MurphyA/hacker-news huggingface dataset:
by anonym29 | 2025-11-03 14:19:50+00:00
Those are negligible compared to a 100% availability / uptime cost to your business incurred from being a serf to a feudal tyrant with no name or face that enjoys abusing you.

Using GCP, AWS, or Azure is like volunteering to use your own money to rent heavy construction equipment to construct your own jail cell and excavate your own grave.

But hey, at least you get to avoid the capex on the heavy construction equipment, and it's always¹ available!

¹ except for when human error takes it offline for 14 hours straight
by mariocandela | 2025-11-03 14:19:59+00:00
I've just published my analysis on RondoDox v2, and the numbers speak for themselves: +650% exploit vectors compared to v1 documented by FortiGuard Labs.

Key Findings: - 15+ exploitation vectors (from 2 CVEs to enterprise-grade attacks) - C&C on compromised residential IP (multiple AWS EC2) - 16 architectures supported with XOR obfuscation (key: 0x21) - Open attribution: bang2013@atomicmail.io

What concerns me: The jump from consumer DVR/routers to enterprise targets demonstrates an aggressive expansion strategy. We're no longer talking about a "simple" DDoS botnet.

IOCs and detection rules: YARA, Snort/Suricata and complete IOC list available in the full post.
by itake | 2025-11-03 14:20:05+00:00
There is literally an infinite amount of work to be done. being 1,000% more efficient doesn't change that.

32 hour work weeks are difficult to apply in many industries. Health care is already insanely expensive.

Decreasing number of workers means buildings are built slower and more expensively (resulting higher housing costs).

Along with productivity gains, we also have quality gains. Previously all houses did not need air conditioning, but because things are more efficient, more people can afford one.

no thanks.
by tim333 | 2025-11-03 14:20:21+00:00
I ride the train kind of recreationally. Not just to ride it but to go into town, have a coffee and check the scene, then go back, so basically recreational.

I think a lot of the non rush hour usage is like that.

The train itself is pleasant off peak - table, wifi, I drink coffee and websurf. It's a bit squished in during rush hour though.
by SpaceL10n | 2025-11-03 14:21:12+00:00
I work 32 hours per week. Rather, I work 4 days a week. This means I have 50% more free time than I used to. I fill that free time with dates with my wife while my kids are at school, or hiking, or just goofing at home doing whatever I feel like. One day a week is MINE. I cannot understate just how much this has improved my mental health and quality of life. Not to mention, when holidays fall on certain days of the week, I get 4 day weekends which is like a mini vacation. 48 hours is not enough time to fully decompress and feel human again.

I am never going back to 5 days a week, if I can help it.

Still, these numbers all seem arbitrary. More flexible opt-in work arrangements would be nice. My wife is a nurse and she can work "per diem" which is just amazing. She opts-in and chooses her schedule. I think society as a whole would be a bit healthier if that flexibility was extended to more of the population.
by jerf | 2025-11-03 14:21:44+00:00
This is one of the things I've mentioned before, I think it's just hidden a bit and hard to see, but this is basically the LLM doing style transfer, which they're really good at. There was a specification for the code (which looks like it was already trained into the LLM since it didn't have to go fetch it but it also had intimate knowledge of), there was an implementation, and it's really good at extracting out the style difference between code and spec. Anything that looks like style transfer is a good use for LLMs.

As another example, I think things like "write unit tests for this code" are usually similar sort of style transfer as well, based on how it writes the tests. It definitely has a good idea as to how to sort of ensure that all the functionality gets tested, I find it is less likely to produce "creative" ways that bugs may come out, but hey, it's a good start.

This isn't a criticism, it's intended to be a further exploration and understanding of when these tools can be better than you might intuitively think.
by slightwinder | 2025-11-03 14:22:17+00:00
Probably because for most locations, they are actually not very useful, but quite expensive and just cumbersome. They take up space, and create artificial travel-zones, and at the same time they don't even enhance the flow, because most people tend to stand still on them. For safety-reasons (and probably costs) they are usually just around walking speed. So it's overall just a fancy gadget which is only beneficial for heavy luggage or people with special demands. For those situations, we often have better and cheaper solutions.
by jonway | 2025-11-03 14:22:27+00:00
I hated it. Much better from akamai, tornado, kamatera, others.

I gave it a try -- Google offered a free tier vps which was a no brainer. It worked but the ui seemed jank and somewhat confusing. The cost wasn't particularly compelling, so I never deployed. I kept the free tier VPS running for a while to continue evaluation since I value a diversity of services.

However, google charged me like a dollar, and i never saw the charge since i never logged into the webui. I never got an email saying I owe them a dollar so they canceled my GCP access and blacklisted my google account from GCP.

There was a lot of friction here, and the fact that i "feel lucky" I didnt lose my very old gmail account over $1.00 makes me laugh...a very nervous laughter.

I like a lot about google. I cannot depend on google. I use google's AI offering and I am slowly becoming concerned it could affect my legacy email account. Like, everything gets locked and my doctor cannot email me.
by 0xEF | 2025-11-03 14:22:31+00:00
Manufacturing (my field) would be a good place to start. Most of the guys I work with work overtime not because we have a bunch of work to do, but to inflate their weekly paychecks that much more. I've stopped reminding them that nobody ever got rich by working overtime, and it's a tool designed to keep them toiling away. Odds are if something like a 32 hour week passed, it would take a ridiculous amount of convincing for them to adopt it since overtime is so deeply entrenched in the culture.
by thelastgallon | 2025-11-03 14:22:40+00:00
250kg grandma = ~20 small dogs

250kg weapons = ~20 small dogs

Instead of technological advancements of EV motors, we can immediately use existing pharmaceutical tech (Ozempic, GLP-1) to immediately deliver weight reduction to cars. However, this will be immediately offset by the increase in weight of weapons carried, thanks to Jevons Paradox.
by vessenes | 2025-11-03 14:23:00+00:00
Productivity matters, both to the companies that pay these workers, and to people's wellbeing and mental health. I don't know the numbers today but in the 2000s, on average, corporate engineers had 35 hours a week of meetings. At 40 hours, this left 5 hours a week for coding. If you were willing to work 60 hours a week, then voila - you would be a 5x coder! Not to mention most coders get into it for the coding, not the meeting.

This math isn't just arbitrary - it's embedded deeply in how organizations function, how people work, get promoted, deliver, all that. in a vacuum, a 32 hour workweek might push meeting times lower and leave the same or more engineering productivity time. It might also stress the system so hard that non-meeting work grinds to a halt, unfortunately just at a time when there's less time to notice it.
by theshrike79 | 2025-11-03 14:23:00+00:00
There's your problem right there.

Don't use it as a knowledge machine, use it as a tool.

Agentic LLMs are the ones that work. The ones that "use tools in a loop to achieve a goal"[0]. I just asked Claude to "add a release action that releases the project as a binary for every supported Go platform" to one of my Github projects. I can see it worked because the binaries appeared as a release. It didn't "hallucinate" anything nor was it a "stohastic parrot". It applied a well known pattern to a situation perfectly. (OK, it didn't use a build matrix, but that's jsut me nitpicking)

In your cases the LLM should've seen that you're asking about current events or news and used a tool that fetches information about it. Now it just defaulted to whatever built-in training data was in its context and failed spectacularly

AIs have a branding issue, because AI != AI which isn't AI. There are so many flavours that it's hard to figure out what people are talking about when they say "AI slop is crap" when I can see every day how "AI" makes my life easier by automating away the mundane crap.

[0] https://simonwillison.net/2025/Sep/18/agents/
by gausswho | 2025-11-03 14:23:08+00:00
I had heard something unsettling about anesthesia that I could use verification or debunking.

The gist was that modern implementations suppress memory formation rather than induce unconsciousness. That you remain in some sense aware of what's happening but don't remember the experience. This is safer than traditional methods, but could potentially subject the patient to complex mental or emotional trauma.

Is that accurate?
by beeforpork | 2025-11-03 14:23:34+00:00
Every time a robot or AI or whatever machine takes over the work of many workers, why not lower the average work week hours accordingly? The machine made the process more efficient, and the machine works instead of the worker. So less work is needed for the worker, and this could be averaged to pay out as a bonus for all workers. If you want to calculate this is money, you could also say that the machine does not work for free, but it is definitely cheaper than labor, so we could at least say that the difference of these costs is the gained efficiency, and this could be translated back to lowering the average work load of workers. And if you still want an incentive that more machines are introduced, you would say that 80% of the gained efficiency is translated back to lowering the average human worker's load.

There is no reason why we should have unemployment if machines make work more efficient -- it just means that there is enough money to be earned to give back part of it so that we do not need all the manpower.

What's wrong with this perspective?
by lr4444lr | 2025-11-03 14:23:47+00:00
When it comes to jobs where the skill growth and knowledge domain is fairly static and is hard on the body or dangerous, like the trades, I think these demands are a good idea.

Not so much in IT. I've seen too many public sector tech employees atrophy and fall way behind in their skill set and productivity. Most would hardly make it past an initial tech screening at a startup or FAANG. I think it's great that those guys have a union to protect them, but we cannot run the entire industry this way and expect to keep the economic engine of these companies going.
by stevejb | 2025-11-03 14:23:48+00:00
Yeah, whenever there are human subjects there is an IRB which is necessary. But, beyond that, we didn't participate in the market in any way. We wanted to see if there was bias there, and how much of it. I think I may have used the word 'value' in a bad way in my description. Not 'value' as in 'can we exploit people?' but value as in statistical significance. E.g. if you applied for a loan and your profile picture contained yourself with a child, did that help you, hurt you, or was it neutral?
by zeagle | 2025-11-03 14:24:15+00:00
I went from cloud to local smb shares to nextcloud to seafile. Really happy with the latter. Works, no bloat, versioning and some file sharing. The pro version is free with 3 or less usernames. I use the cli client to mount the libraries into folders and share that with smb + subst X: into the root directory on laptops for family. Borgbackup of that offsite for backup.
by gwbas1c | 2025-11-03 14:24:18+00:00
It's easy to forget that most of the weight in an electric car is the battery. It's ICE cars where a lot of the weight is in the motor.

That being said, could this be adapted so that a 2.8lb motor produces 100 hp? That would allow putting a small motor in each wheel, thus completely eliminating axels, driveshafts, and allow recapturing the space they used to occupy. It also wouldn't significantly impact unsprung weight.
by Esophagus4 | 2025-11-03 14:25:10+00:00
Man, I wish I could downvote this knee-jerk, reactionary comment.

I’m guessing you’re neither a successful founder nor executive from your comment?

If your comment is really good faith, why don’t we try this exercise: you tell me why it wouldn’t be “dumb overgeneralized advice” to make sure you understand it fully.
Tech and evolution are incompatible: generalization ensures niches take-over
by Marshferm | 2025-11-03 14:25:11+00:00
This is what technologists since the PC age can't seem to grasp, yet the empirical evidence bolsters this. When you generalize communication, you elevate bottlenecks in both language and behavior. Tech essentially ensures maladaptive adaptations expand from containable to uncontainable. Look at the collapse of 'social' media, the inability of AI to resolve semantic diffusion (hallucination). These are affective and information bottlenecks previous networks could contain.
by cf100clunk | 2025-11-03 14:25:36+00:00
From the announcement:

''Dear Friends and Software Freedom Lovers,

It is with great pleasure that the Devuan Developers hereby announce the release of Devuan Excalibur 6.0 as the project's newest stable release. This is the result of lots of painstaking work by the team and extensive testing by the wider Devuan community.''
by skeeter2020 | 2025-11-03 14:25:39+00:00
The idea of tech workers simultaneously saying they don't get a living wage and demanding a 32 hr work week completely undermines any sort of position they hope to establish. Those who make far less than tech already work more hours, and the people who have more wealth (talking about the majority of predominately the boomers, not the uber wealthy) worked more hours too. I'm not sure who this would resonate with beyond an echo chamber for the small group who are (I fear) going to be dismissed as lazy & entitled. This is a real shame, because there's work to be done against inequality and opportunities for (specifically) the young & educated who are struggling to get experience. Meanwhile the (admittedly glib) criticism here is being down voted into oblivion but I believe it represents the majority response. Swing and and a miss.
by liampulles | 2025-11-03 14:25:47+00:00
I believe this is the official Kickstarter strike notice: https://www.opeiulocal153.org/news/kickstarter-united-opeiu-...

w.r.t 'living wages', quote: "...The call for a minimum salary of $85,000 corresponds with what is considered Low Income in New York City ($87,100 for 2024). "
by SoftTalker | 2025-11-03 14:25:51+00:00
I know that 1kg is about 2.2lbs but that still doesn't give me the "mental clarity" of what 20kg is unless I do the conversion.

At the gym I use the pound plates and not the kilo ones. I intuitively know what the difference between 135 and 225 lbs feels like, and I don't have that same intution for kg.

All that said, I don't find the "small dog" types of analogies for weight very useful. Why not just use the same number of characters (or less) to give the weight in the other popular unit?
by tim333 | 2025-11-03 14:25:52+00:00
A roller coaster would be fun. I've always kind of wanted a city to city flight that you could just jump out of with a parachute and land at your destination without the airport faff.

On the more realistic end of things, ebikes are fun.

>e-biking over a bridge, preferably at night — has developed its own ardent following. Liberated for the most part of any physical exertion, e-bikers can instead focus on the texture of the road vibrating up their arms, the wind streaking across their cheeks, the speed heightening their consciousness. “You do it in the evening, with the sunset — hell yeah,” https://www.nytimes.com/2025/06/05/nyregion/eric-adams-nyc-s...
by qeternity | 2025-11-03 14:26:11+00:00
> Also, all this vector stuff is going to fade away as context windows get larger (already started over the past 8 months or so).

People who say this really have not thought this through, or simply don't understand what the usecases for vector search are.

But even if you had infinite context, with perfect attention, attention isn't free. Even if you had linear attention. It's much much cheaper to index your data than it is to reprocess everything. You don't go around scanning entire databases when you're just interested in row id=X
by 650REDHAIR | 2025-11-03 14:26:36+00:00
That’s been my experience with Google.

They’re too big and no one has the authority to clean it up. I’m honestly shocked we don’t see more account suspensions.

I’ve migrated my businesses to Microsoft’s cloud offerings and they’re also a clusterfuck, but at least I can get real support people on the phone pretty easily (for now…).
by linsomniac | 2025-11-03 14:26:49+00:00
Maybe the tunnel they provisioned for me was just broken, because:

$ host -t A 9c8855f1-e47f-47bf-9e0e-66938be0f076.cfargotunnel.com 9c8855f1-e47f-47bf-9e0e-66938be0f076.cfargotunnel.com has no A record $ host -t AAAA 9c8855f1-e47f-47bf-9e0e-66938be0f076.cfargotunnel.com 9c8855f1-e47f-47bf-9e0e-66938be0f076.cfargotunnel.com has IPv6 address fd10:aec2:5dae:: $ telnet -6 9c8855f1-e47f-47bf-9e0e-66938be0f076.cfargotunnel.com 443 Trying fd10:aec2:5dae::... telnet: Unable to connect to remote host: Connection timed out

I got the cloudflared running fairly easily (though their Debian package repo seemed broken and they didn't have an option listed on the setup page for downloading just the binary, I was able to find it after some searching). That part went smoothly, I just couldn't connect to the tunnel they provisioned.
by catgary | 2025-11-03 14:27:16+00:00
I think this is an interesting direction, but I think that step 2 of this would be to formulate some conjectures about the geometry of other LLMs, or testable hypotheses about how information flows wrt character counting. Even checking some intermediate training weights of Haiku would be interesting, so they’d still be working off of the same architecture.

The biology metaphor they make is interesting, because I think a biologist would be the first to tell you that you need more than one datapoint.
by philipallstar | 2025-11-03 14:27:18+00:00
It's the same as saying "people need food to live; why not raise the price of food indefinitely to have better wages for people who produce food?"

The answer (thank goodness) is: competition.

You are a consumer more than you are a worker. Every industry that brings in automation and reduced costs can offer you goods for less, or pay their workers the same for more. Competition means they tend to choose the former (or, given there's also competition for workers, actually wages go up a bit and prices come down a bit, but there are slightly fewer jobs).
by jaccola | 2025-11-03 14:27:38+00:00
I assume we agree that working less produces less (which reasonable people debate) since otherwise competition from abroad wouldn't be an issue.

If that is the case, then adding trade barriers also doesn't fix anything. Adding the trade barriers would ultimately just produce a lower standard of living. You'd essentially have an isolated system and the system is now producing less, so necessarily there will be less for everyone in the system.

Adding trade barriers also doesn't fix the threat of an adversarial country working 50% more than you for the next 50 years and as a result having the infrastructure to dominate you in numerous ways.
Show HN: Pydoll, a type-safe asyncio lib for evading bot detection
by thalissonvs | 2025-11-03 14:27:42+00:00
Author here. pydoll is my attempt to build a modern Python automation library from first principles, based on asyncio. My main goal was to create a 100% type-safe API over the chaotic Chrome DevTools Protocol.

This was a massive undertaking that involved mapping the entire protocol to Python TypedDicts, which gives the user full IDE autocomplete for every command and event. I wrote about this type-safe architecture here: https://pydoll.tech/docs/deep-dive/fundamentals/typing-syste...

This design was necessary to build the advanced evasion features. To do that, I had to first understand how modern bot detection actually works, which sent me down a deep research rabbit hole. The result is a full technical encyclopedia on multi-layer fingerprinting, which I'm sharing as part of the docs: https://pydoll.tech/docs/deep-dive/fingerprinting/

The core thesis is that modern evasion isn't about randomness, it's about perfect consistency across this entire stack. Pydoll is the tool I built based on that thesis. It's open-source, and I'd love to get any and all technical feedback on the asyncio architecture, the type-safe API, or the research itself.
Show HN: Pianolyze – Learn any piano song using AI/ML, right in the browser
by nickplee | 2025-11-03 14:28:19+00:00
Hey HN,

I'm a pianist who's always been obsessed with understanding how great players think through harmony. What voicings are they using? How do they voice lead through changes? What's actually happening under their hands?

Back in 2022, I built Harmonic Analyzer (https://www.youtube.com/watch?v=iNgSgvUmiOs) – a Mac app that used ML to transcribe polyphonic piano recordings. It got some traction, but I never quite finished it. Requiring users to download a Mac app felt like unnecessary friction, and I didn’t want to limit distribution to Mac users.

I just shipped Pianolyze (https://pianolyze.com), a complete rewrite that runs entirely in the browser.

Tech stack:

• ONNX Runtime hosting Bytedance's piano transcription model (https://github.com/qiuqiangkong/piano_transcription_inferenc...) • Web Workers for async transcription, exposed via Comlink • WebGL for piano roll rendering • Web Audio API for playback • IndexedDB for model caching • React + MobX State Tree

Nothing leaves your device. No servers, no uploads, no inference costs.

Try it: Just drag and drop any solo piano recording (MP3, WAV, FLAC, M4A). The model downloads once (~100MB), and then everything runs locally. It works best with solo recordings; accompaniment can confuse the model. Chrome and Safari work best, on desktop.

I'd love feedback on the UX, performance on different hardware, and how well it handles various recordings. Also happy to discuss the technical approach.

Here it is in action, transcribing the great Mulgrew Miller: https://www.youtube.com/watch?v=sWW-Z9_n8Mk
by toomuchtodo | 2025-11-03 14:28:19+00:00
Google paid $32B for Wiz to try to sell GCP into every org Wiz is embedded in, expect this to continue until those making procurement decisions stop buying Google, which could take...some time.

If you use Google at this point for commercial services, you get what you deserve when they nuke your resources (caveat being services you cannot go elsewhere for, like an Android dev account). The evidence is robust they cannot be relied upon as a commercial services provider. Stop. using. Google.

(thoughts and opinions always my own, I am aware and understand in this context OP needs Google Cloud to integrate with customers in Google Cloud, which is very unfortunate, and so their Sisyphus task continues)
by DrBazza | 2025-11-03 14:28:33+00:00
> I am not sure how we silently got ourselves into this position

Two things:

1. converting all the old Polytechnics to Universities, in 1992, https://en.wikipedia.org/wiki/Universities_in_the_United_Kin...

followed by

2. trying to get '50%' of kids into further education https://www.theguardian.com/uk/1999/mar/08/johncarvel

The state already paid for education to the age of 18. Another 3 years of specialized education costs (the state) more. Getting more kids into HE, costs more even when they fees that are still state subsidized. Hence the increase in unsubsidised foreign students.

It's debatable whether the desired outcome of better educated and 'more employable' 21 year olds was actually achieved, or whether it simply removed a large cohort from the unemployment figures.