MurphyA/hacker-news huggingface dataset:
by brailsafe | 2025-11-11 21:13:18+00:00
> My own work couldn’t be more boring, I’m not particularly smart or talented. I just grind out many little varyingly useful websites with card payment forms.

Are you talking like one-off niche utilities/services that another busy person would happily pay a small amount to solve an immediate problem with and don't necessarily require a ton of backend scaling/maintenance, or subscription type stuff? When you say "many", is that >100?
by Yokolos | 2025-11-11 21:13:19+00:00
I see you didn't read the article.

The problem isn't Google reporting vulnerabilities. It's Google using AI to find obscure bugs that affect 2 people on the planet, then making a CVE out of it, without putting any effort into fixing it themselves or funding the project. What are the ffmpeg maintainers supposed to do about this? It's a complete waste of everybody's time.

> The latest episode was sparked after a Google AI agent found an especially obscure bug in FFmpeg. How obscure? This “medium impact issue in ffmpeg,” which the FFmpeg developers did patch, is “an issue with decoding LucasArts Smush codec, specifically the first 10-20 frames of Rebel Assault 2, a game from 1995.”
by antirez | 2025-11-11 21:14:04+00:00
Well TLDR I'm an idiot :D

I write blog posts into TextEdit, just the white page to fill with text. Normally this is fine as I end writing and publish the blog post. This time after writing it I left it there for weeks: I wanted to refine it a bit, the post felt not "ready". Then I had to reboot the computer for an upgrade, and I magically quit the application hitting cancel when there was to save the document :-|

However rewriting it was fast, and the second version was better. So, it's fine. But starting from now I'll use the less pleasant (to me) Google Docs.
by chiph | 2025-11-11 21:14:05+00:00
> Design For Rapid Scale In a Crisis

One of the things that I think Anduril (Palmer Luckey and other founders) is doing right is designing for manufacturability. The invasion of Ukraine has shown that future conflicts will use up weapons at a very high pace. And that the US capability to build them at the rate needed to sustain conflict isn't there anymore. But that one thing that could help is making them easier to build. (the decline of US manufacturing is a related but separate topic)
by 1718627440 | 2025-11-11 21:14:25+00:00
> Folks point this out, but they don't ever talk about what the alternative was.

That LLMs would be as expensively priced as they really are on society and energy costs? A lot of things are possible, whether they are economically feasible is determined by giving them a price. When that price doesn't reflect the real costs, society starts to wast work on weird things, like building large AI centers, because of a financial bubble. And yes putting people out of business does come with a cost.

"Innovation" is not an end goal.
by jstummbillig | 2025-11-11 21:14:29+00:00
If historically worries that arose in mouse studies replicated with high reliability in humans, we would not wait for the results of human trials to apply what we learned for mice to humans on anything of importance.

It's not that we want to do humans trials. We do it because, apparently, it has been observed that it's unreasonable not to do it before applying something we observed in mice to humans.
by MBCook | 2025-11-11 21:14:44+00:00
But is he?

We don’t know. If having such a phone keeps someone in the Apple ecosystem that may be more valuable. All their services they’re always pitching. People with iPhones are more likely to buy iPads and Macs.

Maybe the get tired of the tiny screen or want a better camera and move up in a few years.

The value of a customer over a longer time horizon, perhaps 10 years, may be better if you let them buy the phone you make $250 on instead of $450.

He’s maximizing value for the quarter. That so often steers companies wrong.
by jeff-hykin | 2025-11-11 21:15:14+00:00
One of my long term goals is generating tauri builds on the web. E.g. click "build" and wasm cross compiles a .exe, a .app, and a .appimage which start downloading. Theres a long way to go before that's possible, but theres been pretty steady progress. Especially now that clang was compiled to wasm theres a real avenue to bootstrap everything.
by baranul | 2025-11-11 21:15:20+00:00
What you are saying is right, but Mozilla looks to be abusing their users. The appropriate thing to do, if they were concerned about looking more honest and showing they care about user's privacy, would be to have the features listed in settings and allow them to be turned off. However, that's not what they are doing.

I've also noticed that new versions not only can sneak in new features, but reverse or conflict with previous changes users made in config. The sad thing is how limited the options people have to avoid the abuse.
by foobarbecue | 2025-11-11 21:15:21+00:00
I don't think this is good advice for building, programming, or operating spacecraft.

Edit to add detail: a spacecraft tends to have lot of subsystems that need to work together well, each requires a specialist lead, and there's a high return on investment for things like improving efficiency, sharing resources between subsystems, etc. leading to reduced power, data, and mass requirements. They tend to be bespoke and high value so it's critical that detail knowledge is spread among multiple people, edge cases are carefully considered, and lessons learned get learned by everybody. Collaboration is key in that kind of endeavour. If you're slapping together a CRUD app that can't hurt anyone, sure, go hog wild.
by sunscream89 | 2025-11-11 21:15:40+00:00
Yes. Torsion of the particle spin axis. What would ordinarily be moving mass less at the speed of light is moving semi-toroidally in sum as the locally bound mass particle. Like a knot (or strand of knots) mass particles emerge in spacetime through the spin torsion. This torsion gravitationally interacts with all other so bound particles in our spacetime dimension. Everything is falling, spinning, and decaying.
by dwringer | 2025-11-11 21:15:51+00:00
I've definitely noticed Gemini's tendency to return the image basically unchanged, but not noticed it being worse or better for images of people. When I tested by having it change aspects of a photo of me, I found it was far more likely to cooperate when I'd specify, for instance, "change the hair from long to short" rather than "Make the hair short" (the latter routinely failed completely).

It also helped to specify which other parts should not be changed, otherwise it was rather unpredictable about whether it would randomly change other aspects.
by phantasmish | 2025-11-11 21:16:02+00:00
I've played Mario in emulators where I could play just fine, and others where I kept falling down holes and such on friggin' level 1, which at times I could probably have beaten literally blindfolded, and had a hard time progressing at all. The latter might not (or, if extremely bad, might) be laggy enough for me to be able to tell you by looking, but plainly the feel is off enough to be a problem.

I find a good test is Punch Out!!! If it's much trouble at all for me to reach at least Great Tiger, the latency is really bad (even if I couldn't tell you just by looking). If I can get to Great Tiger without much trouble but struggle to do much damage to him before getting taken out, the latency's still unacceptably high for some games, but not totally awful.

Another good one's High Speed. If I can't land the final multi ball shot at least a decent percentage of the time (the game pauses the ball a couple times while police chatter plays, when you're set up for a multi ball, and after the last pause you can land the shot to initiate multi ball immediately and skip all the flashing-lights-and-sirens crap if you're very precise with your timing, it's like very-small number of milliseconds after the ball resumes its motion) then the latency is high enough to affect gameplay.

If I can land that shot at least 60-70% of the time, and if I can reach Bald Bull in Punch Out!!!, then probably any trouble I have in other games is my own damn fault :-)

I suppose as I age further these tests will become kinda useless for me, because my reflexes will be too shot for me to ever do well at these no matter how many hours of practice I've had over the decades :-(

Anyway, even in the best case you're always going to have worse display and input latency on a digital screen with a digital video pipeline and USB controllers than an early console hooked up over composite or component to a CRT. I've found it's low enough (even on mediocre TVs, provided they have a "game mode", and those are a ton worse than most PC monitors) for me not to mind much if the emulation itself is extremely snappy and is adding practically no extra latency, and there are no severe problems with the software side of the video & input pipelines, but otherwise... it can make some already-tough games unplayably hard in a hurry.

I do wonder about the experience of people who try these games for the first time in an emulator. They'll come to the game with no built-in way to tell if they keep slipping off ledges because the latency's like six frames instead of the ~ one it was originally, or because they just suck at it.
by m463 | 2025-11-11 21:16:17+00:00
sort of related, but I really like the Sabrent PCIe 5.0 nvme enclosures.

https://www.amazon.com/dp/B0CQZ6SYD1

No tools to insert m.2 nvme stick, easily fits and locks into a pcie slot, without a metal bracket to unscrew/remove.

I don't have a pcie gen 5 system, but the new samsung drives might do 14,800 MB/s

I also love thin ethernet patch cables. and 5-in-1 usb cables for travel.
by pdonis | 2025-11-11 21:16:22+00:00
> I don't know if that's a widespread definition of "vaccine".

Wikipedia [1]: "A vaccine is a biological preparation that provides active acquired immunity to a particular infectious or malignant disease." One reference for that statement is the CDC's web page on "immunization basics".

[1] https://en.wikipedia.org/wiki/Vaccine

> you might be imagining the societal consensus around it.

I don't think there's as much of a societal consensus around it now, because, as I said, flu "vaccines" have been around for quite a number of years (they were around for quite a number of years before Covid), and that has changed how people think of the word "vaccine". However, I think the word still has an unconscious connotation of something having a stronger effect than just "well, you have less chance of being hospitalized". See further comments below.

In any case, my point is that I think using the word "vaccine" for the flu and Covid shots is broken. "Vaccine" when I was growing up and got all those shots did mean "thing that prevents you from getting the disease". That was the whole point; that was what everybody talked about when you got shots as a kid so you could go to school, or when you got shots before traveling internationally so you wouldn't catch any of the endemic diseases where you were going.

When we began to encounter diseases for which we could not do that, where the best we could do was to give shots that might make them less severe but didn't keep you from getting the disease, we should have picked a different word instead of muddying the meaning of the word "vaccine".

Doing that would have made it much clearer exactly what governments were trying to do by mandating Covid "vaccines". But governments traded on the unconscious connotations of the word "vaccine" to justify the mandates. Mandating something that doesn't prevent you from getting the disease, doesn't prevent you from spreading it if you have it, but might help in keeping you out of the hospital, makes no sense from a public health perspective. But that's not what people thought was being mandated, because of the word "vaccine".

> "effective"

They might be effective at making the disease less severe. They are not effective at preventing you from getting the disease, or preventing you from spreading it if you have it.
by Arainach | 2025-11-11 21:16:41+00:00
>know people complain about car manufacturers being hostile to CarPlay and Android Auto. But I think in the long run, the executives are being smart. Looking down the history of other companies that turned over responsibility of their user experience to tech companies - there's not a good track record of long-term successes.

Car infotainment is full of examples of why the car manufacturers can't be trusted to have *short term* success. Garbage UI, constantly charging huge money for obsolete-before-you-get-them updates. The Google Graveyard looks like a fertility clinic compared to the car entertainment systems put out by GM/Ford/BMW/Toyota/Everyone
by SoftTalker | 2025-11-11 21:16:55+00:00
35mm is super cheap to get into if you just want to experiment. Old 35mm cameras and even home darkroom equipment are gathering dust in tens of thousands of households, cheap on FBM or thrift shops.

It's expensive compared to digital for snapshots, but if you enjoy working in the darkroom as a hobby, you can probably get everything you need for free or cheap.
by captainclam | 2025-11-11 21:17:13+00:00
It looks to me like OpenAI's image pipeline takes an image as input, derives the semantic details, and then essentially regenerates an entirely new image based on the "description" obtained from the input image.

Even Sam Altman's "Ghiblified" twitter avatar looks nothing like him (at least to me).

Other models seem much more able to operate directly on the input image.
by willprotein | 2025-11-11 21:17:25+00:00
hey there, will from protein here. thanks for you comments and appreciate the popup is annoying, but they still work. for what it's worth, we're not "fake" and have been around since 1998 in the UK, which is around the time NTK used to be around. more here if you're interested: https://www.protein.xyz/archive/ (scroll down)
by bborud | 2025-11-11 21:17:47+00:00
I'm pretty confident the answer on both counts would be "no".

(This teminds me of a show I once saw where various design students were given the task to design things. Philippe Starck was the judge. One of the students made a iPhone cover and Starck almost blew a gasket. I don't remember exactly what he said when he saw it. But he pointed out that the iPhone itself was a beautiful design so defacing it with an ugly piece of plastic was just a horrific waste of resources.

He also said something about objects having to deserve to exist -- though that was probably in a talk he gave at some point. Where he pointed out that his famous Alessi sitrus press was a good example of a pointless object that shouldn't exist. At least it looked good, but it was a pretty poor sitrus press).
by bigyabai | 2025-11-11 21:17:51+00:00
> Why do y’all care so much

My pension. When "jokes" like this hit the frontpage of HN, I am reminded that every dollar I put into my 401k will never see the light of day. The FTC should be mauling Apple for resting on anticompetitive laurels, but instead they're letting them grow fat and become a high-risk business. If you're not filing for retirement tomorrow, you should be considering the consequences this will have when you turn 65. Letting Apple fuck off and manufacture high-margin designer is terrible for America in the long-term.

The economy is not as simple as "don't buy the product then" at Apple's scale. Look at how John Deere transitioned from a blue-chip brand to an Oracle-level scourge on humanity. I don't want Apple to head down that same road, but we might be too late to save them at this point.
by egypturnash | 2025-11-11 21:17:56+00:00
Pro artist here.

I trash and restart sketches that took a few minutes to do at most. It's very rare for me to get more than an hour or two in and discard it, I've explored and found a solid foundation long before I put that much work in.

If I was working in a studio environment there's the risk of things like "I spent a couple weeks painting that bg and animating that scene and it was absolutely gorgeous but it got cut when the we took a good hard look at the remaining budget and total runtime and cut the entire sequence it was part of" but that's another matter.

The Draw 50 process is solid. The classical techniques I learnt in training for animation are similar.
by foltik | 2025-11-11 21:18:25+00:00
I am not invoking magic. When proper controls are added, the effect disappears. That is probabilistic evidence against the claim, not proof of anything. Just the outcome of repeated tests.

No one is appealing to authority. The experiments are public, the methods transparent, and the results reproducible. If there is a better design, describe it.

Facilitator cueing is not a guess or straw man. It has been directly measured in controlled studies, and when those cues are removed, performance drops to chance. That is what the data shows.

You say tests are not proof, which is true, but repeated failure still counts. You call cueing a straw man, though it has been measured directly. Is there any outcome that would convince you the effect isn’t there? If not then this isn’t a discussion about evidence anymore.
by zahlman | 2025-11-11 21:18:52+00:00
> A key security risk is Python’s ability to easily execute arbitrary code provided as data, which is a common mechanism in various injection and remote code execution (RCE) attacks.

In other words, it has the `eval` and `exec` builtins.

This is spun up to multiple paragraphs of blatantly-LLM-generated prose, decorated with a diagram of how Python programs represent a large attack surface by... being permitted to do the things that programs in every language are ordinarily permitted to do, and then capped off with promotion for some sort of threat scanning tool (and the rest of the article clearly exists solely for the purpose of introducing that promotion).

In short, this is spam completely lacking in insight.
by jcmorrow | 2025-11-11 21:18:54+00:00
100% agree. Even when I am working with J or Uiua enough that I can comfortably read them, I can't really imagine trying to work on a large (even just thousands of lines, let alone larger) project in them. I know that they exist, and I assume that with a team of competent programmers some different mechanisms would evolve to make things easier to understand, but given the choice between Java and uiua, I would much rather maintain a multi-person multi-year project in Java. The verbosity/boilerplate becomes a strength in that setting, rather than a weakness.
by necovek | 2025-11-11 21:19:00+00:00
When you publicize a vulnerability you know someone doesn't have the capacity to fix according to the requested timeline, you are simultaneously increasing the visibility of the vulnerability and name-calling the maintainers. All of this increases the pressure on the maintainers, and it's fair to call that a "demand" (quotes-included). Note that we are talking about humans who will only have their motivation dwindle: it's easy to say that they should be thick-skinned and ignore issues they can't objectively fix in a timely manner, but it's demoralizing to be called out like that when everyone knows you can't do it, and you are generally doing your best.

It's similar to someone cooking a meal for you, and you go on and complain about every little thing that could have been better instead of at least saying "thank you"!

Here, Google is doing the responsible work of reporting vulnerabilities. But any company productizing ffmpeg usage (Google included) should sponsor a security team to resolve issues in high profile projects like these too.

Sure, the problem is that Google is a behemoth and their internal org structure does not cater to this scenario, but this is what the complaint is about: make your internal teams do the right thing by both reporting, but also helping fix the issue with hands-on work. Who'd argue against halving their vulnerability finding budget and using the other half to fund a security team that fixes highest priority vulnerabilities instead?
Show HN: FakerFill – a browser extension that fills web forms with fake data
by jundymek | 2025-11-11 21:19:20+00:00
I built a browser extension called FakerFill to help developers and QA testers test web forms faster. It automatically detects input fields and fills them with realistic fake data (names, emails, addresses, etc.).

The extension focuses on simplicity — there’s no data collection, and everything runs locally in the browser. You can also create and reuse custom templates, choosing which fields to fill and how they’re populated.

Right now, it’s available for Chrome, Edge, and Firefox. I’d love to get feedback from other developers — both on usability and ideas for future improvements.
by lonesword | 2025-11-11 21:19:26+00:00
If I don’t like my coworkers, I’m out. I like people who give a shit about the work I do (a.k.a “collaboration”). “Whatever, you own it” is just lazy for “I can’t be bothered to understand what you are working on”.

The problem is not the collaboration, it’s the ineffective collaboration. Maybe the author should fix that instead of pitching magic anti-collaboration click-bait pills.

Also, the problems you solve must be pretty straightforward and unambiguous (or you have a small codebase) if you have the luxury of being able to just make a pull request for it.
by godelski | 2025-11-11 21:19:33+00:00
The announcement came with the claim about DRM. So I believe there was some "legal" issue about it. I'm also sure they didn't actually care that much.

> By contrast, tracking people on the web is a multibillion dollar industry

Of which Netflix is a part of.

> The vast majority of websites by count are not doing anything sophisticated. But some are.

And this is my point. Somewhere like fingerprint.com is trying to use all the tools available. But most places aren't. Facebook and Google? Sure, I buy that. But mentioning that many places are lazy is not the same thing. It is a game where we can't win completely and we still need to let people know that small gains are still meaningful. A major problem we face with privacy is that people feel so powerless that it is useless to fight back. But that's not true. Just because your bulletproof vest doesn't stop a missile doesn't make it useful. A bulletproof vest that only stops small caliber is still better than no vest, since most shots are small caliber. Pareto is still alive and well here.
by hinkley | 2025-11-11 21:19:41+00:00
There are worse outcomes than that. Software devs are clever people. Not all of us can be confrontational, and confrontation is not the only tool available to those who can.

If you as a boss find yourself to be very busy all of a sudden, it is likely because you have pissed off and alienated your reports by questioning and overriding their judgment too many times. Suddenly the team needs your “help” to make every decision, and every bad outcome of those decisions suddenly becomes a surprise to them.

They’re letting you choke to death on your own arrogance and control issues.
by singron | 2025-11-11 21:19:56+00:00
I think the sports analogy would be passing the ball back and forth in front of the goal instead of shooting. Nearly every time, an athlete with the ball in front of an open goal will take the shot themselves instead of passing. Even in a 2v1 situation, passing is a huge risk and taking the shot has a high likelihood of scoring, so you only want to pass if the defender is leaving your teammate open (usually they split the difference, so it's complicated). Too many passes in a 2v1 guarantees that more defenders will show up and you lose your advantage.