating your opinion (essentially, "nuh uh").

Whatever, you already said you don't care about actual rational discourse and regard everyone else as (un)paid actors, so this is pointless.
by wolfgang000 | 2025-11-26 19:33:24+00:00
Exactly, I found that most of the time, I spend significantly more time reviewing the code; most of the time, there is a lot of repeated code. Refactoring and cleaning the code also require a lot of time.

I found that the time I spend reviewing and refactoring is marginally less than the time it takes to write the code myself. For very repetitive tasks, there is a sweet spot.

The only case where vibe-coding really delivered on the promise of super high-speed development is when you completely gave up on the code quality or you are in a greenfield project where all the business logic hasn't been fully defined.