MurphyA/hacker-news huggingface dataset:
by sothatsit | 2025-11-24 23:31:08+00:00
Code quality is still a culture and prioritisation issue more than a tool issue. You can absolutely write great code using AI.

AI code review has unquestionably increased the quality of my code by helping me find bugs before they make it to production.

AI coding tools give me speed to try out more options to land on a better solution. For example, I wrote a proxy, figured out problems with that approach, and so wrote a service that could accomplish the same thing instead. Being able to get more contact with reality, and seeing how solutions actually work before committing to them, gives you a lot of information to make better decisions.

But then you still need good practices like code review, maintaining coding standards, and good project management to really keep code quality high. AI doesn’t really change that.
by consumer451 | 2025-11-24 23:31:43+00:00
I have a side-project prototype app that I tried to build on the Gemini 2.5 Pro API. I have not tried 3 yet, however the only improvements I would like to see is in Gemini's ability to:

1. Follow instructions consistently

2. API calls to not randomly result in "resource exhausted"

Can anyone share their experience with either of these issues?

I have built other projects accessing Azure GPT-4.1, Bedrock Sonnet 4, and even Perplexity, and those three were relatively rock solid compared to Gemini.
by dathinab | 2025-11-24 23:31:46+00:00
never fully, like with GPU, it a semi-cartel, it's in everything including you high performance SSD (as cache) they have a reason for them being supper high for ~2 years then they will go down but only "somewhat", lets say if the peak it >2x pricing the price in 2027 will be ~1.5x-1.8x price.

And because everything needs prices expect all electronics to be ~20%-80% more expensive in 2027 compared to today, naturally this includes the profit margin.

and naturally every regulation related companies don't like will supposedly be at fault for this (e.g. right to repair)

at least that is a wild speculation on my side
by Terr_ | 2025-11-24 23:32:46+00:00
I assume "couple of" was figurative, to indicate the cost is substantially less than managing your own bank of SSDs and ensuring it is periodically powered etc.

[Edit: LOL, I see someone else posted literally the same example within the same minute. Funny coincidences.]

That said, they could also be storing relatively small amounts. For example, I back up to Backblaze B2, advertised at $6/TB/month, so ~300 MB at rest will be a "couple" bucks.
by fragmede | 2025-11-24 23:32:49+00:00
The sentiment that "Linux is only free if your time has no value" may not have aged well, but the wisdom behind that remains. When you're fifteen years old and have all the time in the world, the idea of charging people money for your expertise and time, and then using that money to pay for goods and services, is often misunderstood. I didn't understand shit about money or business or people at that age, and I'm sure I'll look back at me now in twenty years and also see how stupid I am being. At the root of it, though, is that we could do a better job of teaching the kids how the world works. If people want to build it themselves, more power to them. When they come to understand the exchange of money for (someone else's) time, so they don't have to spend the time learning it themselves, they'll be a little less salty.
Show HN: Bringing stacked diff workflow to Perforce
by kai2006 | 2025-11-24 23:33:20+00:00
Hi HN!

I've been talking to a few engineers about how Perforce (verion control tool for large binary files) doesn't support stacked changelists, and how everyone just create massive changelists instead of trying to split them up into smaller, more reviewable chunks.

So I build p4-stack, a CLI tool in Python that brings the git rebase-style workflow to Perforce. It's ultra simple, and I'd love to hear what you think!

I also included a 90s demo of the tool at the front of README.md
by zahlman | 2025-11-24 23:34:24+00:00
> If people stop running install scripts, isn't Shai-Hulud 3: Electric Boogaloo just going to be designed to run its obfuscated malware at runtime rather than install time?

Many such forms of malware have already been published and detected.

> Who manually reviews new versions of their project dependencies after installing them but before running them?

One person putting in this effort can protect everyone thereafter.

The PyPI website has a "Report project as malware" button on each project page for this purpose.

But yes, this is the world we live in. Without this particular form of insecurity, there is no "ecosystem" at all.
by l2silver | 2025-11-24 23:34:39+00:00
Memorizing and tests at school are the archaic approach that schools don't believe in anymore (at least the school board my kids are at), but they happen to be AI proof.

It's the softer, no memorizing, no tests, just assignments that you can hand in at anytime because there's no deadlines, and grades don't matter, type of education that is particularly useless with AI.
by VorpalWay | 2025-11-24 23:35:01+00:00
Channels and RCU can often be better for performance as well. I have run into scaling issues due to contention way too many times. Sometimes just because two things were in different parts of the same cache line.

Sharing as little mutable state as possible is often the best way to scale to a large number of CPU cores. RCU can help with that if you have data that is mostly read but rarely written. If your workload is balanced or even write heavy RCU is probably not a good option.

I have even had to redesign because I had too much contention on plain old atomic reference counters, almost 30 % of my runtime was reference counting of a small number of specific Arcs, and hardware performance counters pointed at cache line contention. I redesigned that code to avoid Arcs entirely which also allowed some additional optimisations, resulting in cutting approximately 40 % of my runtime in total.

So, each specific use case should be approached individually if you care about performance. And always profile and benchmark. If the code isn't performance critical, by all means do what you think is most maintainable. But measure, because you are probably wrong about what part of your code is the bottleneck unless you measure.
by throwaway2037 | 2025-11-24 23:35:33+00:00
> Manufacturers don't actually want too many extremely long term contracts because it would limit their ability to respond to market price changes.

I don't agree with this sentence. Why would not the same apply advice to oil and gas contracts? If you look at the size and duration of oil and gas contracts for major energy importers, they often run 10 years or more. Some of the contracts in Japan and Korea are so large, that a heavy industrial / chemical customers will take an equity stake in the extraction site.

Except silicon, power, and water (and a tiny amount of plastic/paper for packaging), what else does a fab need that only produces DRAM? If true, then power is far and away the most variable input cost.
by Barrin92 | 2025-11-24 23:36:00+00:00
>We all had supercomputers in our pockets.

You still do. There is no "AI movement" you need to participate in. You can grab a copy of SICP and a banged up ten year old thinkpad and compute away, your brain will thank you. It's like when people complain that culture is unaffordable because the newest Marvel movie tickets cost 50 bucks, go to the library or standardebooks.org, the entire Western canon is free
by zahlman | 2025-11-24 23:36:45+00:00
> wasn't the very concept of "libraries" created to not have to think about what exactly the code does?

If you care about security, you only have to care once, during the audit. And you can find a pretty high percentage of malware in practice without actually having a detailed understanding of the non-malicious workings of the code.

Libraries allow you to not think about what the code does at development time, which in general is much more significant than audit time. Also, importantly, they allow you not to have to design and write that part of the code.
by PaulKeeble | 2025-11-24 23:37:53+00:00
We really don't know. One thing I wish some of these sites would do is actually test how long it takes for the drives to decay and also do a retest after they have been left powered for say 10 minutes to an hour, read completely, written to a bit etc and see if they can determine what a likely requirement is.

The problem is the test will take years, be out of date by the time its released and new controllers will be out with potentially different needs/algorithms.
by Terr_ | 2025-11-24 23:38:00+00:00
Recently started fiddling with restic and B2, it worked fairly seamlessly once I stopped trying too hard being fancy with permissions and capabilities (cap_dac_read_search). There were some conflicts trying to have both "the way that works interactively" [0] versus "the way that works well with systemd". [AmbientCapabilities=]

One concern I have is B2's downloading costs means verifying remote snapshots could get expensive. I suppose I could use `restic check --read-data-subset X` to do a random spot-check of smaller portions of the data, but I'm not sure how valuable that would be.

I like how it resembles LUKS encryption, where I can have one key for the automated backup process, and a separate memorize-only passphrase for if things go Very Very Wrong.

[0] https://restic.readthedocs.io/en/latest/080_examples.html#ba...
by brokenmachine | 2025-11-24 23:38:19+00:00
You're right — I got that wrong. Ah, I misunderstood what you were asking. Good catch — I miscalculated there. You're right — the code I provided won’t run as written. I made an assumption that wasn’t supported by your question. My previous answer was incomplete. Thanks for the example — you’re correct. Yes, that was inconsistent. With that additional information, my earlier answer no longer applies. You're absolutely right to question that.

Lol!
by sunshine-o | 2025-11-24 23:38:43+00:00
I was looking at the packages affected and there are some recognizable names.

The ones that got my attentions are the @ensdomains/*, that are the legit packages and are probably in every Ethereum/EVM/blockchain related apps for the resolution of decentralized domain names.

A quick search shows those Ledger hardware wallet use those libs too [0]

So I guess they weren't just after API keys.

- [0] https://github.com/search?q=org%3ALedgerHQ%20%40ensdomain&ty...
by bigbadfeline | 2025-11-24 23:39:17+00:00
> Which makes me think they haven't thought this through and are just overreacting.

You're contradicting yourself. If "they haven't thought this through" they clearly haven't been paranoid enough but in that case they aren't overreacting, they're under-reacting. They need to transfer development out of the EU, not just out of France. That's one unexpected benefit of Brexit, btw.
by ben_w | 2025-11-24 23:39:23+00:00
I'm a massive weirdo, what I like and dislike is almost anti-correlated with public success, or at least success in American markets.

You should therefore be unsurprised to learn that I laughed about the sink and had a completely neutral reaction to the chainsaw (other than who it was in support of). I should have noticed in advance that my reactions were warning signs. Unfortunately, I can also add the visual design of Cybertruck to that list — not that I'd want it on the road, obvious safety hazard from the shape, but I liked the look of it.
by wakawaka28 | 2025-11-24 23:39:27+00:00
I'm inclined to agree with him. I've had comments mass downvoted here and on Reddit over Rust criticism. It's not even symmetrical either, because the threshold to be able to downvote is 500 points. I'll never get to that level (or stay there) unless I stick to very milquetoast takes on things. I shouldn't care but it's unfair and annoying. At one point I even lost the theme feature because I made a few unpopular comments in a row and got like 50 downvotes in a short time. The way the votes are tabulated is also confusing. It is not one to one. It's like, the downvoted posts contribute more than the sum total of the downvotes, based on the replies.
by Telaneo | 2025-11-24 23:39:32+00:00
And this is before you get into people who for most intents and purposes apparently can read, but their brain grinds to a halt when a computer requires them to do that very same activity and act accordingly. I'm not sure of those people have a similar problem of functional illiteracy, or if it's a problem of a different kind, but it sure is real and sure keeps happening.
by ethin | 2025-11-24 23:39:51+00:00
NVMe has read recovery levels (RRLs) and two different self-test modes (short and long) but what both of those modes do is entirely up to the manufacturer. So I'd think the only way to actually do this is to have host software do it, no? Or would even that not be enough? I mean, in theory the firmware could return anything to the host but... That feels too much like a conspiracy to me?
by eterm | 2025-11-24 23:40:05+00:00
You could say the same about anything, but cheating in multiplayer ruins the experience for others. Cheating in single-player? Great, we call those mods, but in a multiplayer game I'm happy to think of OP as a piece of shit for not just cheating but writing the cheats for others.

Even if it's just indirect competition, by giving yourself an advantage compared to others you affect what others percieve as a healthy benchmark for performance.

"Just neopets" isn't an excuse, you could say the same for any online game.

Cheaters even wreck just the scoreboards for some games. You might think a fake score submissions is about the least damaging thing since it doesn't directly effect others gameplay at all, but it still ruins the experience and affects the community's ability to compare and share genuine runs.

Being banned eventually is hardly a punishment, doubly so if they ever sold-on their ill-gotten gains for real money.

There wasn't a hint of contrition in OP's post, and the downvotes I'm receiving suggests that the culture of entitlement is so great now that cheating in multiplayer isn't even seen as bad anymore.
by eddd-ddde | 2025-11-24 23:40:14+00:00
I absolutely hate companies thinking they are being smart by blocking foreign IPs from using their websites.

Every single time I want to order a burger from the local place, I have to use a VPN to fake being in the country (even though I actually am already physically here) so that it will let me give them my money.

My phone's plan is not from here, so my IP address is actually not geographically in the same place as me.
by thaumasiotes | 2025-11-24 23:40:28+00:00
Do you think I'm misunderstanding something other than that I'm not drawing the same distinction between proto-Germanic and "paleo-Germanic" that that paper appeals to?

You've quoted something that says after proto-Germanic had diversified, daughter lineages left southern Scandinavia to establish themselves elsewhere in the world.

But I pointed out a completely different idea in the paper, that before proto-Germanic diversified, about 2000 years before the time you mention, its speakers arrived in Scandinavia from "the northeast coast of the Baltic".
by gwd | 2025-11-24 23:41:09+00:00
You mean to be sarcastic, but there's a good chance it may. When I was recovering from my first marriage, during which I was pretty heavily gaslit, having rational, analytical assessments of my wife's behavior by third parties was actually really helpful for me to recover.

His wife has no doubt spent years of her life being gaslit as well, being conditioned to doubt her assessments of what's normal and to feel guilty for suspecting him, for resenting him, for wanting something better. I doubt she'll ever read what I wrote, but there's a non-zero chance it would be helpful to have my take on it.
by wahern | 2025-11-24 23:41:35+00:00
I've been using OpenBSD and PF for nearly 25 years (PF debuted December 2001). Over those years there have been syntax changes to pf.conf, but the most disruptive were early on, and I can't remember the last syntax change that effected my configs (mostly NAT, spamd, and connection rate limiting).

During that time the firewall tool du jour on Linux was ipchains, then iptables, and now nftables, and there have been at least some incompatible changes within the lifespan of each tool.

OpenBSD has an additional leg up in that incompatible changes between releases are concisely, clearly, and consistently documented, e.g. https://www.openbsd.org/faq/upgrade78.html The last incompatible pf.conf syntax change I could find was for 6.9, nearly 5 years ago, https://www.openbsd.org/faq/upgrade69.html
by paul7986 | 2025-11-24 23:41:56+00:00
A close friend (lonely no passion seeking deeper human connection) went deep six into GPT which was telling her she should pursue her 30 year obsession with a rock star. It kept telling to continue with the delusion (they were lovers in another life which she would go to shows and tell him they need to be together) and saying it understood her. Then she complained in June or so she didnt like GPT 5 because it told her she should focus her energy on people who want to be in her life. Stuff her friends and I all have said for years.
by lukeinator42 | 2025-11-24 23:45:32+00:00
Scalp-recorded EEG does not measure action potentials, it can only measure the graded potentials of basically one type of neuron (pyramidal cells) in the cortex, which is a really tiny percentage of both neurons and electrical activity in the brain. Additionally, there is also the various roles neurotransmitters play in the brain, etc., and glial cells seem to also play an important role. So, it’s definitely not the case that there aren’t any gaps that need new science, and even if there weren’t, it’s a pretty big stretch from there to decoding all brain activity solely through the electrical component.
by WheelsAtLarge | 2025-11-24 23:45:43+00:00
I’ve worked on major website redesigns, and there’s so much more to it than just refreshing a few screens. A big redesign is kind of like making a 90min film that costs over $100 million. What you see on the surface is only a small part of the effort. Behind every large website there are teams of experts and consultants. $96 million sounds like a lot, but so is the amount of work required to build or rebuild a site at that scale. It’s easy for people who aren’t familiar with the process to guess what it "should" cost, but without understanding the complexity, those guesses are usually way off. And of course, technology and tech workers are expensive. Sometimes even the initial consulting can run close to a million+ dollars.

Every now and then, we see a post on HN where someone claims they've recreated a well-known website in a short time. But they really haven’t. What they’ve done is copy a handful of screens and maybe a couple of data flows that work for a few test users with no fault tolerance, security, or scalability. Building or updating a hardened, website is far more difficult and far more expensive than anything a small team can spin up quickly. It's expensive and time consuming. Was there some small waste? Yes, I almost guarantee it. But fraud? $96m is a lot of money but without understanding the work that's gone into it, there's no way to know if there was fraud in the cost.
by kai2006 | 2025-11-24 23:46:05+00:00
Looks really cool. It feels like a response take about 3 seconds once the UI switch from "listening" to "thinking" to get a response played on my headphones (bluetooth, so maybe that add latency). Something feels a bit canny when I don't say anything yet, and the AI persona look dead straight into the camera smiling at me. What tech stack are you using under the hood?
by lazide | 2025-11-24 23:46:15+00:00
The entire approach is different. Especially with Taiwanese engineers, their entire focus is whatever work they are doing. Everything else (quite literally), their wives handle.

Americans typically ask for things like work life balance, non abusive working hours, etc. they also don’t (anymore) have the type of family life setup that allows them to actually focus so much - being pulled into child care duties, or taking care of family members, or whatever their next vacation should be, etc.

The general attitude is also more ‘yeah whatever’ to some extent.

The amount of singular obsessive engineering you get out of one vs the other is hard to compare.
by consumer451 | 2025-11-24 23:46:17+00:00
Related:

> Claude Opus 4.5 in Windsurf for 2x credits (instead of 20x for Opus 4.1)

https://old.reddit.com/r/windsurf/comments/1p5qcus/claude_op...

At the risk of sounding like a shill, in my personal experience, Windsurf is somehow still the best deal for an agentic VSCode fork.
by em-bee | 2025-11-24 23:46:24+00:00
don't they choose to live in SF because that's where they got the job? if they would move they would lose the job, because you generally can't take your job with you. (remote work being the exception)

if life in a place is expensive, and jobs in the same area do not pay enough to cover those expenses, then a person with that job in that area is poor.
by dale_glass | 2025-11-24 23:46:57+00:00
So on the off-chance that there's a firmware engineer in here, how does this actually work?

Like does a SSD do some sort of refresh on power-on, or every N hours, or you have to access the specific block, or...? What if you interrupt the process, eg, having a NVMe in an external case that you just plug once a month for a few minutes to just use it as a huge flash drive, is that a problem?

What about the unused space, is a 4 TB drive used to transport 1 GB of stuff going to suffer anything from the unused space decaying?

It's all very unclear about what all of this means in practice and how's an user supposed to manage it.
by giobox | 2025-11-24 23:47:03+00:00
The inventor of markdown, John Gruber (yes that John Gruber of daringfireball fame) has always distanced himself from any efforts to make it a "standard" too, in part why we ended up with the name "CommonMark" for that project...

> https://daringfireball.net/projects/markdown/

> https://blog.codinghorror.com/standard-markdown-is-now-commo...
by germinalphrase | 2025-11-24 23:48:06+00:00
In this case, the school was providing chromebooks so Google Docs were the default option. Using a different computer isn’t inherently a negative signal - but if we are already talking about plagiarism concerns, I’m going to start asking questions that are likely to reveal your understanding of the content. If your understanding falters, I’m going to ask you to prove your abilities in a different way/medium/etc.

In general, I don’t really understand educators hyperventilating about LLM use. If you can’t tell what your students are independently capable of and are merely asking them to spit back content at you, you’re not doing a good job.
by ben_w | 2025-11-24 23:48:40+00:00
Was the USA failing before Trump took power? Most would say no. World's largest economy, and while it did have problems the nation was still an aspiration for many outside it.

Now it looks like the aspirations go elsewhere. And they do so because the cuts increased the problems, they did not save anything.

Core point aside, a nit to pick:

> the canary in the coal mine is yowling yet people do not listen

If the canary is making a noise, the coal mine is safe. They get sick and die quickly in bad air.
by Terr_ | 2025-11-24 23:49:08+00:00
That very well might be true for some of my family members, I'll have to ask. Perhaps not in terms of a career, but certainly in terms of computer literacy.

For me, it was the game Starseige:Tribes (1998), which had a (comparatively) phenomenal client-side scripting scene. I could learn the magic incantation, and now the HUD has a new box with a timer in it, or my character "speaks" new phrases--not intended by the designers--by interrupting existing canned phrases at the right times, etc.

There's something magical when skill-learning happens really close to a personal payoff from it.