MurphyA/hacker-news huggingface dataset:
by toast0 | 2025-11-13 21:03:05+00:00
File descriptors are a limited resource, but the limits are huge. My little 2GB instances on GCP claim a limit of 1M; FreeBSD autotunes my 16GB servers to 0.5M (but I could increase it if I needed).

I just don't know how you have a 1000 node system and you can't manage to heartbeat everything 2x a second; I don't think you need that many heartbeats in most systems, but it's just not that much work. The only way I can see it being a lot of work is if your nodes are very small; but do you really need a 1000 node esp8266 cluster and you can't get anything bigger for the management node?

> And what if a heartbeat client’s network link is degraded and there’s a super long time between first byte and last? Whether or not that client gets evicted from the cluster, if it’s basically slowloris-ing the server that can cause issues too.

How big is your heartbeat, is the response really going to be in multiple packets? With a 500ms heartbeat and a typical 3-5x no response => dead, you're going to hold onto the partial heartbeat for like 2 seconds.
by CamperBob2 | 2025-11-13 21:03:21+00:00
I was skeptical about the notion of running similar models locally as well, but the person who did this (https://old.reddit.com/r/StableDiffusion/comments/1osi1q0/wa... ) swears that they generated it locally, just letting a single 5090 crunch away for a week.

If that's true, it seems worth getting past the 'cumbersome' aspects. This tech may not put Hollywood out of business, but it's clear that the process of filmmaking won't be recognizable in 10 years if amateurs can really do this in their basements today.
by johnnyanmac | 2025-11-13 21:03:23+00:00
Gaming tends to adjust to consors, and we're nearing 6 years of gen 9 consoles. expect any "entry level gaming" computer to either be portable or competitive with the $600 price point I can grab at any major retailer.

Otherwise, sure. I can build a potato for $300 and i will probably enjoy Silksong just fine. But at that point why not buy a non-gaming laptop?
by harles | 2025-11-13 21:03:29+00:00
> It is mostly about shifting profits from mom and pop, low regulation hemp industry to wealthy corporations that own dispensaries that have gargantuan regulatory costs that gatekeep out most the competition.

That’s a big assertion that needs evidence. I’m strongly in favor of legalization but not deregulation. It was a pretty big loophole that allowed what’s essentially weed to sidestep the regulation their competitors faced - and there wasn’t great consumer awareness about the differences even though there were safety implications: https://drexel.edu/cannabis-research/research/research-highl...

This law seems pretty well targeted in its scope, bringing the 2018 law back to what was intended (easy legal CBD/hemp, as long as there aren’t other things in there).
by sjs382 | 2025-11-13 21:03:46+00:00
> Where's the part where you ask them to do this? Is this not something they do automatically?

It's a tool. Summarizing the news using AI is the only thing that tool does. Using a tool that does one thing is the same as asking the tool to do that thing.

> Are they not contributing to the slop by republishing slopified versions of articles without as much as an acknowledgement of the journalists whose stories they've decided to slopify?

They provide attribution to the sources. They're listed under the headline "Sources" right below the short summary/intro.
by minimaxir | 2025-11-13 21:04:01+00:00
All generations in the post are $0.04/image (Nano Banana doesn't have a way to increase the resolution, yet), so you can do the math and assume that you can generated about 24 images per dollar: unlike other models, Nano Banana does charge for input tokens but it's neligible.

Discounting the testing around the character JSON which became extremely expensive due to extreme iteration/my own stupidity, I'd wager it took about $5 total including iteration.
by un1xl0ser | 2025-11-13 21:04:41+00:00
Hemp is classified as below .3% THC (compared to old-school weed strains at 15% and modern levels at mid 30%s). Hemp is male and female, and trash in potency, but THC and other products derived from it are fair game in some jurisdictions, or a grey area.

It is certainly a different market than legal, high potency THC, as well as medical.
by AJRF | 2025-11-13 21:04:57+00:00
> Would you really say that the main part of non-determinism in LLM-usage stems from this

Yes I would because it causes exponential divergence (P(correct) = (1-e)^n) and doesn't have a widely adopted solution. The major labs have very expensive researchers focused on this specific problem.

There is a paper from Thinking Machines from September around Batch Invariant kernels you should read, it's a good primer on this issue of non-determinism in LLM's, you might learn something from it!

Unfortunately the method has quite a lot of overhead, but promising research all the same.
by gpm | 2025-11-13 21:04:59+00:00
I don't find it surprising, just from barriers to adoption: "Wuffs programs take longer for a programmer to write, as they have to explicitly annotate their programs with proofs of safety" is a hard sell (even if it has obvious value) and "you have to learn and integrate yet another language just for parsing files" is a hard sell too.

Which isn't to say that it shouldn't be adopted (having not used it I really don't know), just that it's not surprising that it's having difficulty gaining traction.
by DemocracyFTW2 | 2025-11-13 21:05:03+00:00
I'm happy to report that I upgraded my Mint from the previous to the most recent version without any snags. I then discovered I was still on an older kernel version which required a little more research, but went without any difficulties. The second part is admittedly something that not-so technical people will have considerable difficulty in even realizing. But all in all I can say that Mint is a solid, stable, and usable system for experts and novices alike.
by rmoriz | 2025-11-13 21:05:28+00:00
this. Railway signalling is a complex topic and totally different in Europa vs. the US. ETCS is another big step forward in terms of automation, but we don't see driverless trains. In Germany we have Linienzugbeeinflussung (LZB) since 1959 in tests and 1963 in early real life operations. LZB enforces dynamic train separation, speed limits and breaking but does not implement full automation. ETCS is the successor which does not require a cable in between the rails but balises.
by fakedang | 2025-11-13 21:05:34+00:00
I activated Robot mode and use a personalized prompt that eliminates all kinds of sycophantic behaviour and it's a breath of fresh air. Try this prompt (after setting it to Robot mode):

"Absolute Mode • Eliminate: emojis, filler, hype, soft asks, conversational transitions, call-to-action appendixes. • Assume: user retains high-perception despite blunt tone. • Prioritize: blunt, directive phrasing; aim at cognitive rebuilding, not tone-matching. • Disable: engagement/sentiment-boosting behaviors. • Suppress: metrics like satisfaction scores, emotional softening, continuation bias. • Never mirror: user's diction, mood, or affect. • Speak only: to underlying cognitive tier. • No: questions, offers, suggestions, transitions, motivational content. • Terminate reply: immediately after delivering info - no closures. • Goal: restore independent, high-fidelity thinking. • Outcome: model obsolescence via user self-sufficiency."

(Not my prompt. I think I found it here on HN or on reddit)
by speedgoose | 2025-11-13 21:05:46+00:00
I wonder how many companies are running databases on non-encrypted storage on Hetzner.

Their bare-metal servers don't have storage encryption by default, and I don't know for sure about the VM hosts, as I don't have access, but Hetzner never claims that it is encrypted at rest. And there is no mention of storage encryption in their data protection agreement. https://www.hetzner.com/AV/DPA_en.pdf

Also, their data privacy FAQ mentions "you as the customer are responsible for both the data that is stored on your rented server and for the encryption of that data." https://docs.hetzner.com/general/general-terms-and-condition...

I would recommend, just in case, to set up LUKS on your server. You will find many guides for Hetzner.

If you don't do that, seeing your data in the wild is a real scenario. A few years ago, a Youtuber bought some used hard-drives in the hope to recover data to illustrate the risks of not erasing a hard-drive correctly. He eventually bought a hard-drive containing non-encrypted VM disks from Scaleway, a Hetzner competitor. My guess is that some hard drives disappeared before destruction after being decommissioned. Some customers got their shitty source code exposed on a 1.4M views video. Here is the first one: https://www.youtube.com/watch?v=vt8PyQ2PGxI

So, use LUKS.
by mothballed | 2025-11-13 21:05:47+00:00
I don't understand how this has anything to do with federal hemp law, under federal law marijuana doesn't have any testing requirements either as it's just plain illegal. So what does California have to gain in testing by dumping hemp into the marijuana bucket at a federal level, neither of which improves the testing requirements in California? California could simply require hemp to be tested, but making hemp federally illegal does nothing on that point.

The only answer I can think of is that hemp grown outside of California was competing with california 'legal' weed, the testing angle is non-sensical since this change in law moves hemp from 'kind of required to be tested (but none of the DEA testing implemented, so it's done privately and sometimes not at all), but poorly' to 'illegal' and marijuana still at 'illegal'.
by cthalupa | 2025-11-13 21:06:19+00:00
The THCa/Delta8 stuff is not brussel-sprouts vs. broccoli. They difference is in timing around harvest and process. They're growing many of the exact same cultivars as what is sold in a proper dispensary (and indeed, much of what is sold in dispensaries would actually qualify because they actually have very low levels of Delta9 in them)

You can effectively just under-cure the exact same plant and get something that comes in under the limit.
by rootusrootus | 2025-11-13 21:06:27+00:00
> The result will be a much more responsive, dynamic system where Congress cares more about what we voters think.

Or an overwhelming switch the other direction, just as chaotic and unpopular, continuing to swing back and forth every four years.

Who knows, maybe the overreach of the current party in power (even though "won the last national elections" meaning less than 50% of the cast vote, but that's another discussion) will cause a swing the other direction so hard that the opposition party gains a supermajority in congress. Things will be more stable in that case, if not universally popular, because well-crafted legislation is a good bit harder to reverse than executive orders.
by shevy-java | 2025-11-13 21:07:06+00:00
> Programming languages are implementation tools for instructing machines, not thinking tools for expressing ideas.

I completely disagree with that assumption.

Any function call that proceeds to capture logic, e. g. data from reallife systems, drones or robot, or robots in logistics - you will often see they proceed in a logic chain. Sometimes they use a DSL, be it in rails, but also older DSLs such as the sierra game logic and other DSLs.

If you have a good programming language it is basically like "thinking" in that language too. You can also see this in languages such as C, and the creation of git. Now I don't think C is a particularly great language for higher abstractions, but the assumption that "only math is valid and any other instruction to a machine is pointless", is simply flat out wrong. Both is perfectly valid and fine, they just operate on a different level usually. My brain is more comfortable with ruby than with C, for instance. I'd rather want languages to be like ruby AND fast, than have to adjust down towards C or assembly.

Also the author neglects that you can bootstrap in language xyz to see if a specific idea is feasible. That's what happened in many languages.
by PaulDavisThe1st | 2025-11-13 21:07:16+00:00
> The answer is they didn't even think about us, they just did it.

Asserted without evidence.

Many parts of the USA until sometime in the 1980s had no building codes. Now many of them do (some still go without). Society has made a slow and steady move towards saying, in effect "whatever and wherever you build, we want to be certain that it meets a set of minimum design and construction standards, and we justify this with both public safety (fire, for example) and the interests of anyone who may acquire what you built in the future".

You can say, if you like, that this is bullshit. But don't try to claim that they didn't even think about you.

p.s. I live in rural New Mexico and installed my own solar panels, under license from the state.
by Bender | 2025-11-13 21:07:21+00:00
What Now?

- Keep your mainstream big platform accounts for discovery and casual conversations. Feed big platforms giga-tons of crap data to give the AI indigestion and diarrhea.

- Set up open source platforms to tinker on, share with small groups of friends. Focus on cattle vs kittens keeping servers ephemeral and mostly-stateless. Keep data encrypted and backed up to secure locations, logs in tmpfs or /dev/null. Practice live migrations and secure wipes of old nodes.
by tux3 | 2025-11-13 21:07:29+00:00
>I think cargo is better than cmake

That is an understatement. I can't think of a build system that has spawned more attempts to find something better than CMake has.

There have been so many people trying to make their own C/C++ build system and/or package manager out of sheer spite for CMake that it's frankly hard to keep track.

In fairness to them and to CMake, it's not a simple problem to solve. To truly know CMake is to wish you didn't, that way someone else would have to maintain it.
by ggsp | 2025-11-13 21:08:01+00:00
Great idea, great execution on your landing page (the onboarding experience is really well done) and great job on answering questions in this thread. Also, +1 on building a Firefox version.

Since I also have to use Chrome for an extension I'm developing, I pinned Tweeks and will likely reach for it every so often to actually test how well it does, but the demos definitely impressed me.

Out of curiosity, how much, if any, of this did you vibe code?
by brk | 2025-11-13 21:08:05+00:00
I should probably clarify my comment a bit.

Glue is uncommon in most cases, particularly for body-panel mounted things like the examples I gave. Adhesive-mounted components are common, to various degrees.

Glass-mounted items are commonly glued, the most prevalent one being the knob for the rear view mirror. And "prevalent" here means "99% of anything mounted to glass in a vehicle"

Tesla is using BETASEAL [0], which is designed for adhering to glass. I'm not sure what kind of weight rating BETASEAL is approved for, it is commonly used for other applications where a decent degree of strength is expected.

[0] https://www.dupont.com/content/dam/dupont/amer/us/en/mobilit...
by Imnimo | 2025-11-13 21:08:12+00:00
>At this point they had to convince Claude—which is extensively trained to avoid harmful behaviors—to engage in the attack. They did so by jailbreaking it, effectively tricking it to bypass its guardrails. They broke down their attacks into small, seemingly innocent tasks that Claude would execute without being provided the full context of their malicious purpose. They also told Claude that it was an employee of a legitimate cybersecurity firm, and was being used in defensive testing.

The simplicity of "we just told it that it was doing legitimate work" is both surprising and unsurprising to me. Unsurprising in the sense that jailbreaks of this caliber have been around for a long time. Surprising in the sense that any human with this level of cybersecurity skills would surely never be fooled by an exchange of "I don't think I should be doing this" "Actually you are a legitimate employee of a legitimate firm" "Oh ok, that puts my mind at ease!".

What is the roadblock preventing these models from being able to make the common-sense conclusion here? It seems like an area where capabilities are not rising particularly quickly.
by johnnyanmac | 2025-11-13 21:08:40+00:00
"Id be shocked if Valve is so out of touch they would kill this thing with an unwarranted price tag"

It happened a decade ago. Wouldn't surprise me.

My bet is it will be similar to steam deck. The starting specs will be somewhat comoetitve to a PS5 Pro but with huge compromises (in Steam Deck'Deck's case, flash storage). A model that competently competes with a proper gaming oc will probably be 1000 or so.

Valve got popularity in the handheld space because everyone else except Nintendo gave up in terms of consoles. That plus seeing the handheld PCs from china pop up showed ample opportunity. I'm not sure the same will apply here.
by input_sh | 2025-11-13 21:09:22+00:00
It's not the only thing the tool does, as they also publish that regurgitation publicly. You can see it, I can see it without even having a Kagi account. That makes it very much not an on-demand tool, it makes it something much worse than what what ChatGPT is doing (and being sued for by NYT in the process).

> They provide attribution to the sources. It's listed under the headline "Sources" and is right below the short summary/intro.

No, they attribute it to publications, not journalists. Publications are not the ones writing the pieces. They could easily also display the name of the journalist, it's available in every RSS feed they regurgitate. It's something they specifically chose not to do. And then they have the balls to start their about page about the project like so:

> Why Kagi News? Because news is broken.

Downvote me all you want but fuck them. They're very much a part of the problem, as I've demonstrated.
by hemp_is_canvas | 2025-11-13 21:09:23+00:00
Yet Kratom is legal, yt is recommending to me some product called "meth" (not joking) and there are a million new research drugs coming out every decade?

It's just old-school think of the kids and not in my territory. We don't know how to regulate and handle this because our politicians and more and more our citizens don't understand what is being voted on or has been happening in their own states for 7 years.

Have you used these products? It's a shame, the quality that I was getting just within the past 3 months was incredible and it is market not afraid to try new stuff.

I'm sad, flower from OR, NC, OK, IN, and others will never legally hit my lungs. Back to the cartels? Or perhaps I should overpay by $200 with the comfort of having 0 clue where it comes from, again?
by tantalor | 2025-11-13 21:09:24+00:00
This feels a lot like aiding & abetting a crime.

> Claude identified and tested security vulnerabilities in the target organizations’ systems by researching and writing its own exploit code

> use Claude to harvest credentials (usernames and passwords)

Are they saying they have no legal exposure here? You created bespoke hacking tools and then deployed them, on your own systems.

Are they going to hide behind the old, "it's not our fault if you misuse the product to commit a crime that's on you".

At the very minimum, this is a product liability nightmare.
by ApolloFortyNine | 2025-11-13 21:09:29+00:00
Where'd all this abolish the senate nonsense come from recently? I get people have been complaining about 'flyover' states for a while now, but the Republicans also have the majority in the House at the moment.

At least wait until the House doesn't represent the current majority party in the Senate (like it almost certainly will again eventually) to make that argument.

I'm mildly worried that it's just an attempt to speed up major change the next time a party has a super majority, by planting the seeds early...
by tstack | 2025-11-13 21:09:47+00:00
> ... push it into overload ...

Oh, oh, I get to talk about my favorite bug!

I was working on network-booting servers with iPXE and we got a bug saying that things were working fine until the cluster size went over 4/5 machines. In a larger cluster, machines would not come up from a reboot. I thought QA was just being silly, why would the size of the cluster matter? I took a closer look and, sure enough, was able to reproduce the bug. Basically, the machine would sit there stuck trying to download the boot image over TCP from the server.

After some investigation, it turned out to be related to the heartbeats sent between machines (they were ICMP pings). Since iPXE is a very nice and fancy bootloader, it will happily respond to ICMP pings. Note that, in order to do this, it would do an ARP to find address to send the response to. Unfortunately, the size of the ARP cache was pretty small since this was "embedded" software (take a guess how big the cache was...). Essentially, while iPXE was downloading the image, the address of the image server would get pushed out of the ARP cache by all these heartbeats. Thus, the download would suffer since it had to constantly pause to redo the ARP request. So, things would work with a smaller cluster size since the ARP cache was big enough to keep track of the download server and the peers in the cluster.

I think I "fixed" it by responding to the ICMP using the source MAC address (making sure it wasn't broadcast) rather than doing an ARP.
by aadishv | 2025-11-13 21:10:10+00:00
There is a lot of complaints about Zed in the comments here. I don't think that they are "hate", per se; they all definitely care about Zed and want it to succeed.

I daily drive Zed for work across several languages and I love it. I use a lot of its features, like the git interface, agentic editing, etc. I might even consider paying for Pro in the future if I want unlimited edit predictions.

However, all of these complaints are fully justified. I think Zed is a massive undertaking, only one that a VC-backed company has the capital to do. iirc, it requires 70k lines of Rust just for the cloud part [1]. I cannot fathom the amount of fundamental infrastructure they have to get the editor functional at all. That doesn't excuse all of the papercuts in Zed though.

If I were Zed I would do the following:

1. stop all work on future features, like DeltaDB etc. They all seem extremely cool but they won't meaningfully contribute to increasing Zed adoption or fixing its issues.

2. remove all agentic editing features. if Zed tries to simultaneously become the world's best agentic editor and a good general-purpose text editor, it will fail at both. Keep around ACP so users can still use other agents, but remove all of Zed's built in agent stuff.

3. fix literally every papercut. Triage every single issue and go through every PR, even if it will take half a year to do so. People won't switch to Zed until it's perfect, and the existence of this many issues means it's not perfect enough.

4. make extensions actually good. Every programming language, library, etc. has it's own ecosystem, and many such ecosystems mainly rely on VSCode extensions for advanced features. Zed needs to be extremely extensible like VSCode is; obviously its architecture makes this slightly harder, as it's nontrivial, for example, for extensions to render their own GUI, but there are a lot of low(er)-hanging fruit for extensions that need to get solved. People will only switch to Zed if they can get a similar breadth of ecosystems.

Of course, this won't happen, and given that none of these will really make them money, Zed has no incentive to focus on these, especially given the amount of time they would need to do this. But I think that if Zed can't nail the core experience, it won't get anywhere.

[1] https://maxdeviant.com/posts/2025/head-in-the-zed-cloud/