MurphyA/hacker-news huggingface dataset:
by mpyne | 2025-11-06 20:59:49+00:00
For "I need this Python dict to exist in this unrelated JavaScript program's context space" JSON is absolutely much better. If only because you completely sidestep all the various XML foibles, including its very real security foibles.

JSON is so good at this that, like CSV, it does displace better tech for that use case, but the better tech isn't usually XML but rather things like Avro or Protobuf.

For the most part people don't add on XML features to JSON. Comments are a frequent addition, sometimes schemas, but for the most part the attraction of JSON is avoiding features of XML, like external entity validation, namespaces, getting to choose between SAX or DOM styles, or being required to support unrelated XML systems just to use another.

Again, there are problem domains where those are helpful, and XML is a good fit for those. But those problem spaces end up being much smaller in scale than the ones solved by JSON, Avro, Iceberg, etc.

But the whole point to JSON is to be nearly as dumb simple as possible so that the complexity of the problem domain will necessarily be handled in a real programming language, not by the data magically trying to transform itself.
by maxglute | 2025-11-06 20:59:58+00:00
It's a wierd line of reasoning to call trespassers... fisherman. These are "criminals" operating in disputed waters where their actions are classified as illegal by 1+ (frequently more than 1) disputees. They are schrodinger criminals due to grayzone nature of unsettled martime delimitations but umabiguous criminals under someones interpretation who are suppose to be repressed via domestic police enforcement.

Again this isn't just PRC doing it, this is 5 party dispute and most sides are doing their own law enforcement, up until recently with more militarized means like actual weapons discharge - PRC CG wasn't even armed until recently and they're still using relatively mild measures.

The OG comparison was Gaza, the parallel to these fishermen are closer to hamas insurgencies invading sovereign Israeli territory on the grayzone to legal spectrum. But what they are not, are "innocent", Gazans getting repressed (blown up) in their homes.
Show HN: I Vibe-Coded a TUI for AWS Logs Insights in Rust
by ast42 | 2025-11-06 21:00:06+00:00
I vibe-coded a TUI for AWS Logs Insights over the past few of days. This is something I started to scratch an itch (I hate the Logs Insights UX in the AWS Console) and to get a feel for LLM assisted coding.

It works relatively well for me given what it is, and for now it relieves some of the pain. I plan to eventually rewrite it from scratch without AI assistance as an exercise in learning Rust, so please don't critique the code, I'm aware that it's a mess. I'm just looking to get some feedback - what works well, what doesn't, what's obviously missing in terms of features, etc.
by HarHarVeryFunny | 2025-11-06 21:01:11+00:00
That's going to depend on how small the model can be made, and how much you are using it.

If we assume that running locally meant running on a 500W consumer GPU, then the electricity cost to run this non-stop 8 hours a day for 20 days a month (i.e. "business hours") would be around $10-20.

This is about the same as OpenAI or Anthropics $20/mo plans, but for all day coding you would want their $100 or $200/mo plans, and even these will throttle you and/or require you to switch to metered pricing when you hit plan limits.
by NitpickLawyer | 2025-11-06 21:01:14+00:00
Interesting. I tested it with sci-fi, and it definitely recommends good books, but not sure how accurate it is at surfacing the sub genres / themes. For example for [aurora -ksr, seveneves, project hail mary, ender's game] it gave me dune. Which is a great book, but not in the "first-ish contact" style I hoped it would be.

Another thing I noticed is that it tends to recommend 2nd and 3rd books in a series, which is a bit so-so. If I add the first book in a series, I probably already read the whole series...
by CGMthrowaway | 2025-11-06 21:01:43+00:00
Thanks for the example. Devils advocate:

> You need to do tedious annotation. Worse even, you need to look at two places simultaneously: to the score and to the string of Roman numerals

The more work it takes to create your notation, the more useful information it contains. Developer-user tradeoff

> And worse still, all chords then look the same. The score itself becomes bland. Most of the time, if you aren't deep inside the jazz repertoire, there isn't that many alterations. So you'd mostly see the same four colors - root, minor third, major third, perfect fifth.

Isn't the same true for your current method? Only there are more colors of the rainbow to distract you from how bland it is :)
by Gracana | 2025-11-06 21:01:49+00:00
Hi Simon. I have a Xeon W5-3435X with a 768GB of DDR5 across 8 channels, iirc it's running at 5800MT/s. It also has 7x A4000s, water cooled to pack them into a desktop case. Very much a compromise build, and I wouldn't recommend Xeon sapphire rapids because the memory bandwidth you get in practice is less than half of what you'd calculate from the specs. If I did it again, I'd build an EPYC machine with 12 channels of DDR5 and put in a single rtx 6000 pro blackwell. That'd be a lot easier and probably a lot faster.

There's a really good thread on level1techs about running DeepSeek at home, and everything there more-or-less applies to Kimi K2.

https://forum.level1techs.com/t/deepseek-deep-dive-r1-at-hom...
by ben_w | 2025-11-06 21:02:01+00:00
> I wonder why I can't find a model that only does Python and is good only at that, and run that locally. When I need to do zig, I can switch to a zig model, and unload the python one from memory. If it only does a single language, and it does not need to know about US presidential elections, couldn't it be very small and something I could run on my MacOS M1 laptop with 16GB of ram?

I also wonder this.

My suspicion — based on what I experienced with local image generating models, but otherwise poorly educated — is that they need all of the other stuff besides programming languages just to understand what your plain English prompt means in the first place, and they need to be quite bulky models to have any kind of coherency over token horizons longer than one single function.

Of interest: Apple does ship a coding LLM in Xcode that's (IIRC) 2 GB and it really just does feel like fancy Swift-only autocomplete.
by qingcharles | 2025-11-06 21:02:02+00:00
I put in a bunch of books and hit recommendations and... I'd already read 95% of them, so at least we know it works well! (checking out the other 5% now)

p.s. one idea: when you click [Add] on the recommended books list, it should remove it from that list

p.p.s. if there is a way to filter out the spam "Summary of ____" books, that would be good too
by lukev | 2025-11-06 21:02:27+00:00
Well, that's what a LLM is. The problem is if one's mental model is built on "AI" instead of "LLM."

The fact that LLMs can abstract concepts and do any amount of out-of-sample reasoning is impressive and interesting, but the null hypothesis for a LLM being "impressive" in any regard is that the data required to answer the question is present in it's training set.
by dingnuts | 2025-11-06 21:02:44+00:00
> Should they be obligated to open and censor your mail?

they are. they're not obligated to go through every package but they are absolutely obligated to turn over packages to law enforcement, and they do, and law enforcement will one hundred percent open and go through your mail. and if they find something you shouldn't have they will dress up as a mail carrier to deliver it to you and then detain you!

I'm not sure what point you're trying to make exactly but this is a losing battle
by etaioinshrdlu | 2025-11-06 21:02:58+00:00
I can suggest our service (previously here https://news.ycombinator.com/item?id=44849129 ) that might be helpful -- If you want a zero-setup backend to try qqqa, ch.at might be a useful option. We built ch.at — a single-binary, OpenAI‑compatible chat service with no accounts, no logs, and no tracking. You can point qqqa at our API endpoint and it should “just work”:

OpenAI-compatible endpoint: https://ch.at/v1/chat/completions (supports streamed responses)

Also accessible via HTTP/SSH/DNS for quick tests: curl ch.at/?q=… , ssh ch.at Privacy note: we don’t log anything, but upstream LLM providers might...
by lotsofpulp | 2025-11-06 21:03:15+00:00
I did point out the actual substance of the issue, Repubs don’t want to expand access to healthcare as it would require a wealth transfer, hence they have opposed all efforts.

The Dems (by and large) bring up bills to provide paid parental leave, increase minimum salaries for overtime exempt workers, fund education, increase access to healthcare, and here you are saying they don’t focus on the substance of the actual issues, whatever that means. Meanwhile, the only thing Repubs have done is cut taxes, and block all those efforts.

> The fact that both parties think they're "winning the game" right now by shutting down the government is a joke.

The fact that you would even bring up both parties when one has control of all 3 branches of government is a joke.
by k310 | 2025-11-06 21:04:24+00:00
I worked in aerospace, and all my work was defensive. Civilians don't have missiles to track or shoot down, and it was my choice if I didn't want to work on a particular project.

Selling a multi-use product or technology removes you from control. Might you approach a foundation or ex-spouse with no malicious intent? Certainly, the military, and sadly, our new paramilitary have half the GDP. But since the wealthy have the other half, why not look to them as collaborators in a worthy project? At the very least,positive use can be negotiated and cooked into the terms of use.
by Covenant0028 | 2025-11-06 21:04:43+00:00
In the above scenario, if Claude accidentally wipes out your Jellyfin movies, will Claude deal with consequences (ie an unhappy family/friends) or will you?

That exemption from accountability is a massive factor that renders any comparison meaningless.

In a business scenario, a model provider that could assume financial and legal liability for mistakes (as humans need to do) would be massively more expensive.
by bamboozled | 2025-11-06 21:04:50+00:00
The issue most people have is not about the murder of drug smugglers, it’s the lack of a trial. It’s the lack of real evidence being shown to the public. It’s the fact there actually might be innocents on those boats. It’s completely normal for people in 2025 to expect we arrest and not just kill people randomly.

The USA was respected because it believed in those ethos…because it was better then a bunch of angry murderers.
by skissane | 2025-11-06 21:04:52+00:00
> The parent controls the subsidiary so a court or regulator having jurisdiction over the parent could order it to get what it needs from the subsidiary.

But what if the parent’s jurisdiction orders the parent to order the subsidiary to do something illegal in the subsidiary’s jurisdiction? If local management obey the order, they risk being prosecuted by their jurisdiction’s authorities-so they’ll likely refuse. What is the parent going to do then? Fire them? But will any replacement act any differently? “Is this job worth going to prison over?” Most people answer “no”, and people who answer “yes” won’t last, because you can’t run a subsidiary from a prison cell.

I think the real issue here is that the US gets away with it because the EU is still so dependent on the US (see NATO) they can’t push back fully, at some point a political calculation takes over. So it could be that the US parent orders the subsidiary to do something illegal under EU law, and then the EU authorities choose to ignore it.
by rpcope1 | 2025-11-06 21:05:04+00:00
That same problem bites in other ways too. There was a discussion in I think the Debian mailing lists around Rust applications potentially being slower to patch because everything gets linked in statically (so you can't just patch libssl and pull a new so). I imagine if you have one compromised dependency, it's now going to mean pulling a new version for each and every single package that may have incorporated it, which feels like it's going realistically to mean AAA game assets size updates weekly.
by iamartech | 2025-11-06 21:05:08+00:00
Location: New Delhi, India Remote: yes Willing to relocate: yes

Technologies: Tokio, Rust lang, Golang, python, linux, concurrent programming, systems programming, databases, REST, GRPC, Git

Résumé/CV: https://docs.google.com/document/d/1cEYCjcbzGXPWnWAxLT1OHqyf...

Email: ar9tech@outlook.com

I am a systems software engineer specializing in low-level software design for backend systems. My professional experience spans multiple compiled languages, including Rust, C++, and Go. I have developed REST API servers, gRPC programs, and background job handlers/schedulers.

In Rust, I have extensive hands-on experience building low-level applications using the Tokio runtime, applying strong principles of distributed systems, and working with synchronization primitives such as Mutexes, RwLocks, and concurrent data structures. I also focus on performance optimizations that leverage the language’s zero-cost abstractions and memory model.

I place strong emphasis on building reliable test environments, using real-world testing methodologies such as unit tests, integration tests, concurrency stress tests, and fixture-based simulations.

I have worked with clients across several domains, including: - Image processing - Blockchain network layer design - Cloud infrastructure solutions

One of my most significant Rust projects was developing and deploying a web-based terminal access system for LXD containers running on bare-metal servers. This system leveraged Tokio for concurrency, TTYD for terminal emulation, and Caddy as the reverse proxy, with communication over Unix Domain Sockets. The solution also supported authentication. Efficient and scalable under configuration of environment.

I love playing with distributed system a lot and challenging myself to learn new concepts under this domain.
by AnthonyMouse | 2025-11-06 21:05:15+00:00
Is that what it is though? It seems weird that such an overwhelming majority of US retail banking customers are using a domestic institution if the foreign ones are getting a fair shake, doesn't it?

Countries do a thing where they call something "neutral rules" while crafting them such that only the domestic incumbents can satisfy them or they can be selectively enforced against anyone the regulators don't like or who actually does or is deemed likely to refuse to comply with extralegal requests that the law doesn't or couldn't require. The US financial regulators do exactly that and you can see it in the outcomes.
by terminalshort | 2025-11-06 21:05:52+00:00
"perform docking/unloading" LOL. Pull up on a beach in the middle of the night and grab the bricks out of the sub for the guys waiting for you there. This isn't a commercial port with cargo cranes, industrial equipment, and all that. As for handling rough weather, it's a sub. What's going to happen? It's going to sink?
by MostlyStable | 2025-11-06 21:05:54+00:00
I've tried various stinging nettle dishes. For me, they fall into the long list of things that are technically edible, but I see no reason why one would eat them today aside from cultural history/connection/tradition reasons. Every way I've tried them, they basically just taste like plant.

If you like it, great, but I think the value to those who don't have some pre-existing reason to be interested in the dish to be overstated. Similar plants in the category are miner's lettuce and dandelion greens.

If one has a great abundance of it, and one likes to spend time preparing ones own food, or if the idea of wild gathered plants has special appeal, then nettles (etc.) can indeed take the place (ish) of things like lettuce and spinach, but don't expect some dramatically unique experience.
by quirkot | 2025-11-06 21:06:06+00:00
I'm not trying to throw shade, but the approach as described is very short sighted.

> That tiny spark of joy reminded me how much I love to build

Well, yes. That's the fun part. The hard part is the "bug fixes on that community library site you built 8 years ago, has 2k loyal users, and will never make you a dime."

This approach, as liberating as it feels, only makes the "who fixes the toilets for the utopia" problem harder.
by berkes | 2025-11-06 21:06:57+00:00
A lot of companies and services are storing unsalted hashes of passwords. Which is not much better than storing plain-text passwords.

It's becoming less and even languages with a "strong legacy body" like PHP have sane defaults nowadays, but I do see them around when I do consultancy or security reports.

"Never fix something that aint broken" also means that after several years or a decade or more, your "back then best security practices" are now rediculously outdated and insecure. That Drupal setup from 2011 at apiv1docs.example.com could very well have unsalted hashes now. The PoC KPI dashboard that long gone freelancer built in flask 8 years ago? probably unsalted hashes. And so on.
by owenversteeg | 2025-11-06 21:07:05+00:00
Any broadly used ratings system is total garbage. Goodreads ratings, Google Maps ratings, Amazon reviews, Vivino for wine, et cetera. Even assuming the reviews are real and genuine, most people just aren’t good at writing reviews, and the handful that are often have wildly different criteria than you. Someone already commented with one enthusiast site - and sure, enthusiast sites are often better than the mainstream option (see also: CellarTracker for wine) but honestly my advice is to get good at determining the quality of the thing yourself. For books there are a ton of hints about what you’ll be getting. “NYT Bestseller”, “xyz book club”, certain publishers, who’s quoted on the back, when was it published, who wrote it? All of those things can help you rapidly identify books. I personally dislike most modern books and prefer the “classics”, so a lot of this is only useful as a negative signal, but even then there are positive signals, for example a reference to a much older book.
by rkagerer | 2025-11-06 21:07:10+00:00
The bit at the end about email deliverability was also interesting:

Notifying our subscribers is another problem... in terms of not ending up on a reputation naughty list or having mail throttled by the receiving server .... Not such a biggy for sending breach notices, but a major problem for people trying to sign into their dashboard who can no longer receive the email with the "magic" link.

And this observation he got from someone:

the strategy I've found to best work with large email delivery is to look at the average number of emails you've sent over the last 30 days each time you want to ramp up, and then increase that volume by around 50% per day until you've worked your way through the queue
by dpark | 2025-11-06 21:07:41+00:00
> Credits are applied after you take the standard deduction.

I did not state otherwise. The point is that you are misstating the complexity of the typical tax return. It is not in fact “enter your W-2, take the standard deduction, and done” for most people, even for those with relatively straightforward taxes.

> Lower income people were not using IRS direct file.

I don’t think the IRS has released this data. I do know that direct file was specifically limited to simple cases though.
by scorpion7 | 2025-11-06 21:07:42+00:00
It's fascinating how this works with such a small model. Especially given that the training is a kind of meta learning of "how to do in-context learning". I wonder, is there a good intuition of the role of the MLP in this architecture? For LLMs the consensus seems to be that they store knowledge...what would that be for tabular data?
by notafox | 2025-11-06 21:08:11+00:00
Forget about UI, just use CLI

./firefox -CreateProfile "profile-name /home/user/.mozilla/firefox/profile-path/" ./firefox -profile "/home/user/.mozilla/firefox/profile-path/"

Create a separate icon for each profile and forget about:profiles interface.

Disclaimer: I don't use macOS, but I'm sure it's similar to Linux in that regard. You'll need to change paths, of course.
by macrael | 2025-11-06 21:08:24+00:00
I'm happy to be careful, you are right we are relying on TEEs and vTPMs as roots of trust here and TEEs have been compromised by attackers with physical access.

This is actually part of why we think it's so important to have the non-targetability part of the security stack as well, so that even if someone where to physically compromise some machines at a cloud provider, there would be no way for them to reliably route a target's requests to that machine.
by varenc | 2025-11-06 21:08:55+00:00
I love this site, and the approach! Great seeing someone making good use of Goodreads data.

Sadly my experience with the book recommender isn't too great because of the 64 book limit. If I import either the most recent or least recent 64 book, 95% of the books it recommends to me are books I've read. Though it was helpful for spotting a few books I've read that I didn't log on Goodreads. Guess I'm pretty consistent.
by jimmar | 2025-11-06 21:09:16+00:00
I respect Troy Hunt's work. I searched for my email address on https://haveibeenpwned.com/, and my email was in the latest breach data set. But the site does not give me any way to take action. haveibeenpwned knows what passwords were breached, the people who breached the data knows what passwords were breached, but there does not seem to be any way for _me_, the person affected, to know what password were breached. The takeaway message is basically, "Yeah, you're at risk. Use good password practices."

There is no perfect solution. Obviously, we don't want to give everybody an easy form where you can enter an email address and see all of the password it found. But I'm not going to reset 500+ password because one of them might have been compromised. It seems like we must rely on our password managers (BitWarden, 1Password, Chrome's built-in manager, etc.) to tell us if individual passwords have been compromised.
by pksebben | 2025-11-06 21:09:31+00:00
Couple of points;

What you think is going on in other people's brains, partial or not, is inaccurate. This is generally true for pretty much everyone, but especially in a case like yours where you seem utterly convinced that you know.

I do not know what is on those boats, and neither do you. Neither of us will ever find out, because they were sunk before any actual facts could be verified. This is precisely why we have due process.

In the scheme of things, I am much more worried about a well-armed force committing extrajudicial killings than I am "some dudes who might have drugs". The fact that you seem very concerned about the latter and are totes cool with the former is... concerning, to say the least.

I do appreciate you posting your sources, so thanks for that.
by Karrot_Kream | 2025-11-06 21:10:44+00:00
I'm not going to argue that emacs if "for everyone" and there's plenty in my own life that I'm happy to accept defaults in. But that said, it's not that hard to glue emacs onto existing tools if needed. If you're in a situation where you can only send emails on a locked down email client you can still script the client through emacs and some glue code. On MacOS, Apple script does wonders and for Windows there's AutoHotKey. Linux obviously is infinitely malleable.
Show HN: Rankly – The only AEO platform to track AI visibility and conversions
by satj | 2025-11-06 21:10:58+00:00
Most geo/aeo tools stop at ai visibility. Rankly goes further, we track the entire ai visibility funnel from mentions to conversions. As brands start showing up in llm results the next question isn’t visibility, it’s traffic quality and conversions. Rankly builds dynamic data-driven journeys for high-intent llm traffic. <https://tryrankly.com/>