MurphyA/hacker-news huggingface dataset:
by intended | 2025-11-16 13:35:10+00:00
Calling it a rhetorical exercise is… well sure.

Disingenuousness is a high bar for the argument you formulated - which is why it went no further. Disingenuousness is a matter of being insincere.

You ask others to eject the emotional cost of CSAM from their calculations, while emphasizing the most extreme version of police search in yours. Something I never did.

Further, you assumed that I had no standing to ask people to go deeper into the field. Yet, once I make the mistake of saying that I know what that feels like - yet am making the request I am (to look into this field) you double down.

The issue is not that I need to understand you - you are free to your opinion.

I AM saying, that more people need to look into the corners of online safety that we are happy to argue about. ESPECIALLY techies.

I am saying that a 50% accuracy rate is pretty damn good, because I expected it to be even worse.

I don’t know how to put it man - better people than me need to pay attention to where the gears of technology and speech engage with the fleshy parts of our information machinery.

Hell - something like sharing threat intel across major tech firms, is a challenge even today.

In tactical terms - the ideological position against government over reach is being flanked and the tolerances overwhelmed by unending tides of incidents and extreme situations.

If the position is to be defended, then it needs active measures, which mean people other than me have to get the details of what is going on and frame it for others to act on.
Show HN: Hide Your Face with One Click
by yong1024 | 2025-11-16 13:35:22+00:00
Recently, I developed a free AI-powered face tool that uses emojis, blurring, or pixelation to protect privacy by concealing faces.

To be honest, I created it out of personal necessity. I tested many apps available on the market, but most of them require downloading and installing on a phone, which is quite inconvenient.

With this face AI tool, all you need is one click. Additionally, you can specify the facial region directly in the preview.
by conartist6 | 2025-11-16 13:36:11+00:00
If they choose to publish no-truth-value garbage about my life's work I will f**ing shred them with words.

This project and the whole philosophy behind it is just dripping with disrespect so you won't find me in line to be polite to the people who made it. If they're going to walk over and chunder their lukewarm slop onto me they can expect a verbal fistfight.

I opt out
by BinaryIgor | 2025-11-16 13:36:20+00:00
I wonder why is it that we get an increase in these automated scrapers and attacks as of late (some few years); is there better (open-source?) technology that allows it? Is it because hosting infrastructure is cheaper also for the attackers? Both? Something else?

Maybe the long-term solution for such attacks is to hide most of the internet behind some kind of Proof of Work system/network, so that mostly humans get to access to our websites, not machines.
by pjmlp | 2025-11-16 13:36:31+00:00
Which is what makes Linux kernel stand out, as we can see by Sony and Apple contributions upstream.

Had BSD not been busy with AT&T lawsuit, all major UNIXes would probably still be around, consuming whatever was produced out of BSD like the networking code and OS IPC improvements over AT&T UNIX.

Instead sponsoring Linux kernel became the plan B, as means to reduce their UNIX development costs.

> Commercial use began when Dell and IBM, followed by Hewlett-Packard, started offering Linux support to escape Microsoft's monopoly in the desktop operating system market

-- https://en.wikipedia.org/wiki/Linux

> 1998: Many major companies such as IBM, Compaq and Oracle announce their support for Linux.

-- https://en.wikipedia.org/wiki/History_of_Linux

Ironically the major contributor to many GNU/Linux critical components, Red-Hat, is now an IBM subsiduary, recouping that investment beyond doing only Aix.

It is no accident that all FOSS OSes that came after Linux, none of them has adopted GPL, as big corporations would rather not be obliged by it.
by ineedasername | 2025-11-16 13:37:45+00:00
>This involved querying internal services, extracting authentication certificates from configurations, and testing harvested credentials across discovered systems.

How ? Did it run Mimikatz ? Did it access Cloud environments ? We don’t even know what kind of systems were affected.

I really don't see what is so difficult to believe since the entire incident can be reduced to something that would not typically be divulged by any company at all, as it is not common practice for companies to divulge every single time the previously known methodologies have been used against them. Two things are required for this:

1) Jailbreak Claude from guardrails. This is not difficult. Do people believe advancement with guardrails are so hardened through fine tuning it's no longer possible?

2) The hackers having some of their own software tools for exploits that Claude can use. This too is not difficult to credit.

Once an attacker has done this all Claude is doing is using software in the same mundane fashion as it does every time you use Claude code and it utilizes any tools to which you give it access.

I used a local instance of Qwen3 coder (A3B 30B quantized to IQ3_xxs) literally yesterday through ollama & cline locally. With a single zeroshot prompt it wrote the code to use the arxiv API and download papers using its judgement on what was relevant to split the results into a subset that met the criteria I gave for the sort I wanted to review.

Given these sorts of capabilities why is it difficult the believe this can be done using the hacker's own tools and typical deep research style iteration? This is described in in the research paper, and disclosing anything more specific is unnecessary because there is nothing novel to disclose.

As for not releasing the details, they did: Jailbreak Claude. Again, nothing they described is novel such that further details are required. No PoC is needed, Claude isn't doing anything new. It's fully understandable that Anthropic isn't going to give the specific prompts used for the obvious reason that even if Anthropic has hardened Claude against those, even the general details would be extremely useful to iterate and find workarounds.

For detecting this activity and determining how Claude was doing this it's just a matter of monitoring chat sessions in such a way as to detect jail breaks, which again is very much not novel or an unknown practice by AI providers.

Especially in the internet's earlier days of the internet it was amusing (and frustrating) to see some people get very worked up every time someone did something that boiled down to "person did something fairly common, only they did it using the internet." This is similar except its "but they did it with AI,"
by Milderbole | 2025-11-16 13:38:04+00:00
If the article is not just marketing fluff, I assume a bad actor would select Claude not because it’s good at writing attacks, instead a bad actor code would choose it because Western orgs chose Claude. Sonnet is usually the go-to on most coding copilot because the model was trained on good range of data distribution reflecting western coding patterns. If you want to find a gap or write a vulnerability, use the same tool that has ingested patterns that wrote code of the systems you’re trying to break. Or use Claude to write a phishing attack because then output is more likely similar to what our eyes would expect.
by potato3732842 | 2025-11-16 13:38:33+00:00
No amount of Reddit-ish always-isms and rules of thumb will make lifting and lowering objects this heavy not fraught with hand mangling peril if one is stupid or careless.

Chocks, deflating a tire or two, parking against a tree or another car with a working parking brake, ratchet strap through the wheel spokes to something solid, etc, etc, where there's a will there's a way.
by jesprenj | 2025-11-16 13:39:49+00:00
If the battery is in the trunk on a BMW automatic, park the car in a garage backwards with the car nearly touching the wall with the trunk. Stop it (parking brake engages). Wait for the battery to break beyond the point of recharging it by letting the car sit still for some months. Congratulations, you've successfully soft locked your car. You can't open the trunk, because you can't move the car forward, because you can't put the car in neutral and release the parking brake, because you have no power.
by Eddy_Viscosity2 | 2025-11-16 13:40:18+00:00
> However it's just as likely that Ubuntu see $$$

This is the bigger problem. There is a financial incentive to make OS suck for everyone but the biggest enterprise clients. If some linux provider started to fill take significant market share from, windows, it would eventually become as bad and for the same reasons. We need a wide field of competition to keep this from happening. The problem is that with all these competing OS variants, none have the resources and user-base to maintain easy compatibility with all the software and hardware being produced. So they all suck a little bit and in different ways. If one did get big enough to manage this, then they will exploit that market dominance through enshittification. It's a never ending battle.
by tell_me_whai | 2025-11-16 13:40:32+00:00
Hi, this looks really cool and its a smarter way to solve an issue I've had for a long time. Couple of questions:

1. My preferred installation method is through `brew`, would you consider adding it as and install option?

2. Any plans of supporting multiple languages?

3. Can it move files to mounted folders? I use google drive for most of my admin stuff and their client allows to mount the drive.
by PunchyHamster | 2025-11-16 13:40:34+00:00
The value is not having to put mechanical linkage all the way to the back.

I'd think if it would be cheaper to leave it manual they would.

But I'm appalled at more and more choices that make cars more error-prone in emergency.

I'd never want brake by wire car. Even if the mechanical reliability would be the same, one coding error and brakes are gone
by hollerith | 2025-11-16 13:40:45+00:00
In a previous comment, you wrote about Roman soldiers "hunting any game they came across". "Game" means wild animals.

Of course they stole and ate any livestock they could get unless they were passing through the territory of an ally, in which case the commander probably has warned the men that any man caught pillaging would be executed, but in compensation, the commander had probably purchased livestock and other food from the ally to be distributed to the men.
by bgwalter | 2025-11-16 13:40:49+00:00
It's actually a good thing if humans crawl sewers, clean the kitchen and decontaminate Chernobyl while robots are playing chess, dance and mimic cute kittens.

This article comes just in time to silence the heretics who ask what the use of an Optimus is. Promise a factory robot, deliver a Tamagotchi.
by rcxdude | 2025-11-16 13:40:54+00:00
Medical device software.

That said, software in these regulated industries tends to be a bit of a disaster area. Mainly because embedded software pays so much less, the average skill level is lower and no amount of quality paperwork is going to completely stop systematic incompetence. (not that the paperwork itself is inherently a problem: even skilled engineers will make mistakes sometimes and the quality system does generally mean that you do reviews and catch them. But when neither your planners nor your implementers nor your reviewers understand that casting pointers around willy-nilly in C is undefined behaviour, it's not gonna save you).
by setopt | 2025-11-16 13:40:59+00:00
It doesn’t really look the same by default.

Most new users end up disabling the toolbar, menu bar, scroll bars, etc. and only then does it look the same in the terminal. Even then, many themes and packages frivolously change font sizes or switch to non-monospace fonts in some GUI contexts, so for users that like the uniformity of the interface you need to do extra work to disable these features.

(I personally like the terminal aesthetic, and configure the GUI to look like a terminal. That basically required advising load-theme to loop over all faces and disable font properties I don’t like after each theme change…)
by CPLX | 2025-11-16 13:41:27+00:00
> America had no idea how good they had it, in the before times.

The de minimis exception was absolutely insane. It was a full-blown loophole that caused tens of billions of dollars in goods to come through the border almost completely unregulated, ranging from the stuff that should have had tariffs on it, to knockoffs, to drugs and chemicals that shouldn't be in the United States at all.

Even if you are a free trade enthusiast, having 100 million individually wrapped packages not checked by anyone rather than organized container shipping and warehousing is still insane and wasteful and makes a mockery of the concept of even having an international border.

Closing that loophole is literally the only sane path forward. Yes, also, it is a rule that government regulations should be easy to follow and well-administered to avoid the confusing and difficult process of trying to send a package to your friend or order some computer parts.

But, way we had it in the "before times" was absolutely unworkable. It was being exploited to the detriment of American businesses.
by testdelacc1 | 2025-11-16 13:41:49+00:00
This is already happening with the Steam Deck! Some of the best AAA games released in the last few years play excellently on the Steam Deck. This is mainly because it provides an excellent baseline that developers can test and optimise for. When least 1.5% or more of your customers have this exact configuration, it makes sense to optimise for them.

The 2023 game of the year was Baldurs Gate III. During the development they specifically tested on the Deck and it played pretty well. But they optimised the heck out of it, finally shipping a native Deck build earlier this year.

That’s why the Deck punches well above its weight - all the optimisation that devs do for it. And that’s why gamers continue to buy it, years after it released. Devs aren’t lazy, or averse to optimisation. They just need a large enough target to optimise for. If the Deck/GabeCube is a large enough proportion of the player base, they’ll put in the effort.
by thoroughburro | 2025-11-16 13:41:53+00:00
The author’s arguments explicitly don’t dispute plausibility. It accurately states that mere plausibility is a misleading basis for this report, but that the report provides nothing but plausibility, and thus is of low quality and dubious motivation.

Anthropic’s lack of any evidence for their claims doesn’t require any position on AI agent capability at all.

Think better.
by ocdtrekkie | 2025-11-16 13:42:13+00:00
Had a Kia (Hyundai's sister brand) towed recently. Tow truck driver knew right where it needed to go for service, I asked him if he tows Kias a lot, and his answer was "Just Hyundais and Kias all day". (Car is about five years old.)

Meanwhile, my Toyota is having its first major problem, it's age twelve, and I'm hoping to drive it until it's old enough to drive.
by rsynnott | 2025-11-16 13:42:17+00:00
This has kind of been the problem with SMRs; they sound great, but as you develop them, they get less and less small and modular. These are 470MWe. Coincidentally, the (very old) 'normal' MAGNOX reactors which used to operate at this site were 490MWe; in their day they were considered quite large.

> Afterall, they are from the same technology that was powering nuclear subs, right?

Not usually, no; that wouldn't be cost-effective.
by DrierCycle | 2025-11-16 13:43:10+00:00
As the issue now includes a deepening of recent radical shift potential in equator-to-pole gradient, the chances for this are now measurably distinct.

The question is left open, particularly in the recent data on gulfstream collapse, which may be imminent.

I'm not sure anyone is qualified to claim 100% anoxic events and hydrogen sulfide out gas are limited to the Permian condition.

https://www.nature.com/articles/s43247-025-02793-1

and

https://agupubs.onlinelibrary.wiley.com/doi/full/10.1029/200...

are in conflict.
Show HN: Kalendis – Scheduling API (keep your UI, we handle timezones/DST)
by dcabal25mh | 2025-11-16 13:43:26+00:00
Kalendis is an API-first scheduling backend. You keep your UI; we handle the gnarly parts (recurrence, time zones, DST, conflict-safe bookings).

What it does:

• MCP tool: generates typed clients and API route handlers (Next.js/Express/Fastify/Nest) so you can scaffold calls straight from your IDE/agent tooling.

• Availability engine: recurring rules + one-off exceptions/blackouts, returned in a clean, queryable shape.

• Bookings: conflict-safe endpoints for creating/updating/canceling slots.

Why we built it:

We kept rebuilding the same "hard parts" of scheduling: time zones/DST edge cases, recurring availability, conflict-aware booking, etc. We wanted a boring, reliable backend so we could ship product features without adopting a hosted scheduling UI.

How it's helped:

We stopped re-implementing DST/recurrence math and shipped booking flows faster.

One small team (just 2 developers) built a robust booking platform for their business using Kalendis—they kept full control of their UX without spending lots of cycles on scheduling infrastructure.

The MCP generator cut the glue code: drop in a typed client or route, call the API, move on.

Some tech details:

• REST API with ISO-8601 timestamps and IANA time zones

• Recurring availability + one-off exceptions (designed to compose cleanly)

• Focused scope: users, availability, exceptions, bookings (not a monolithic suite)

MCP integration:

MCP server exposes tools like generate-frontend-client, generate-backend-client, generate-api-routes, and list-endpoints.

Add to your MCP settings:

{ "mcpServers": { "kalendis": { "command": "npx", "args": ["-y", "@kalendis/mcp"] } } }

How to try it:

Create a free account → get an API key. (https://kalendis.dev)

Hit an endpoint:

curl -H "x-api-key: $KALENDIS_API_KEY" \ "https://api.kalendis.dev/v1/availability/getAvailability?userId=<user-id>&start=2025-10-07T00:00:00Z&end=2025-10-14T00:00:00Z&includeExceptions=true"

What feedback would be most useful:

Gaps in the endpoint surface (what's missing for your use case?).

Features that would benefit this service integration in your app.

MCP generator output—anything you'd want it to emit differently?

Happy to answer questions and post example snippets in the thread. Thanks for taking a look!

— Dave (Kalendis)
by jhanschoo | 2025-11-16 13:43:29+00:00
It seems to me that frequently, to realize that your resources in a domain has improved, you need to heavily risk the very few resources that you know you have.

In the example the author gives, her husband did not have that inaccurate, yet reasonable perception, and only in hindsight does the author realize her own inaccurate perception.

I cannot recommend that readers take the author's advice to heart as carelessly as she presents it. There is some merit to it, but there are sometimes real consequences when you try when your perception was accurate that you shouldn't have, and you have carelessly misread your increase in capacity, especially if you are desperate for it.
by matt-p | 2025-11-16 13:43:30+00:00
I adore openbsd and have been using it since 4.x however it is still slow, not slow to boot or anything like that but if you run it as a web server it manages about half the req/s of Debian. Network performance is also slower than Debian if you're using it as a firewall (but I still prefer it as the syntax of PF is just perfect).
by realo | 2025-11-16 13:44:57+00:00
I am Canadian. Since the USA started their economic war with Canada, I changed some habits, like my other fellow canadians.

1) Stopped buying USA wine totally

2) Canceled our plans for vacations in the USA

3) Stopped buying USA orange (or any citrus) juice

4) Carefully check the provenance of any fruit or vegetable in the supermarket and actively avoid anything that comes from the USA

... and the list goes on.

I am not alone!

How do those immediate and tangible consequences serve the interests of the USA producers and companies affected, exactly?
by fao_ | 2025-11-16 13:45:25+00:00
You do not have to compete with yourself, or anyone, to get better.

Getting better comes from collaborating:

- Being attentive to your practice (i.e. recording, going over your work, etc.)

- Asking, and taking the advice of other people in your field (i.e. find places where there are people older than you who have done the same tasks, and consult with them)

- Being exposed to diversity of thought (i.e. teams more diverse in culture, race, and gender, consistently come up with a better array of solutions — this directly benefits you, helps you think along alternative dimensions and perspectives, exposes errors you may have encoded)

- With art, taking on voluntary restrictions to inspire you — art prompts, game jams, etc.

Sure, some of these can be framed as competition — maybe you might frame being attentive to your practice as competing with your past self, and taking voluntary restrictions as competing with the others in the game jam or whatever — but I very, very much prefer to frame them as collaborating — in a solo practice session, you're collaborating with yourself to find the flaws and fix them, in a game jam session, you're collaborating with those around you to produce lots of interesting and good art.

In many cases, you literally cannot improve without depending on the advice of those around you — another perspective, a second pair of eyes, the well-worn advice of the 40yro burned out techies. Framing those as competition will actively just burn you out, in the end (or otherwise people will pick up on it and be less likely to help you, lol).
by gwbas1c | 2025-11-16 13:45:52+00:00
You must not be familiar with how copyright works.

Most copyrights are works for hire and owned by a corporation.

Your proposal would only work for unpublished works, and self-published works.

Personally, once I think a work is made available to the general public, it needs to enter the public domain, or enter a period of compulsory licensing, after a predetermined period of time. It doesn't matter if the copyright is owned by an individual or a corporation.
by R_D_Olivaw | 2025-11-16 13:48:03+00:00
I'm curious, hoping you might shed some insight.

I'm not in tech per se, but in education with a seasoning of tech.

Would you have any insight into what the field for education or training might look like for your new field?

I think (perhaps feel is better) that manufacturing will make some sort of comeback and that the gratification from it is actually quite beneficial for the human condition.

So, I'm interested in trying to glean what I might pivot into from the perspective of training and education.
by cubefox | 2025-11-16 13:48:05+00:00
Apparently they don't, this says 12% to 15%: https://www.techradar.com/pro/microsoft-just-dropped-its-sto...

That's still higher than what seems reasonable for a simple store front, but they aren't as bad as Valve or Apple.

Note that Valve is a relatively small company with only a few hundred employees, but with one of the most extreme revenue-per-employee ratios in the world, estimated at $19 million per employee:

https://upptic.com/valve-structure-employment-numbers-revenu...

That's orders of magnitude higher than companies like Apple, Elsevier or Nintendo. Steam is basically free money for Valve. Valve is extracting huge rents (around 6.5 billion yearly revenue) for negligible expenses (only 79 people working on Steam).
by intended | 2025-11-16 13:48:14+00:00
There’s a report with Bruce Schneier that estimates GenAI tools have increased the profitability of phishing significantly [1]. They create emails with higher click through rates, and reduce the cost of delivering them.

Groups which were too unprofitable to target before, are now profitable.

[1] https://arxiv.org/abs/2412.00586?