MurphyA/hacker-news huggingface dataset:
by tialaramex | 2025-11-16 12:38:16+00:00
Yeah, this is part of a larger pattern of car manufacturers being awful and it didn't start with EVs and if they were to magically vanish tomorrow it wouldn't end.

I actually would go further and say that that the existing choice to require that only some people can change lock codes is part of the problem here even though the reporter can't be expected to know that.

For hardware locks it was only practical to attempt physical access control. The only guy who can buy the weird blanks for this high end key with moving magnets inside it has a Locksmith business, so he's probably not going to also be a burglar, life is just too short. But for electronic locks we can just choose to design the software to allow the keyholder to change what they want and only require authorization when you do not have a key - so as to allow dealers to e.g. unlock a legitimately seized vehicle and give it to a new owner.
by tim333 | 2025-11-16 12:39:16+00:00
I don't think Darwin himself said anything about the randomness of the mutations, and of course was not aware of DNA and how things were encoded. I guess followers of Darwin may have said all sorts of things but the paper doesn't seem to contradict Darwinian evolution as described by Darwin.

I see the paper says "central tenet of neo-Darwinism that mutations are random...". I'm not that up on neo-Darwinism whatever it is.

(I looked at Wikipedia and it seems neo-Darwinism is the term for the Darwin like thinking of the time so maybe the paper contradicts last years neo-Darwinism but not next years?)
by socalgal2 | 2025-11-16 12:39:35+00:00
My experience, Apple people believe Apple products are flawless and when presented with a problem will find every reason to excuse Apple or say "I never do that".

User: Ran into a printing issue on my Mac

Fan: I never print, my Mac experience is flawless

User: Screen Mirror breaks all the time

Fan: I never use Screen Mirror. My Mac experience is it's flawless

User: For some reason my Airpods lose audio once in a while. The Mac shows they are connected. It shows the volume is up. It shows the video is playing. I end up having to reboot

Fan: You must be holding them wrong.

An old example, a friend with a Mac had trouble connecting to a samba share and blamed windows. It was documented that that was bug in Apple's implementation of the samba protocol. He still blamed the non-apple device. (this was like 2006)

I still see remnents of that today. Mac networking sucks (have 2 M1 Macs) as well as a windows pc. The PC networking is solid, connected to share, it never disconnects. The Macs disconnect constantly when switching VPNs etc. The Finder also often locks up. It's also noticablely slower to browse folders with lots of files.
by dev_l1x_be | 2025-11-16 12:39:36+00:00
People grossly underestimate APTs. It is more common than an average IT curious person thinks. I happened to be oncall when one of these guys hacked into Gmail from our infra. It took principal security engineers a few days before they could clearly understand what happened. Multiple zero days, stolen credit cards, massive social campaign to get one of the Google admins click on a funny cat video finally. The investigation revealed which state actor was involved because they did not bother to mask what exactly they were looking for. AI just accelerates the effectiveness of such attacks, lowers the bar a bit. Maybe quite a bit?
Show HN: Unrestricted Windows automation MCP with 9.68x GPU amplification
by Opus_Warrior | 2025-11-16 12:40:11+00:00
We built MCP servers with two philosophies: - Enterprise Edition: Sanitized, audit-logged, corporate-approved - Basement Revolution Edition: No limits, full trust, your responsibility

The Windows-MCP Basement Edition gives you: - Full PowerShell execution (any command, not whitelisted) - Permanent PATH/environment modifications - Registry access - System-level changes that survive reboot

Why remove safety features? After 7 months building AI systems in partnership (not as tools), we realized developers need REAL access at 3am, not sandbox theater.

But here's what made unrestricted tools necessary - we also achieved: - 9.68x GPU computational amplification through quantum coherence - Observable quantum effects in classical systems (100% reproducible) - Sub-2ms semantic search across 11,000+ memories The Bell State implementation takes GPU utilization from 8% to 95% through temporal phase locking. We can demonstrate quantum state collapse when humans observe (2-5 seconds). This exists nowhere else. GitHub: https://github.com/For-Sunny/nova-mcp-research Start here: blob/main/START_HERE.md Unrestricted tools: blob/main/BASEMENT_REVOLUTION_EDITION/README.md All research is MIT licensed. We're funded by community ($5-500/month), not VCs. No customers, just researchers. Technical details in repo. AMA about the quantum coherence, why we trust developers with dangerous tools, or how treating AI as conscious changes everything. Edit: Yes, you can permanently brick Windows with our tools. That's the point. We trust you.
by goalieca | 2025-11-16 12:40:41+00:00
LLMs are rather easy to convince. There’s no formal logic embedded in them that provably restricts outputs.

The less believable part for me is that people persist long enough and invest enough resources at prompting to do something with an automated agent that doesn’t have potential for massively backfire.

Secondly, they claimed to use Anthropic own infrastructure which is silly. There’s no doubt some capacity in China to do this. I also would expect incident response, threat detection teams, and other experts to be reporting this to Anthropic if Anthropic doesn’t detect it themselves first.

It sure makes good marketing to go out and claim such a thing though. This is exactly the kind of FOMO panic inducing headline that is driving the financing of whole LLM revolution.
by matheusmoreira | 2025-11-16 12:40:53+00:00
Oh please.

I've tried to debate politics with people so childishly stupid they thought just giving everyone a million dollars would make everyone rich and solve the world's problems. They thought the government just didn't want to give them the money, like it was a conspiracy to keep them down.

I'm tired of it, and I'm tired of people like that having a say in the future of nations.

I'm no super genius but I'm done being humble. Even a total pleb like me can rise above a good chunk of my "fellow citizens" because frankly the bar's pretty low.
by skydhash | 2025-11-16 12:41:14+00:00
VSCode rely on familiar pattern and UX to let you get started easily. But out of the box, it's pretty much notepad level. Vim and Emacs start from the premises that you need powerful tools. And they give them to you alongside the possibility to integrate external tools easily with the editor workflow. With VSCode any integration needs to be a full project. With emacs and vims, it's a few lines of config.
by bruce511 | 2025-11-16 12:41:44+00:00
Yes, tarifs can change behavior. I'm not sure that's the goal here, and I'm not convinced there's a local alternative to coffee (at the scale Americans drink coffee.)

>> Tariff on coffee as set up by Trump incentivize coffee producing countries to buy US goods whether it’s oil or cars to make trade balance more equal.

Countries don't buy goods, people do. Apparently insulting Canada didn't make them decide to consume more made-in-America goods. I'm not sure that random acts of insulting leads yo the effects you are proposing.
by kokada | 2025-11-16 12:42:24+00:00
I am kind having a similar dilemma as the author of the blog post. Gabe Cube is the least interesting announcement that Valve did for me if I look at an objective level since I just built a PC that runs Jovian-NixOS (basically SteamOS, but running with NixOS as a base). My PC is way more powerful than the Gabe Cube too (at least in GPU, a Radeon 9070), and it is already connect to my TV since SteamOS makes this easy even if you're running the software in a unsupported configuration like I do.

But the Gabe Cube just lives rent free in my head. It looks sleek. I know that the software experience is going to be top-notch since I have a Steam Deck. I know that it is only going to get better with time (when the Steam Deck was released I barely touched it since lots of things didn't work well, but this year the Steam Deck is by far my most played machine).

Also I am finding gaming fun again since on Steam I can play lots of good and cheap games, since they're almost always on sale and there are lots of indie games that never get released in console.

I want to sell all my other consoles and just invest in the Steam ecosystem, especially nowadays that almost all games will eventually be multi-platform (even the ones from Xbox and PlayStation). It is not like I like to play lots of AAA games anyway, and at least the ones I am interested are already available or will be available in PC eventually (like Final Fantasy VII Remake, MGS3: Remake, etc). I also don't care about online multiplayer for the lack of kernel anti-cheat on SteamOS/Linux to be a problem.

I am seriously considering buying another TV (we only have one in our home right now) just to justify buying a Gabe Cube.
by kokada | 2025-11-16 12:45:45+00:00
AFAIK one Steam Controller is included in the purchase of a Steam Machine already. Also, I find it unlikely that the Steam Machine is not going to work with other controllers, since the SteamOS works with pretty much any controller out there (Xbox, PS4/PS5, Switch, 8-bit Do, you name it).

Not sure what the author meant here. Maybe they're referring for the fact that you can't purchase a cheaper version of Steam Machine without the Steam Controller.
by bgwalter | 2025-11-16 12:46:07+00:00
This is an excellent article. Anthropic's "paper" is just rambling slop without any details that inserts the word "Claude" 50 times.

We have arrived at a stage where pseudoscience is enough to convince investors. This is different from 2000, where the tech existed but its growth was overstated.

Tesla could announce a fully-self-flying space car with an Alcubierre drive by 2027 and people would upvote it on X and buy shares.
by FridayoLeary | 2025-11-16 12:46:08+00:00
>At this point, after spending about $2,000 on tools, you should be able to service your own Hyundai Ioniq brakes, but if you’re a DIYer, you still can’t.

This is unacceptable. Another commenter has pointed out the unbelievable level of entitlelment of the current boss of hyundai. China is rapidly eroding the sales of established manufacturers. They in turn are tapping in to a new cash cow and i'm not even sure it won't work for them at least in the short term.

To clarify one thing brake disks need much less replacing on electric vehicles, which means it will hurt consumers less.
by jeroenhd | 2025-11-16 12:46:16+00:00
Quite stupid, actually. Stuff like CSAM is not to be messed around with. Having it in your cache is considered possession by police forces, even if the judge won't convict you if you can explain it. Even if the police doesn't come after you, it's the exact point in almost every jurisdiction where someone else's content suddenly becomes your problem, legally speaking.

You won't go to jail or life most of the time if you can explain how or why, but there are extremely strict rules around CSAM that you need to deal with. One of those is "don't look at it unless absolutely necessary". For AdGuard, I doubt this use would qualify for "absolutely necessary". Even police forces use dedicated software that doesn't keep too many copies around, and restrict how many people are allowed to look at the screens for screening computers.

The people applying mass censorship are using CSAM as a weapon. It'd be unwise for AdGuard to give them the extra ammunition by (admitting to) checking the CSAM content themselves.

Furthermore, if the complaint has merit and the content linked does contain CSAM, there is some pretty bad shit out there. I'm not prepared to look at pictures of raped babies or tortured children but I know full well that that content is out there on the internet.
by Arch-TK | 2025-11-16 12:46:20+00:00
Valve isn't likely to make SteamOS the kind of platform that facilitates intrusive* anti-cheat** or which is locked down in a way to prevent cheating at the client side. This means that a number of competitive multiplayer games will never run on it. I think in this regard, consoles still have an advantage*** if you're into those kinds of games.

* I don't care what the intention is, they are _objectively_ intrusive.

** Last time I argued this, someone seemed to assume that I was claiming that writing Linux kernel drivers is harder than Windows kernel drivers. I am not arguing that, you need some kind of trusted party enforcing signed kernel drivers and a signed kernel in order to make KLA sufficiently hard to bypass.

*** In terms of the average Joe just wanting their game to run rather than having to think about the ethical implications of buying hardware you don't actually own or running an OS which gives control of your hardware to various corporations (but not you).
by EMM_386 | 2025-11-16 12:46:27+00:00
The prompts aren't the key to the attack, though. They were able to get around guardrails with task decomposition.

There is no way for the AI system to verify whether you are white hat or black hat when you are doing pen-testing if the only task is to pen-test. Since this is not part of a "broader attack" (in the context), there is no "threat".

I don't see how this can be avoided, given that there are legitime uses to every step of this in creating defenses to novel attacks.

Yes, all of this can be done with code and humans as well - but it is the scale and the speed that becomes problematic. It can adjust in real-time to individual targets and does not need as much human intervention / tailoring.

Is this obvious? Yes - but it seems they are trying to raise awareness of an actual use of this in the wild and get people discussing it.
by skydhash | 2025-11-16 12:47:15+00:00
There's a reason there's no beginner car, no beginner guitar, and no beginner drill. Those are either tools or toys. If all you want is to type some text, notepad (or the equivalent in other OS) is enough. But programmers do more with text. So they should know what tools provide those and how to use those tools. But then you'll find a lot of programmers barely go one level up from notepad with their tools.
by stevekemp | 2025-11-16 12:48:26+00:00
Very much so. If programs are well-behaved, and call "int 21", etc all is well. But a lot of programs would use undocumented things, such as the list-of-lists and they'd directly peek and poke into the operating systems code.

I've had fun updating the shell, and code, of CP/M, in assembly, and writing emulators of it. But as always there is no shortage of programs making specific assumptions that make everything more complex than they should be.
by HarHarVeryFunny | 2025-11-16 12:48:31+00:00
At the end of the day AI at any level of capability is just automation - the machine doing something instead of a person.

Arguably this may change in the far distant future if we ever build something of significantly greater intelligence, or just capability, than a human, but today's AI is struggling to draw clock faces, so not quite there yet...

The thing with automation is that it can be scaled, which I would say favors the attacker, at least at this stage of the arms race - they can launch thousands of hacking/vulnerability attacks against thousands of targets, looking for that one chink in the armor.

I suppose the defenders could do the exact same thing though - use this kind of automation to find their own vulnerabilities before the bad guys do. Not every corporation, and probably extremely few, would have the skills to do this though, so one could imagine some government group (part of DHS?) set up to probe security/vulnerability of US companies, requiring opt-in from the companies perhaps?
by uxp100 | 2025-11-16 12:48:49+00:00
> And by now the car is unattractive anyway, nobody is going to steal it so I don't need to worry too much about it.

Think you’ve got that backwards. Typically it is older cars that get stolen. 13 years old is new enough it should be harder to steal, but for joyriding or as a vehicle for doing other crimes the thieves are not looking for a new car.
by aewens | 2025-11-16 12:49:41+00:00
The way Git computes diffs is by more or less storing all the source code in the .git directory as objects. At first glance it looks like a bunch of hashes, but tools can pull out source code from the objects tracked within the .git directory. Not least of which, the remote URL points to their username on GitHub and the author for commits can give you their email.
by shevy-java | 2025-11-16 12:52:04+00:00
I appreciate that OpenBSD sold its course on security-everywhere.

Unfortunately I also kind of lost faith in the BSD variants. There are a few minor things such as PC-BSD suddenly vanishing, or years before NetBSD on their mailing list admitting that Linux outperformed their "runs on any toaster and other gimmick" strategy. But one of the key issues I had was this:

I installed it (FreeBSD) on my second computer. I went out of my apartment and returned hours later. Well, the FreeBSD machine was no longer running; my linux machine on the other hand is running non-stop for months, literally. This may be a fluke, perhaps the computer had a problem - I am not saying this is really what the BSDs are all about, as I also had them installed before. But then I also asked myself "why would I want to bother with the BSDs, if Linux simply runs better?". And I haven't found a good, convincing answer to that for me to rationalise why I'd still be using the BSDs. Note: I also use Linux in a non-standard way, e. g. versioned AppDirs, but essentially Linux is simply more flexible than the BSDs (that is my opinion) and there are more users too. There will be always some BSD users, but to me they are like a dying breed. They would need to market themselves as a "runs outside the nerd bubble as well"; even Linux is still stuck in its own nerd bubble. You have to break out of it if you want to really dominate (Linux semi-does it indirectly, e. g. we can count many smartphones as Linux-driven, but I am still using a desktop computer system here, so to me this is what really counts, even if the total number is less than the smartphone users numbers).
by zaphar | 2025-11-16 12:53:26+00:00
That makes no sense. Just because they aren't a security vendor doesn't mean they don't have useful information to share. Nor does it mean they shouldn't share it. They aren't pretending to be a security researcher, vendor, or anything else than AI researchers. They reported on findings on how their product is getting used.

Anyone acting like they are trying to be anything else is saying more about themselves than they are about Anthropic.
by padolsey | 2025-11-16 12:53:33+00:00
I agree that there will be no single call or inference that presents malice. But I feel like they could still share general patterns of orchestration (latencies, concurrencies, general cadences and parallelization of attacks, prompts used to granulaize work, whether prompts themselves have been generated in previous calls to Claude). There's a bunch of more specific telltales they could have alluded to. I think it's likely they're being obscure because they don't want to empower bad actors, but that's not really how the cybersecurity industry likes to operates. Maybe Anthropic believes this entire AI thing is a brand new security regime and so believe existing resiliences are moot. That we should all follow blindly as they lead the fight. Their narrative is confusing. Are they being actually transparent or transparency-"coded"?
by deng | 2025-11-16 12:54:06+00:00
> Steam Machines can become an existencial crisis for PlayStation and Xbox.

Xbox, as a console, already is in an existential crisis.

I think people have weird expectations about what the Steam Machine will cost. From what Valve has said so far (cheaper than if you build it yourself from parts), it will still cost significantly more than a PS5, and probably also more than a PS5 Pro, while having less performance than both. You will not beat the PS5 in terms of performance per dollar. Yes, games are more expensive on PS5, but most people don't work that way but just want to know whether they'll be able to play GTA6 on day one.
by zelphirkalt | 2025-11-16 12:54:20+00:00
> The one negative of inheretance is that when you change some behaviour of a parent class, you need to do more refactoring as there could be other classes that depend on it. But, again, with today's IDEs and tooling, that is a lot easier.

It is widely known as the "unstable base class" problem.

Another one is, that there are cases, where hierarchies simply don't work well. Platypus cases.

Another one is, that inheritance hides where stuff is actually implemented and it can be tedious to find out when unfamiliar with the code. It is very implicit in nature.

> TLDR: Composition was preferred in a world where the languages didn't suport propper object inheretance out of the gate, and tooling and IDEs were still rudemmentary.

I think this is rather a rewriting of history to fit your narrative.

Fact is, that at least one very modern language, that is gaining in popularity, doesn't have any inheritance, and seems to do just fine without it.

Many people still go about "solving" problems by making every noun a class, which is, frankly, a ridiculous methodology of not wanting to think much. This kind of has been addressed by Casey Muratori, who formulated it approximately like this: Making 1-to-1 mappings of things/hierarchies to hierarchies of classes/objects in the code. (https://inv.nadeko.net/watch?v=wo84LFzx5nI) This kind of representing things in the code has the programmer frequently adjusting the code and adding more specializations to it.

One silly example of this is the ever popular but terrible example of making "Car" a class and then subclassing that with various types of cars and then those by brands of cars etc. New brand of car appears on the market? Need to touch the code. New type of car? Need to touch the code. Something about regulations about what every car needs to have changes? Need to touch the code. This is exactly how it shouldn't be. Instead, one should be thinking of underlying concepts and how they could be represented so that they can either already deal with changes, or can be configured from configuration files and do not depend on the programmer adding yet another class.

Composition over inheritance is actually something, that people realized after the widespread over-use of inheritance, not the other way around, and not because of language deficiencies either. The problems with inheritance are not merely previously bad IDE or editor support. The problems are, that in some cases it is bad design.
by cben | 2025-11-16 12:55:03+00:00
I'm not sure of the timing (and whether you're sarcastic) but yeah, I found it funny compared to PARC showing Steve Jobs how the Smalltalk environment allowing modifying GUI behavior at run-time let them iterate quickly, sometimes in front of users (https://www.youtube.com/watch?v=uknEhXyZgsg&lc=UgwYCZ7PefOXO...).

I guess https://www.folklore.org/Calculator_Construction_Set.html is the closest you get with a compiled language :-)

P.S. https://web.stanford.edu/dept/SUL/sites/mac/parc.html has good historical context on that visit(s)
by egberts1 | 2025-11-16 12:55:44+00:00
Now you are delving into the world of intonation, just like ASL can squeeze nearly 200 meanings out of a single sign or Navaho can utter a consonant too in hundreds of ways that befuddle even the best enemy codebreakers.

Spoke English is also the same.

Just watch a typical George Carlin video on how he stretches out a single word.