MurphyA/hacker-news huggingface dataset:
by raeroumeliotis | 2025-11-18 14:15:54+00:00
You need to be promoting how great you are. While it is wonderful when someone else does it, others might not always see many of your amazing achievements. This can be hard because of imposter syndrome and some out-of-date notion that it is uncouth. Ignore all of that, share your success. It is good to get that information about you out there for your career. You’ll find that people are supportive, and it might help others do the same.
by KronisLV | 2025-11-18 14:16:15+00:00
I hope they keep the pricing similar to 2.5 Pro, currently I pay per token and that and GPT-5 are close to the sweet spot for me but Sonnet 4.5 feels too expensive for larger changes. I've also been moving around 100M tokens per week with Cerebras Code (they moved to GLM 4.6), but the flagship models still feel better when I need help with more advanced debugging or some exemplary refactoring to then feed as an example for a dumber/faster model.
by herbst | 2025-11-18 14:16:59+00:00
What do they even have an spider for? I never saw any actual traffic with source Facebook. I don't understand either, but it's their official IPs, their official bot headers and it behaves exactly like someone who wants my sites down.

Does it make sense? Nah, but is it part of the weird reality we live in. Looks like it

I have no way of contacting Facebook. All I can do is keep complaining on hackernews whenever the topic arrises.

Edit:// Oh and I see the same with Azure, however there I have no list of IPs to verify it's official just because it looks like it.
by peanut-walrus | 2025-11-18 14:17:12+00:00
What traffic would you request the upstream providers to block if getting hit by Aisuru? Considering the botnet consists of residential routers, those are the same networks your users will be originating from. Sure, in best case, if your site is very regional, you can just block all traffic outside your country - but most services don't have this luxury.

Blocking individual IP addresses? Sure, but consider that before your service detects enough anomalous traffic from one particular IP and is able to send the request to block upstream, your service will already be down from the aggregate traffic. Even a "slow" ddos with <10 packets per second from one source is enough to saturate your 10Gbps link if the attacker has a million machines to originate traffic from.
by bell-cot | 2025-11-18 14:17:24+00:00
Re-sort the takeaway points, to put this one first:

> Prioritize human factors. Outage recovery depends on what operators can see and do under stress. When dashboards fail, clear logs, simple commands, and predictable behavior matter more than complex mechanisms.

Why - to make it really, really clear to bullet-skimming managers and complexity-loving engineers that too-clever "solutions", and just-an-afterthought "testing & training", and poorly documented configurations will turn into worlds of pain when things really go wrong. The "smart people" won't be in the Operations Center then. Let alone with all the details fresh in their minds. And several of them may have taken jobs elsewhere, to not much care if the org is desperate for their help right now.
by shevy-java | 2025-11-18 14:17:25+00:00
Mostly the newer ones try to improve the older ones.

I guess at some later point one will dominate and the others will go sleep mode. Just like in the movie Highlander - there can only be one. (I couldn't name offhand which JIT is the main one right now ... I always think it is from Takashi Kokubun but that may now be outdated. MJIT YJIT ZJIT HUJIT WAJIT WTFJIT GRANDMAJIT - too many JITs.)
by schnitzelstoat | 2025-11-18 14:17:55+00:00
Exclusives aren't consumer-friendly but they shift boxes. Everyone knows if you want to play a Mario game you need a Nintendo.

The exclusives ship has sailed for the Xbox now so the best they can do is try to compete with the new Steam Machine with what will essentially be a PC and allow all storefronts.

It seems Valve has gone for an entry-level machine while Xbox is going for a premium one so it'll be interesting to see how it all pans out.
by jbreckmckye | 2025-11-18 14:18:11+00:00
Why not?

It's better to have diverse, imperfect infrastructure, than one form of infra that goes down with devastating results.

I'm being semi-flippant but people do need to cope with an internet that is less than 100% reliable. As the youth like to say, you need to touch grass

Being less flippant: an economy that is completely reliant on the internet is one vulnerable to cyberattacks, malware, catastrophic hardware loss

It also protects us from the malfeasance or incompetence of actors like Google (who are great stewards of internet infrastructure... until it's no longer in their interests)
by Krssst | 2025-11-18 14:18:19+00:00
Masks were necessary to save lives at a stage where risks were unknown and pressure on health systems was high.

Missing Windows updates does not kill anyone.

Plus, installing Windows updates may cause high frustration because "feature" updates are mixed with them and may alter the OS behavior in unexpected and undesired ways. If Microsoft cares so much about security, they should allow people to stay on fixed Windows stable versions that only get security updates without pestering them. Basically, sell LTSC to normal people.
by nyeah | 2025-11-18 14:18:42+00:00
Lots of people and organizations make charitable donations. Often that's done in the name of some ideology. Always they claim they're doing good, not throwing the money away.

None of this is new. What may be new is branding those traditional claims as a unique insight.

Even the terrible behavior and frightening sophistry of some high-profile proponents is really nothing groundbreaking. We've seen it before in other movements.
by actionfromafar | 2025-11-18 14:18:44+00:00
Very true. And it sort of indicates that it is broken or at least unusual. If sending an email at least means "my email server has it now", then 20ms for that to happen would be a very unusual setup.

So if the dialog closes in 20ms if likely means the message was queued internally by the email client and then I would be worried that the queue will not be processed for whatever reason.
by mfranco123 | 2025-11-18 14:18:49+00:00
We’re expanding the Kubernetes team and hiring 3 Senior Engineer II roles to help build the future of Kubernetes at DigitalOcean.

If you’re passionate about Kubernetes, Go, and distributed systems, and want your work to empower developers everywhere, this is your chance to make a real impact.

You’ll engineer at scale, innovate boldly, and join a team that’s building cloud infrastructure that’s simple, elegant, and loved by developers around the world.

Fully remote: Open to U.S. hubs: Austin, Boston, Denver, San Francisco, Seattle
by jerf | 2025-11-18 14:18:51+00:00
You can, without loss of generality, simply insert "holding the language constant" if you like into the essay without losing the point I am trying to make, where the question of what language to choose is mostly orthogonal to the point I'm making in that particular essay.

In other contexts I'm a huge proponent of validating that your language is fast enough. There's a constant low-level flow of "we switched from X to Y and got Z% speedup" articles on HN, and while the details of the articles are often quite interesting, with rare exceptions I find that I read them and conclude that it was an error to ever have used X in the first place and the team should have been able to tell immediately that it wasn't going to be a good solution. Exceptions include "we were a startup at the time and experienced rather substantial growth" and the rare cases where technology X is just that much faster for some particular reason... though probably not being a "scripting language" as nowadays I'm not particularly convinced they're all that much faster to develop with past the first week, but something more like "X had a high-level but slow library that did 90% of what we needed but when we really, really needed that last 10% we had no choice but to spend person-years more time getting that last 10% of functionality, so we went with Y anyhow for the speed".
by dudeinjapan | 2025-11-18 14:19:05+00:00
Ruby::Box in its current form seems to radically miss the mark. Any namespace paradigm only has utility if it is widely adopted across the ecosystem. Javascript did this with ES modules 10 years ago--it IS possible--but it takes a ton of buy-in and effort from the community to achieve it.

I just don't think Ruby has this "burning need" to have namespaces/modules/erm... "boxes". So we're likely to end up with sporadic usage of Boxes leading to inconsistent behavior.
by afavour | 2025-11-18 14:19:21+00:00
Admittedly when I wrote that I was thinking about the recent AWS outage. Anecdotally, I asked friends and family about their experience and they assumed the internet was down. Almost everything at my work runs on Google cloud so we were still running but we observed a notable dip in traffic during the outage all the same.

> it is still bad

No doubt. But there’s a calculation to make, is it bad enough to spend the extra money on mitigations, to hire extra devops folks to manage it all… and in the majority of end user facing cases the answer is no, it isn’t.
by simtel20 | 2025-11-18 14:19:37+00:00
La Liga (the football company) likes to send out takedown notices to anyone who may host anything that looks like a football to protect their precious games, no matter the collateral damage or the lack of any requirements to show damage. They have the right to block anything in Spain at their discretion either by DNS or IP. They do seem to work in good faith if you talk to them, though, and if you can either remove sites or content when they ask.
by spoaceman7777 | 2025-11-18 14:19:37+00:00
Wow. They must have had some major breakthrough. Those scores are truly insane. O_O

Models have begun to fairly thoroughly saturate "knowledge" and such, but there are still considerable bumps there

But the _big news_, and the demonstration of their achievement here, are the incredible scores they've racked up here for what's necessary for agentic AI to become widely deployable. t2-bench. Visual comprehension. Computer use. Vending-Bench. The sorts of things that are necessary for AI to move beyond an auto-researching tool, and into the realm where it can actually handle complex tasks in the way that businesses need in order to reap rewards from deploying AI tech.

Will be very interesting to see what papers are published as a result of this, as they have _clearly_ tapped into some new avenues for training models.

And here I was, all wowed, after playing with Grok 4.1 for the past few hours! xD
by valyala | 2025-11-18 14:20:03+00:00
> many are adopting to gain independence from vendors

This is the worst reason to migrate to OTEL format for metrics, since every vendor and every solution for metrics has its' own set of transformation rules for the ingested OTEL metrics before saving them into the internal storage (this is needed in order to align OTEL metrics to the internal data model unique per each vendor / service). These transformation rules are incompatible among vendors and services. Also, every vendor / service may have its own querying API. This means that users cannot easily migrate from one vendor / service to another one by just switching from the old format to OTEL format for metrics' transfer. Read more about this at https://x.com/valyala/status/1982079042355343400
by gnfargbl | 2025-11-18 14:20:21+00:00
The recent Azure DDoS used 500k botnet IPs. These will have been widely distributed across subnets and countries, so your blocking approach would not have been an effective mitigation.

Identifying and dynamically blocking the 500k offending IPs would certainly be possible technically -- 500k /32s is not a hard filtering problem -- but I seriously question the operational ability of internet providers to perform such granular blocking in real-time against dynamic targets.

I also have concerns that automated blocking protocols would be widely abused by bad actors who are able to engineer their way into the network at a carrier level (i.e. certain governments).
by nemomarx | 2025-11-18 14:20:46+00:00
For decades things like usaid were bipartisan and basically untouchable, so that and higher taxes would have been a fairly secure way to do things. The question is can that be accomplished again, or do we need a thorough overhaul of who's in power in various parts of society?

None of this will happen naturally though. We need to make it happen. So ultimately my position is that we need to aim efforts at making these changes, possibly at a higher priority than individual giving - if you can swing elections or change systems of government the potential impact is very high in terms of policy change and amount of total aid, and also in terms of how much money we allow the rich to play and gamble with. None of these are natural states of affairs.
by RKFADU_UOFCCLEL | 2025-11-18 14:21:52+00:00
Why do people on a technical website suggest this? It's literally the same snake oil as Cloudflare. Both have an endgame of total web DRM; they want to make sure users "aren't bots". Each time the DRM is cracked, they will increase its complexity of the "verifier". You will be running arbitrary code in your big 4 browser to ensure you're running a certified big 4 browser, with 10 trillion man hours of development, on an certified OS.
by dudeinjapan | 2025-11-18 14:21:57+00:00
Ractors have promise but the implementations up till now haven't had strong concurrency safety. It seems in the latest release some of the heavy-hitter contributors like Jean Boussier (byroot) have taken a detailed look at Ractors and started to clean things up.

https://byroot.github.io/ruby/performance/2025/05/24/unlocki...
by afavour | 2025-11-18 14:22:23+00:00
I’m not so sure about that. The pre-internet age had a lot of forced “mental health breaks”. Phone lines went down. Mail was delayed. Trains stalled. Businesses and livelihoods continued to thrive.

The idea that we absolutely need 24/7 productivity is a new one and I’m not that convinced by it. Obviously there are some scenarios that need constant connectivity but those are more about safety (we don’t want the traffic lights to stop working everywhere) than profit.
by el3ctron | 2025-11-18 14:22:59+00:00
as a recent gemini user i like that clean looks, amazing fast page loading if compares with http web, low stimulation feedback, that makes me feel more concentrated and allow me to be less distracted while reading contents. There is a good browser options, graphical but that lovely terminal and hyper-fast ones.

In a world full of marketing/publishers psychopaths, Gemini protocol is a hope and part of human resistance.
by valyala | 2025-11-18 14:22:59+00:00
> we did, I think the entire journey was 7 years long, communicated many times, over at least 6 major releases. maintaining dashboards in two languages increased complexity, whilst reducing compatibility, and gave a very large security surface to be worried about. we communicated clearly, provided migration tools, put it in release notes, updated docs, repeated it at conferences and on community calls

If this migration appeared to be so painful, why did you decide to finish it (and make users unhappy) instead of cancelling the migration at early stages? What are benefits of this migration?
by JustExAWS | 2025-11-18 14:23:01+00:00
I’ve worked in cloud consulting for a little over five years. I can say 95% of the time when I discuss the cost and complexity tradeoffs of their websites being down vs going multi region or god forbid “multi cloud”, they shrug and say, it will be fine if they are down for a couple of hours.

This was the same when I was doing consulting inside (ie large companies willing to pay the premium cost of AWS ProServe consultants) and outside working at 3rd party companies.
by Krssst | 2025-11-18 14:23:04+00:00
> Servers I understand because they're exposed to the Internet at all times. Not PCs

And, for reference, updates are not forcefully installed on Windows Server.

Well, forcefully restarting a server without asking its owner does sound like a bad idea. And disrespecting the users in that way when the competitor OS for servers is free, has significant market share and is known for letting the user to what they want and getting out of the way should probably also be avoided from a market perspective.
by Garlef | 2025-11-18 14:23:11+00:00
Regarding key order in JSON:

- in the spec, key order clearly exists at the syntactic level

- it's just that the spec says nothing about the semantics of JSON (besides "A conforming processor of JSON texts should not accept any inputs that are not conforming JSON texts.")

quote: "The JSON syntax [...] does not assign any significance to the ordering of name/value pairs"

As a result, the operation of "parsing then serializing again" is not even guaranteed to be idempotent across different environments.
by IAmBroom | 2025-11-18 14:23:49+00:00
That would create a genetic bottleneck of one, which should shine like a beacon in the DNA studies. We already know Homo sapiens had a bottleneck of thousands at one point.

It also makes me wonder about the longlasting question of speciation. If it happens suddenly, shouldn't that indicate a singular (or near-singular) instance of mutation?
by dig1 | 2025-11-18 14:23:51+00:00
> ...does it all add up to cost savings?

IMHO it adds, but only if you are big enough. Netflix level. At that level, you go and dine with Bezos and negotiate a massive discount. For anyone else, I’d genuinely love to see the numbers that prove otherwise.

> There's zero personal responsibility

Unfortunately, this seems to be the unspoken mantra of modern IT management. Nobody wants to be directly accountable for anything, yet everyone wants to have their fingerprints on everything. A paradox of collaboration without ownership.
by crazygringo | 2025-11-18 14:23:57+00:00
This is literally the reason that the emotion of frustration exists.

Our brain is aware of when we stop making progress towards a goal we care about. The feeling of frustration builds until it becomes so strong it essentially forces us to stop.

Then, to get rid of the emotion, we have to step back and reassess. And then either see if we should try a different approach to the problem, give up on the problem entirely, or triple-check that the same course of action is still worth pursuing and thus "re-energize" ourselves.

If we never felt frustrated, we'd keep attempting futile goals for so much longer. When you feel frustrated, the answer is never to just ignore the feeling and try to "power through". It's to step back and reassess at the first opportunity.
by ethmarks | 2025-11-18 14:23:59+00:00
> TPUs are specifically designed to handle the massive computations involved in training LLMs and can speed up training considerably compared to CPUs.

That seems like a low bar. Who's training frontier LLMs on CPUs? Surely they meant to compare TPUs to GPUs. If "this is faster than a CPU for massively parallel AI training" is the best you can say about it, that's not very impressive.
by touristtam | 2025-11-18 14:24:40+00:00
Ooooh so I am not the only one to swear at those blinding headlights? Interestingly (or not), I think there should be a regulated height for the headlights all private cars; I drive a B-segment type of car, and I find all those European SUVs have their headlights right at my shoulder level meaning I will always be subject to be blinded by this type of vehicle vs a similar lower car. That goes for the vans as well.
by dSebastien | 2025-11-18 14:24:42+00:00
Phew, my latest 3h30 workshop about Obsidian was saved. I recorded it this morning, not knowing about the Cloudflare issue (probably started while I was busy). I'm using Circle.so and they're down (my community site is now inaccessible). Luckily, they probably use AWS S3 or similar to host their files, so that part is still up and running.

Meanwhile all my sites are down. I'll just wait this one out, it's not the end of the world for me.

My GitHub actions are also down for one of my project because some third-party deps go through Cloudflare (Vulkan SDK). Just yesterday I was thinking to myself: "I don't like this dependency on that URL...". Now I like it even less
by Aurornis | 2025-11-18 14:24:45+00:00
I’ve written before on HN about when my employer hired several ex-FAANG people to manage all things cloud in our company.

Whenever there was an outage they would put up a fight against anyone wanting to update the status page to show the outage. They had so many excuses and reasons not to.

Eventually we figured out that they were planning to use the uptime figures for requesting raises and promos as they did at their FAANG employer, so anything that reduced that uptime number was to be avoided at all costs.
Ask HN: Reasonable ways to avoid single points of failure in web services?
by nnyms1 | 2025-11-18 14:25:24+00:00
I previously commented [1] that I couldn't log into any of the 5 monitoring services I have setup, due to the current Cloudflare outage.

Now in principle, even with this kind of outage, it should be possible to log into your domain registrar, reset your nameservers and add some DNS records to get atleast some parts of your infra back online by bypassing CF.

Guess what? Not only can't I log into Cloudflare, but also Porkbun, Dynadot and Spaceship (owned by Namecheap).

It seems to me that the internet is getting far too centralized. A single outage should not mean everything is down, we saw this with AWS recently and now CF.

Is there a reasonable way to get the benefits that Cloudflare provides like DDoS protection, CDN, turnstile, etc. without using CF (or an equivalent service) and making it a single point of failure?

[1]: https://news.ycombinator.com/item?id=45964199
by jerf | 2025-11-18 14:25:29+00:00
I like to characterize it as "the slowest language of the fastest class of languages". In general other compiled languages are faster, though generally we're talking 2 or 3 times at the most (Go doesn't optimize very hard but the language defaulting to unboxed values made up for a substantial proportion of that versus more box-heavy compiled languages), but Go is "generally" faster than nearly all non-compiled languages. "Generally" here means "on general code"; JIT languages can definitely outdo Go on heavily numeric code, even in scripting languages, because JITs are very good at that, but the sort of "general" code that isn't obviously numeric will be faster in Go than any non-compiled language.

This sort of complicated analysis doubles as another example of the difficulty of context-free "fast" and "slow" labels. Is Go "fast"? For a general programming language, yes, though not the fastest. If you reserve "fast" for C/C++/Rust, then no it is not fast. Is it fast compared to Python, though? Yes, it'll knock your socks off if you're a Python programmer even with just a single thread, let alone what you can do if you can get some useful parallel processing going.
by 1970-01-01 | 2025-11-18 14:25:31+00:00
>number of orders of magnitude, but are doing engineering across the entire range.

This in a way highlights the knowledge gap that exists in American manufacturing. Physical parts are designed to work in terms of cycles, which can span both decades and milliseconds. Engines in particular need to work in terms of milliseconds and decades, but there are other vehicle parts such as airbags, pumps, and steering and suspension components that need to be designed for massive orders of magnitude.
by falcor84 | 2025-11-18 14:25:48+00:00
Your mileage may vary, but for me, working today with the latest version of Claude Code on a non-trivial python web dev project, I do absolutely feel that I can hand over to the AI coding tasks that are 10 times more complex or time consuming than what I could hand over to copilot or windsurf a year ago. It's still nowhere close to replacing me, but I feel that I can work at a significantly higher level.

What field are you in where you feel that there might not have been any growth in capabilities at all?

EDIT: Typo