MurphyA/hacker-news huggingface dataset:
by Rochus | 2025-11-25 02:25:52+00:00
> The industry and the academy have used the term “object-oriented” to mean so many different things.

I think we can safely stick to how IEEE defines OOP: the combination of three main features: 1) encapsulation of data and code 2) inheritance and late binding 3) dynamic object generation (from https://ethw.org/Milestones:Object-Oriented_Programming,_196...).

The article assumes that C++, Java, and Smalltalk implement completely different subsets of OOP features, which is not true at all. Those languages, including Smalltalk (starting with Smalltalk-76), all implement the Simula 67 object model with classes, inheritance and virtual method dispatch. Simula 67 was the first object-oriented programming language (even if the term was only applied ~10 years later in a 1976 MIT publication for the first time, see https://news.ycombinator.com/item?id=36879311). Message passing (the feature the article claims is unique to Smalltalk) is mathematically isomorphic to virtual method dispatch; and also Smalltalk uses method dispatch tables, very similar to C++ and Java.
by daemonologist | 2025-11-25 02:27:49+00:00
A limitation of this leaderboard approach that I want to point out is that while the large general-purpose LLMs can make greater leaps of inference (on handwriting and poor quality scans), and almost always produce better layouts and more coherent output, they can also sometimes be less correct. My experience is that they're more prone to skipping or transposing sections of text, or even hallucinating completely incorrect output, than the purpose-trained models. (A similar comparison can be made in turn to the character- or word-based OCR approaches like Tesseract, which are even less "intelligent" but also even less prone to those malbehaviors.)

Also, some of the models are prone to infinite loops and I suspect this is not being punished appropriately; the frontend seems to get into a bad state after around 50k characters, which prevents the user from selecting a winner. Probably would be beneficial to make sure every model has an output length limit.

Still, a really cool resource - I'm looking forward to more models being added.
by array_key_first | 2025-11-25 02:28:14+00:00
aaaand this is why you should be extremely wary if a company is asking you to upload sensitive information. Even if it's a big company.

I tried to tour an apartment complex, and they required me to use an online application for 'id verification. For a tour. A tour!

I'm sorry, but you do not require my social security number and pictures of my driver's license for me to use my eyeballs to see an apartment unit. What am I gonna do? Drive away with the apartment?
by tptacek | 2025-11-25 02:28:20+00:00
Look at the timeline for performant non-leaking implementations of Weierstrass curves. How long are you going to wait for these things to settle? I feel like there's also a hindsight bias that slips into a lot of this stuff.

Certainly, if you're going to do standards adoption by open competition the way NIST has done with AES, SHA3, and MLKEM, you're not going to be able to factor multiple major implementations into your process.
by TheRoque | 2025-11-25 02:28:33+00:00
So when should we start to be worried, as developers ? Like, I don't use these tools yet for cost + security. But you can see it's getting there, mostly. It could take a day before to find a complex algorithm, understand it, and implement it to your code, now you can just ask an AI to do it for you and it could succeed in a few minutes. How long before the amount of engineers needed to maintaint a product is divived by 2 ? By 10 ? How about all the boring dev jobs that were previously needed, but not so much anymore ? Like, basic CRUD applications. It's seriously worrying, I don't really know what to think.
by raw_anon_1111 | 2025-11-25 02:29:25+00:00
I use this to isolate my devices from a complex wide shared network with 1000 condo units.

https://a.co/d/b0ThCJj

It’s a WiFi to WiFi bridge. You connect one over WiFi to get internet access and it creates a separate WiFI connection for your devices. You could use it to create a segregated network for untrusted devices.

It’s also a WiFi to Ethernet bridge FWIW. Just the opposite of most routers that only work as Ethernet to WiFi.
by simonw | 2025-11-25 02:30:45+00:00
Here's an alternative way to think about that: how long until the value I can deliver as a developer goes up by a factor of 2, or a factor of 10?

How many companies that previously would never have dreamed of commissioning custom software are now going to be in the market for it, because they don't have to spend hundreds of thousands of dollars and wait 6 months just to see if their investment has a chance of paying off or not?
by Larrikin | 2025-11-25 02:31:01+00:00
A little surprised there has been no mention of the app being Kotlin multiplatform. https://github.com/coredevices/mobileapp

I had heard of many smaller apps using Kotlin for their iOS app, but this may be the biggest all in multiplatform app I've seen. It would be awesome if there may eventually be support for writing Pebble apps in Kotlin.
Show HN: NBPro – NanoBanana Pro prompt library (100 prompts)
by qzcanoe | 2025-11-25 02:31:30+00:00
NBPro is a dedicated NanoBanana Pro prompt library built for creators. Explore over 100 curated and proven prompts across real commercial use cases like product shots, ads, social visuals, and more – all optimized for NanoBanana Pro.

Core value: - Save time on searching and trial‑and‑error - Recreate real‑world effects instantly using one‑click prompts - Learn prompt structure and best practices - Powered by the native NanoBanana Pro API - High‑quality images with no learning curve

Ideal for e‑commerce teams, designers, content creators, social media influencers, AI image enthusiasts, and marketers who want to generate professional‑grade visuals quickly.

Stop guessing. Start creating.
by kuon | 2025-11-25 02:33:59+00:00
I was using OpenBSD for my firewalls for a long time, but with the arrival of 10Gbit/s ethernet, I realized that I had to move back to ASIC based firewalls.

Yes, you can forward 10Gbit/s with linux using VPP, but you cannot forward at that rate with small packets and stateful firewall. And it requires a lot of tuning and a large machine.

A used SRX4200 from juniper runs at around 3k USD and you can even buy support for it and you can forward at like 40Gb/s IMIX with it.

I still prefer PF syntax over everything else though.
by TheRoque | 2025-11-25 02:34:35+00:00
That's also why I don't use these tools that much. You have big AI companies, known for harvesting humongous amount of data, illegally, not disclosing datasets. And they you give them control of your computer, without any way to cleanly audit what's going in and out. It's seriously insane to me that most developers seem to not care about that. Like, we've all been educated to not push any critical info to a server (private key and other secrets), but these tools do just that, and you can't even trust what it's gonna be used for. On top of that, it's also giving your only value (writing good code) to a third party company that will steal it to replace you with it.
by bcrl | 2025-11-25 02:35:30+00:00
There's a simple solution: don't use mmap(). There's a reason that databases use O_DIRECT to read into their own in memory cache. If it was Good Enough for Oracle in the 1990s, it's probably Good Enough for you.

mmap() is one of those things that looks like it's an easy solution when you start writing an application, but that's only because you don't know the complexity time bomb of what you're undertaking.

The entire point of the various ways of performing asynchronous disk I/O using APIs like io_uring is to manage when and where blocking of tasks for I/O occurs. When you know where blocking I/O gets done, you can make it part of your main event loop.

If you don't know when or where blocking occurs (be it on I/O or mutexes or other such things), you're forced to make up for it by increasing the size of your thread pool. But larger thread pools come with a penalty: task switches are expensive! Scheduling is expensive! AVX 512 registers alone are 2KB of state per task, and if a thread hasn't run for a while, you're probably missing on your L1 and L2 caches. That's pure overhead baked into the thread pool architecture that you can entirely avoid by using an event driven architecture.

All the high performance systems I've worked on use event driven architectures -- from various network protocol implementations (protocols like BGP on JunOS, the HA functionality) to high speed (persistent and non-persistent) messaging (at Solace). It just makes everything easier when you're able to keep threads hot on locked to a single core. Bonus: when the system is at maximum load, you remain at pretty much the same number of requests per second rather than degrading as the number of threads ready to run starts increasing and wasting your CPU resources needlessly when you need them most.

It's hard to believe that the event queue architecture I first encountered on an Amiga in the late 1980s when I was just a kid is still worth knowing today.
by array_key_first | 2025-11-25 02:36:07+00:00
It's very cheap to get food, mostly because we can put out cheap junk. Whether or not this qualifies as 'nourishment' is, frankly, debatable.

If a child is obese, they are not necessarily nourished. They might very well be deficient in multiple vital minerals and vitamins, and could be paying the price in terms of their thinking ability, strength, growth potential, and overall health.

The US is actually a perfect example of this. Our government subsidized food, a lot, but a lot of that is corn. Most ultra-processed corn products are essentially nutritionally worthless.
by kazinator | 2025-11-25 02:36:40+00:00
This is because people are using the artwork as a proxy to praise or criticize the creator.

When they say that the work is intricate, showing great skill and perseverence (to pick some quality judgments), they mean that the artist has skill and perseverence. When that turns out to be an algorithm that is mashing up information from the training data, then people take that back; there is no artist there with skill and perseverence. The artwork itself doesn't contain skill or perseverence; it's just potential evidence that skill and perseverence were involved in its creation, which is not confirmed when it's an algorithm.

Nobody actually cares about the art; it's always about the person.

People idolize the arists, while pretending to be idolizing their works.

That's why an artist can commit "career suicide" with a neo-nazi rant, or possession of child porn, or whatever; it was never about the actual artistic artifacts.

Why was Bob Ross, the painter, regarded as kitch? In large part because he used tricks to create detail without deliberation; almost like an algorithm. You use this kind of brush, dip it lightly into white, dab it it a few times this way on the cavas and that way and, hey look, it's an ocean spray above the rocks: "anyone" can do it if they follow along. It's thew same thing: the dabbing thing and whatnot were like his AI; he just "prompted" the brush, make me a realistic spray and the brush did it with a trick.

Art has to be confirmed evidence of Hard and Deliberate Effort having taken place, using Skills that took Years of Practice combined with Talent to acquire; that's just the way it is.

Art fans are basically sports fans; art is a kind of sport, where any kind of shortcuts are like steroids, hidden motors and course cutting; those who retract their judgments believe that they have all of Honesty and Authenticity entirely on their side, because it's never about the Work by itself, but only circumstances of its creation.
by tptacek | 2025-11-25 02:37:15+00:00
Yes: because it took forever for curves to percolate into the WebPKI (as vs. the TLS handshake itself), and by the time they did (1) we had (esp. for TLS) resolved the "safe curves"-style concerns with the P-curves and (2) we were already looking over the horizon to PQ, and so there has been little impetus to forklift in a competing curve design.
by guiprav | 2025-11-25 02:37:33+00:00
https://vimeo.com/1140238012?share=copy&fl=sv&fe=ci

So this is my visual app builder Webfoundry, I used it to create a handful web apps including MEATEOR, the P2P Grindr alternative I posted about here: https://news.ycombinator.com/item?id=46040436

This demo shows how the voice assistant is able to call GPT 5.1 Codex to generate beautiful HTML elements for your page on-demand based on voice specs.

Other than that, Webfoundry has the following features:

- Fully Tailwind CSS-based design. - WYSIWYG allows you to edit the actual HTML DOM visually; there's no vDOM and so it plays nicely with vanilla JS libraries, even jQuery, etc. - Total JavaScript control with simple state management much unlike the horrors of React and others. - Fully P2P realtime live collaboration both in the visual editor and the built-in code text editor. - 2-click Netlify deployments right from the app. - A few of bugs I've been procrastinating on fixing lately... - Soon: Export app as a Windows/Linux desktop or Android Tauri application.

It's hard to use at first but the learning curve is honestly not that steep, I'm willing to demo and handhold anyone interested in trying this out over a video call! Reach out to me by email (gui@guiprav.com) or LinkedIn: https://www.linkedin.com/in/guiprav

Cheers! Gui
by lmm | 2025-11-25 02:37:35+00:00
> poisoning a Mutex is a very convenient avenue for a denial-of-service attack, since a poisoned Mutex will just completely brick a given critical section.

There's a tension between making DoS hard and avoiding RCE vulnerabilities, since the way to avoid an unplanned/bad code state becoming an RCE vulnerability is to crash as quickly and thoroughly as possible when you get into that state.
by Wowfunhappy | 2025-11-25 02:37:56+00:00
> But, most people don't need to worry about it. [...] You should always have a backup anyway. [...] Backing up your data is the simplest strategy to counteract the limitations of storage media. Having multiple copies of your data on different types of storage ensures that any unexpected incidents protect your data from vanishing forever. This is exactly what the 3-2-1 backup rule talks about: 3 copies of data on at least 2 different storage media, with 1 copy stored off-site.

Um. Backups seem like exactly why I might have data on an unpowered SSD.

I use HDDs right now because they're cheaper, but that might not be true some day. Also, I would expect someone less technically inclined than I am to just use whatever they have lying around, which may well be an SSD.
by windexh8er | 2025-11-25 02:39:31+00:00
This is spot on. The amount of wasteful output tokens from Claude is crazy. The actual output you're looking for might be better, but you're definitely going to pay for it in the long run.

The other angle here is that it's very easy to waste a ton of time and tokens with cheap models. Or you can more slowly dig yourself a hole with the SOTA models. But either way, and even with 1M tokens of context - things spiral at some point. It's just a question of whether you can get off the tracks with a working widget. It's always frustrating to know that "resetting" the environment is just handing over some free tokens to [model-provider-here] to recontextualize itself. I feel like it's the ultimate Office Space hack, likely unintentional, but really helps drive home the point of how unreliable all these offerings are.
by jsnell | 2025-11-25 02:40:57+00:00
No, LLMs really are not more sticky than traditional APIs. Normal APIs are unforgiving in their inputs and rigid in their outputs. No matter how hard you try, Hyrum's Law will get you over and over again. Every migration is an exercise in pain. LLMs are the ultimate adapting, malleable tool. It doesn't matter if you'd carefully tuned your prompt against a specific six months old model. The new model of today is sufficiently smarter that it'll do a better job despite not having been tuned on those specific prompts.

This isn't even theory, we can observe the swings in practice on Openrouter.

If the value was in prompt engineering, people would stick to specific old versions of models, because a new version of a given model might as well be a totally different model. It will behave differently, and will need to be qualified again. But of course only few people stick with the obsolete models. How many applications do you think still use a model released a year ago?
by hellonov24 | 2025-11-25 02:41:20+00:00
I know. A man can dream you know? No one cares about anything. Well maybe they do, they care about "stuff". Just give them stuff... #congratulations_you_just_reinvitedx1000_INSERT_GOOD_BAD_IDEA_HERE

But thanks for the reply. At least someone has a fucking heartbeat and is real. lol
by questioner8216 | 2025-11-25 02:42:10+00:00
I am not very familiar with C++'s API, but I believe that you are right that the C++ example in the article is incorrect, though for a different reason, namely that RAII is supported also in C++.

In C++, a class like std::lock_guard also provides "Automatic unlock". AFAICT, the article argues that only Rust's API provides that.

{ const std::lock_guard<std::mutex> lock(mtx); account.balance -= amount; account.transaction_count++; } // Automatically unlocked.
by wakawaka28 | 2025-11-25 02:43:07+00:00
It's awfully condescending to insinuate that these people are in mental decline just for having the opinions you don't like. You don't have the answers to these problems you speak of, any more than the older and wiser plebs. You might like woke nonsense, infinite immigrants, loss of national sovereignty, etc. but frankly you ought to know better or at least be open to the idea that you don't know it all.
by array_key_first | 2025-11-25 02:43:41+00:00
Then you do not have an anxiety disorder, you just experience the emotion of anxiety.

Similarly, you can be sad, and not have depression. The thing that makes it depression is not being able to trivially drop it. If you 'have anxiety', and can flip it on and off at will, then by the clinical definition you do not have generalized anxiety disorder. That's very nice property of the DSM.
by int3trap | 2025-11-25 02:43:50+00:00
> Wrong, it makes good designs easy to write

It encourages good designs but it does not make them easy to write, but that's somewhat the point. Its not trivial to design a safe API that pushes performance limits.

> just write a lockless triple buffer for efficient memory sharing and wrap the unsafe usage of pointers with a safe API

This isn't practical or pragmatic.

And I say this as someone who likes rust and develops in it every day.
by aiandsons | 2025-11-25 02:44:12+00:00
Author here.

This is a write-up of how I replaced most of my usage of Gemini CLI / Copilot / Claude-CLI with a local stack built on:

- Ollama (Nemotron-9B, Qwen3-8B, etc.) - Continue.dev in VS Code - MCP servers (Filesystem, Git, Fetch, XRAY, SQLite, Snyk…)

It includes: - Actual hardware specs (Win 11 laptop, 8 GB VRAM) - Model selection from Hugging Face GGUF → Ollama - Step-by-step setup and maintenance - Some agent-like workflows (PR triage, dependency upgrades, release notes, security triage, docs bot, etc.)

Repo with docs and config: https://github.com/aar0nsky/blog-post-local-agent-mcp

Medium mirror: https://medium.com/@a.ankiel/ditch-the-monthly-fees-a-more-p...

Happy to hear where this falls short vs Copilot / cloud tools, and what people would add to the stack.
by genuser | 2025-11-25 02:45:33+00:00
The battle for AI supremacy continues as ChatGPT-5.1 faces formidable competition from xAI’s Grok 4.1. In a comprehensive nine-prompt evaluation, both models demonstrated remarkable capabilities but revealed distinct strengths and weaknesses. While ChatGPT-5.1 maintains its position as a reliable, all-purpose assistant, Grok 4.1 emerges as a surprisingly capable contender with particular excellence in creative tasks and nuanced understanding.
by joegibbs | 2025-11-25 02:45:58+00:00
Why not? With that kind of overhead from the assets an extra 200kb of JS is only going to make a minute difference in terms of load speed. It uses a lot of animation stuff that is provided by React libraries (Framer Motion, WebGL normal-based relighting, ThreeJS particles) that would need to be done separately otherwise and the component structure helps keep it organised.
by array_key_first | 2025-11-25 02:48:56+00:00
It's obvious to me the gains of our productivity is being siphoned up. The US economy is... very weird right now, and has been getting weird for a few decades. I wouldn't even consider the US a capitalist nation, what we have is something new.

Most companies don't do anything, most investors make money without putting in any labor, and money just... poof, appears. But not for us. Nothing really seems to make sense anymore.

Things that were trivial before, like having a receptionist to answer your phone, now seems economically impossible. And yet, our GDP continues to rise. We run companies with a tenth of the people we did before - everything is computerized, automated. But the wages are lower.
by creata | 2025-11-25 02:49:27+00:00
> What's the difference than an adult becoming affected by some subreddit, or even the "dark web", or 4chan forum, etc.

4chan - Actual humans generate messages, and can (in theory) be held liable for those messages.

ChatGPT - A machine generates messages, so the people who developed that machine should be held liable for those messages.
by mambazz | 2025-11-25 02:50:52+00:00
I submitted this privately via the MSRC Portal and followed CVD guidelines for over 90 days. I spent months appealing and emphasizing the technical severity to them. The result was always the same: They admitted the technical fix (Status: Complete), but refused the bounty claiming 'Content Policy'. I am only sharing this now because I have exhausted all internal appeals and they stopped responding.
by linsomniac | 2025-11-25 02:52:02+00:00
I'm pretty die-hard Linux, but I had a client who needed to do traffic shaping on hundreds or thousands of this ISPs users. I've tried multiple times to get anything more than the most simple traffic shaping working under Linux, with pretty bad luck at it. I set them up with a FreeBSD box and the shaping config, IIRC, was a one-liner and just worked, I never heard any complaints about it.

I've run a lot of Linux firewalls over the decades, but FreeBSDs shaping is <chefs kiss>
by BurningFrog | 2025-11-25 02:52:38+00:00
Well, we clearly come from very different work methodologies.

You have deadlines, velocity is a goal rather than a measurement, and probably several other (IMHO) process mistakes. In such systems, doing what is best for the organization can often be bad for your personal career. Still, that's probably the norm in much of the industry.

My view is that having bugs is costly. They cause problems in development, and alienates users. A bug free code base is an incredible asset to have!

You say it's inefficient to "switch context" and fix a bug the moment you find it. There is some truth there, but... (1) there are ways to work without huge context load, (2) I don't have to fix the bug that very minute. Usually, I make a note and get to it the next day or so. Also (3) the average bug fix in a well structured and tested code base is usually pretty quick.

> If your way was both more efficient AND more aligned with human nature then everyone would be working like this

This assumes the software industry is really well organized. After 40 years experience writing software, that is just hilarious! Though I probably also thought that before I got involved with much better organizations.