MurphyA/hacker-news huggingface dataset:
by bob1029 | 2025-11-02 13:23:05+00:00
To fully describe client side state you also need to look at DOM and cookies. The server can effectively see this stuff too (e.g., during form post).

I design my SSR apps so that as much state as possible lives in the server. I find the session cookie to be far more critical than the URL. I could build most of my apps to be URL agnostic if I really wanted to. The current state of the client (as the server sees it) can determine its logical location in the space of resources. The URL can be more of an optional thing for when we do need to pin down a specific resource for future reference.

Another advantage of not urlizing everything is that you can implement very complex features without a torturous taxonomy. "/workflow/18" is about as detailed as I'd like to get in the URL scheme of a complex back office banking product.
by ajross | 2025-11-02 13:23:19+00:00
> Military industrial complex

That really seems just wrong. The established interests here haven't been pushing for a Venezuela action at all. They want to sell arms (via western assistance) to Ukraine, which is much more lucrative and clearly something the Trump adminstration has stymied at all opportunities.

If you have to push for a Capitalist String Pulling Conspiracy angle here (which I don't buy either) it makes much more sense to view this as an oil industry play. American-driven regime change in Venezuela opens up its state-owned petroleum industry to American petrochemical interests.

But no, 99% of of this is simple pique and bullying. Maduro is a loudmouth antiamerican and weak, Trump is a bully. This is just what bullies do. Pushing around antisocial nerds in the schoolyard is how bullies demonstrate authority to their base.
Show HN: CommoWatch – Alerts for Commodity Prices (Gold, Oil, Wheat, etc.)
by anthonytorre | 2025-11-02 13:23:21+00:00
Hey HN

I’m a solo developer building CommoWatch, a minimal web app to track commodity prices and get alerts when they hit your target.

The idea is simple:

- You pick the commodities you care about (gold, oil, wheat, gas...)

- You set the prices you want to be notified at

- You get an email or SMS when it happens.

It’s meant to be compact, fast, and useful for traders, investors, or even small business owners who follow material costs.

I’m starting small — just a few commodities, hourly updates, and email alerts first — to validate if people actually find it useful.

If this sounds interesting, you can join the waitlist here: https://getwaitlist.com/waitlist/31756

I’d love to hear your thoughts: What feature would make this genuinely useful to you? Or what do you think most people following commodity prices actually need?

Thanks!
by thrance | 2025-11-02 13:23:38+00:00
As history has shown, America is perfectly fine with dictatorships in South America, they've even installed several of them, like Pinochet's.

Maduro is the wrong kind of South American dictator, i.e. one that doesn't bend the knee to American interests. Trump threatening to overthrow him and put a nationalist puppet that will sell out to America is not unusual for a US president.

To be clear, I am not defending Maduro. Everyone sucks here, but let's not be fooled, this will not improve Venezuelans lives. Just look at what happened to Chile and the others.
by GTP | 2025-11-02 13:24:03+00:00
I would say that Rust would be a better choice rarher than patching memory safety on top of C. But I think the reason for this is that most, if not all, cryptographic reference implementations are in C. So they want to use existing reference implementations without having to port them to Rust.

IMO cryptographers should start using Rust for their reference implementations, but I also get that they'd rather spend their time working on their next paper rather than learning a new language.
by bluGill | 2025-11-02 13:24:27+00:00
We have interviewed and hired plenty of people even older (age is not something ever known/discussed and illegal to factor in - but it isn't hard to make a good guess anyway)

senior engineer could be a project manager who never wrote code.

i remember this because it is one of the faw 'no' I have had where it wasn't proved the person would be bad at the job. Normally the no hire signal is because the person would obviously be bad.
by JackC | 2025-11-02 13:24:46+00:00
> The president has something to offer as a solution. For everything.

Unfortunately it is not a coincidence that the solution to all problems is always (a) make a loud noise (b) take your stuff (c) take away your ability to object to taking your stuff. Amoral sadistic narcissist gonna amoral sadistic narcissist. If you think you don't have enough information to predict how that's going to play out as far as family members you care about, ok.
Show HN: I Built an AI-Powered Developer Intelligence Platform
by mohamedraheem | 2025-11-02 13:25:19+00:00
Hello guys,

I’m Raheem, the solo developer behind LeefLytic.

I built LeefLytic because, as a developer, I’ve often struggled to understand large codebases, measure code quality, and identify hidden issues like dependency risks and complexity. I wanted something that could analyze my projects and give clear, AI-powered insights instantly.

The problem I’m trying to solve is that developers and teams spend hours trying to make sense of messy code or track quality metrics manually. LeefLytic automates that by providing detailed insights, instant AI fixes, and shareable reports that teams and clients can trust.

This project started as a small idea to analyze my own repositories. Over time, it evolved into a full platform that connects with GitHub, GitLab, and Bitbucket, adds AI reasoning, and generates reports that highlight the health and architecture of your projects.

I’d love your feedback and thoughts. What would make this even more valuable for you as a developer?
by portaouflop | 2025-11-02 13:25:24+00:00
> why military action won't help

Look the “war on drugs” has been running all my life and it’s just been getting worse for the US.

What helps against drug addiction and abuse is not more death and bombs - madness is doing the same thing over and over again and expecting different results.

There are many social programs that have __proven__ results in reducing drug deaths and addiction.

Those would need to be implemented, funded and supported; instead of being cut.

It’s pretty simple actually: listen to the people who work with addicts everyday and design programs after their recommendations.
by labrador | 2025-11-02 13:25:26+00:00
AGI is fantasy at this point and your assumption that AGI would give OpenAI unprecented powers is the Musk/Yudkowsky/Hinton argument that AI will dominate and enslave us.

Drop those assumptions and my point stands that throughout history, monopolistically-controlled transformative technologies (telephones, electricity, vaccines, railroads) have still delivered net benefits to society, even if imperfectly distributed. This is just historical fact.
by cjbgkagh | 2025-11-02 13:25:40+00:00
You would probably kill more people that way rather than making it a death penalty for use. The other problem is enterprises that make money like this can easily corrupt the police and politicians. Since users don’t make money from using they’re not able to pay off the police.

Any solution that is predicated on uncorruptable police and politicians is not going to work. I wish we didn’t have such corrupted police and politicians so we could have nicer policies but we don’t so we can’t.
Show HN: I built a tool to version control datasets (like Git, but for data)
by aliefe04 | 2025-11-02 13:26:02+00:00
Hey everyone,

As a founder, I've been frustrated for years with how my team manages datasets for ML. It always ends up as data_final_v3_fixed.csv in an S3 bucket or a massive Git LFS file that nobody understands.

So, I built Shodata. It’s an open platform (like GitHub) but built specifically for dataset workflows.

The core idea is simple: you upload a file. A new version (v2, v3, etc.) is automatically created when you upload a new file with the same name. You receive a discussion board on every dataset, a complete history, and clean previews and statistics for every version.

To show how it works, I seeded it with a dataset I'm tracking: a log of LLM hallucinations. When I find new ones, I just upload the new file and it versions the dataset.

The platform is an MVP. It has a generous free tier (includes 3 personal private datasets & 10GB storage) and a single Pro plan that unlocks team/organization features (like Org creation and shared private datasets).

I’m looking for feedback from fellow engineers and ML folks on the workflow. Is this useful? What’s missing?

You can check out the platform here: https://shodata.com

And the LLM log dataset: https://shodata.com/shodata/llm-hallucinations
by Eddy_Viscosity2 | 2025-11-02 13:26:31+00:00
Why is it that property is taxed less than productive work? Someone sitting on their ass doing nothing but sucking resources through dividend payments has that income taxed less than the workers' income who did the work that generated those dividends. Why isn't the reverse the case? Heavily tax passive income, and lightly tax active income. Incentivize productive activity and penalize rent-seeking parasites?
by thaumasiotes | 2025-11-02 13:26:32+00:00
Well, as described...

> Here's how the disaster unfolded:

> 1. A user's container is under a brute-force attack, and /var/log/btmp grows to 11GB.

> 2. The user performs a commit, creating a new image layer.

> 3. A single new failed login is appended to /var/log/btmp.

> 4. Because of CoW, OverlayFS doesn't just write the new line. It copies the entire 11GB file into the new, upper layer.

> 5. This process repeated 271 times.

So the user is creating hundreds of layers for unclear reasons. The article refers to this as "exponential growth", but for that to be the case those commits would need to be triggered in proportion to the number of existing layers, which seems unlikely. Assuming the commits are caused by the user for reasons unrelated to the size of the existing image, this is growth that is quadratic† (in the number of layers; it's hard to characterize as a function of time or whatever), and it'd be nice to know why there were so many layers.

† Note that while the growth is technically quadratic, I don't think that impacted them. They say that the problem occurred when one 11GB file got copied into each of 272 image layers. That would require 2,992 GB, but they also say that the image exhibiting this problem was only 800GB.

I suspect that the answer here is that only some of the layers modified (and therefore copied) the log file. Probably about 72 of the layers. This is more like growth that's linear (still technically slightly superlinear, but probably not quadratic) in the number of failed SSH login attempts. ~75% of layers aren't contributing to the problem at all.
by forgotoldacc | 2025-11-02 13:26:51+00:00
Seems like the problem was the US medical industry getting everyone hooked on opiates. The US even prescribes fentanyl for injuries, a temporary problem, and gets people addicted to the strongest stuff in the world for life.

But maybe the hospitals and American drug corps are all covert Venezuelan operations. Probably not, though. This makes as much sense as invading Iraq for a terrorist attack carried out by a rich Saudi Arabian family.

You thinking killing some random people thousands of miles away is some sort of step in the right direction is honestly just sad. Imagine Botswana having a problem with lion attacks and their president kills your family on the other side of the earth because the people of Botswana want the president to do something, and killing someone, doesn't matter where, is progress towards a solution. I'm an American, but it's stuff like this that makes me realize that hundreds of years from now, people will hold the US's government and its people in the same regard as King Leopold and colonial Belgians.
by Ylpertnodi | 2025-11-02 13:26:55+00:00
>> And I like my space free of other naked people

> How sad. I wonder what the deep problem is. Religious, cultural, something more serious. Imagine not being able to go to a sauna, or shower in public, because of a fear of people.

It's not sad. It's very fucking annoying. The deep problem is some people are just like that. Religious? No. Cultural? No. Something more serious? Yes. Imagine not being able to go to a sauna. Ok, done that, now what? Imagine not being able to shower in public. Ok, done that, now what? "Because of a fear of people". Ah!

I didn't know I had a 'social anxiety' (because everyone has 'something', these days), but it turns out I have, and it can be seen (at various times, to varying degrees), throughout my life.

Many people don't so much have a problem with naked people, it's often just 'people', and the 'situation'.

Try reading (several sources) about agoraphobia. It's not always as clean cut as you kind of unknowingly make it out to be.

You ever been to a war zone? I have - with bullets and tanks and mines and ugly death and living badly in holes and showering and shitting in front of others, and other good-for-the-grandkids stories. Somehow, I absolutely fucking loved it, and would go again tomorrow, *though drones nowadays add a new, and very game-changing perspective.

Would you come with me, and we can do all the being naked together you want? Are you one of those people that struts around public showers like a lonely peacock, and tries engaging people there in conversation?

Actual nudity may not always be the issue. Cunts, and situations, often are.
by johnisgood | 2025-11-02 13:26:56+00:00
The reasons do not matter here. It is still ugly / noisy / overly-complicated and probably could have been done better.

I understand pattern matching deconstructions, I have seen it in other languages. Funnily enough they were nowhere as ugly / noisy / complicated as Rust's is. Rust seems to have bolted on a lot of fancy shit that may be appealing to a lot of people and that is it.

In your link, the first one is fugly, the last one is fine. Maybe Rust just encourages ugly (i.e. complicated) code a bit too much.
by padolsey | 2025-11-02 13:27:14+00:00
I agree, and this reminds me: I really wish there was better URL (and DNS) literacy amongst the mainstream 'digitally literate'. It would help reduce risk of phishing attacks, allow people to observe and control state meaningful to their experience (e.g. knowing what the '?t=_' does in youtube), trimming of personal info like tracking params (e.g. utm_) before sharing, understanding https/padlock doesn't mean trusted. Etc. Generally, even the most internet-savvy age group, are vastly ill-equipped.
by jpc0 | 2025-11-02 13:27:15+00:00
Because number bigger doesn’t translate to higher perceived performance…

The only compelling reason that I want to upgrade my Sandy Lake chip is AVX2.

So it is instruction set not perf, sure there will be improved performance but most of the things that are actually performance issues is already handed off to the GPU.

On that note probably rebar and PCIe4 but those aren’t dramatic differences, if CPU is really a problem (renders/compilation) then it gets offloaded to different hardware.
by pydry | 2025-11-02 13:27:54+00:00
The world is filled with poor, authoritarian countries. That has nothing to do with why the US would send a carrier group their way.

This is about empire and oil.

Venezuela could be an identical country in every respect and if Maduro was a puppet of the United States sitting on the world's largest oil reserves instead of an opponent the New York Times would be writing stories about how they're reforming and improving.
by uecker | 2025-11-02 13:28:01+00:00
Downloading a deb via a package manager is more secure. Downloading a deb, comparing the hash (or at least noting down the hash) would also already be more secure.

But yes, that the run arbitrary scripts is also a known issue, but this is not the main point as most code you download will be run at some point (and ideally this needs sandboxing of applications to fix).
by tomhow | 2025-11-02 13:28:08+00:00
Previously:

How to create a game using hyperbolic geometry? (2020) - https://news.ycombinator.com/item?id=36448270 - June 2023 (44 comments)

HyperRogue: A puzzle roguelike in a non-Euclidean world - https://news.ycombinator.com/item?id=26073813 - Feb 2021 (34 comments)

HyperRogue – a non-Euclidean roguelike - https://news.ycombinator.com/item?id=17432974 - June 2018 (38 comments)

HyperRogue – A non-Euclidean roguelike - https://news.ycombinator.com/item?id=9744353 - June 2015 (33 comments)
by cue_the_strings | 2025-11-02 13:28:43+00:00
I agree.

But on the other hand, let's not kid ourselves, array out of bounds, use after free, resource leaks and bad type system, all of this isn't even close to an exhaustive list of C downsides. Beyond its direct limitations, C inspires an approach that is vastly inferior even if you follow all the best practices. Even compared to (modern) C++ it's much worse. I say this and I kind of like C.

If the approaches described in the article save us 30% of the effort of translating C codebases to Rust, it's still worth trying; we're unfortunately not very close to complete automation, but that's something worthy of pursuit.
by qdotme | 2025-11-02 13:28:50+00:00
Yes! This is a very under-utilized concept, especially with client-side execution (WASM etc!)

Few years back, I built a proof-of-concept of a PDF data extraction utility, with the following characteristic - the "recipe" for extracting data from forms (think HIPAA etc) can be developed independently of confidential PDFs, signed by the server, and embedded in the URL on the client-side.

The client can work entirely offline (save the HTML to disk, airgap if you want!) off the "recipe" contained in the URL itself, process the data in WASM, all client-side. It can be trivially audited that the server does not receive any confidential information, but the software is still "web-based", "browser-based" and plays nice with the online IDE - on dummy data.

Found a working demo link - nothing gets sent to the server.

https://pdfrobots.com/robot/beta/#qNkfQYfYQOTZXShZ5J0Rw5IBgB...
by exasperaited | 2025-11-02 13:28:54+00:00
Daddy wants a fight to prove he's a man and make everyone admire and adore him like he deserves to be admired and adored, so he's picking on the guy everyone wants gone.

If you understand what is going on in terms of Trump's very personal, broken malignant psychology and his very literal tendency to agree with the last person who spoke to him, you can see very old-fashioned US business interests have persuaded him to gin up an old, old fight.

(Always interesting to think that Trump may be projecting his own faults onto Maduro; every accusation a confession)

The last time this happened, Hugo Chavez very nearly had a much shorter trip in a helicopter than was scheduled, and the US ambassador rushed down from the embassy uncomfortably too early to congratulate the new guy only to find that the new guy was still the old guy. Almost as if they were expecting something to happen that didn't.

(Don't read this as a suggestion that I think Maduro is legitimate; I don't.)
by djoldman | 2025-11-02 13:29:18+00:00
As far as I know, this results from allowing a producer to produce 100% fossil fuel energy and buy certificates to "convert" that into 100% renewable.

It's an artifact of stuff like carbon credits. Companies like apple, google, and amazon declare that they are carbon neutral, or will be by some date, and what they actually do is burn a lot of fossil fuel but "offset" it by paying for carbon credits.
by FridayoLeary | 2025-11-02 13:30:24+00:00
You call it extrajudicial murder, they call it war. Hundreds of thousands of dead americans back them up. What can you bring to support your case. A distaste for the reality of violence? I'm not going to bother explaining the nuances of war and why some things that are unacceptable in times of peace are justified in the context of war. I'm sure you are intelligent enough to understand that in theory.

Nobody has managed to deal with the crisis because they've been looking at it the wrong way. I don't even know that this new direction will help. What is clear is that everything that's been tried up until now hasn't worked.
by tim333 | 2025-11-02 13:31:19+00:00
Maintaining a modern tolerant state is probably harder than it looks. Like in the UK we take it for granted but it's the end result of centuries of sometimes bloody trial and error fixes. People think it's silly we still have a king but look what happened to Russia, France, Germany etc after they got rid of theirs.

Afghanistan might have worked out if the US took a king like role sitting in a fort somewhere and saying ok, you're prime minister to some Afgan after each election. The king role may seem like nothing but if a UK prime minister says sod this I'm ruler for life then the king doesn't endorse them and the king is the head of the armed forces which makes it difficult to do such stuff.
by satisfice | 2025-11-02 13:31:43+00:00
My thoughts exactly. The author is saying we should think strategically about the use of context. Sure. Yes. But for that to qualify as engineering we need solid theory about how context works.

We don’t have that, yet. For instance experiments show that not all parts of the context window are equally well attended. Imagine trying to engineer a bridge when no one really knows how strong steel is.
by johnisgood | 2025-11-02 13:33:13+00:00
Oh come on, how many times have we seen "blazingly fast in Rust", "rewritten in Rust" etc.? Many times. We get it. You like Rust. This "rewrite in Rust" bullshit is just as nauseous and I am sick of seeing it, too. So what? In fact, it is quite a meme now.

Please, every time you see someone praise Rust (every other day), tell them the same as you have told me, just the opposite way around.
by wtetzner | 2025-11-02 13:33:16+00:00
> Every time a language developer chooses to give their new language a novel, let alone chaotic, syntax, they sin against the very premise of software development being an engineering profession.

Exactly which syntax should every language be using then? Everyone will give you a different answer.

> Randomly chosen bolts to use left hand threads just because it suits their arbitrary whim

Claiming the syntax was chosen randomly on a whim is very much not true: https://matklad.github.io/2023/01/26/rusts-ugly-syntax.html

And there are times when it does make sense to use left-hand threads.

Just because someone looks at new syntax and doesn't immediately understand it doesn't mean that syntax doesn't exist for good reason.

Also, if your language's constructs and semantics don't exactly match those in other languages, then giving them the same syntax would be actively misleading, and therefore a design flaw.

Syntax is also only an issue for people who haven't taken the time to learn the language. If you haven't learned the language, then familiar syntax isn't going to help you anyway. You'll just think you understand something you don't.
by Denvercoder9 | 2025-11-02 13:33:56+00:00
> Using Vec for arrays is also annoying, repeating the mistake from C++.

Neither Rust nor C++ uses vectors as array, they're distinct things.

An array is a fixed-size object, which never allocates and its elements thus always retain their memory address. In Rust they're `[T; N]`, in C++ `T[N]` or more recently `std::array<T, N>`.

A vector on the other hand is dynamically sized object, that may (re)allocate to accomodate new elements, and the address of their elements can change. In Rust they're `Vec<T>`; in C++ `std::vector<T>`.
by reaperducer | 2025-11-02 13:34:11+00:00
Is it really that annoying?

It depends on the context.

If it's my mother acknowledging receipt of a recipe, then it's fine.

If it's a co-worker acknowledging receipt of a legal document, then it is both unprofessional, and annoying.

I mock my co-workers by replying with an actual e-mail message with the word "Thumb!" in it. They've stopped thumbing my e-mail messages.