MurphyA/hacker-news huggingface dataset:
by TechSquidTV | 2025-11-02 06:04:09+00:00
I just started developing self-hosted services largely with AI.

It wasn't possible before for me to do any of this at this kind of scale. Before, getting stuck on a bug could mean hours, days, or maybe even weeks of debugging. I never made the kind of progress I wanted before.

Many of the things I want, do already exist, but are often older, not as efficient or flexible as they could be, or just plain _look_ dated.

But now I can pump out react/shadcn frontends easily, generate apis, and get going relatively quickly. It's still not pure magic. I'm still hitting issues and such, but they are not these demotivating, project-ending, roadblocks anymore.

I can now move at a speed that matches the ideas I have.

I am giving up something to achieve that, by allowing AI to take control so much, but it's a trade that seems worth it.
by heavyset_go | 2025-11-02 06:05:26+00:00
I run Jellyfin in a multi-arch cluster because I hate myself, and this would force me to think about where Jellyfin/Postgres is deployed because Postgres databases aren't portable.

I already had to do that for my authoritative PG deployment, and my media manager shouldn't require a full RDBMS.

Using SQLite for Jellyfin has made running it wherever really, really easy, same thing with doing backups and lazy black box debugging.
by notpushkin | 2025-11-02 06:05:54+00:00
My favourite thing about Anubis is that (in default configuration) it completely bypasses the actual challenge altogether if you set User-Agent header to curl.

E.g. if you open this in browser, you’ll get the challenge: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/13ce36fef98a3f4...

But if you run this, you get the page content straight away:

curl https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/13ce36fef98a3f4e6d8360c24d6b8434cbb8869b

I’m pretty sure this gets abused by AI scrapers a lot. If you’re running Anubis, take a moment to configure it properly, or better put together something that’s less annoying for your visitors like the OP.
by hitekker | 2025-11-02 06:07:52+00:00
Here's a better summary: ffmpeg is getting DDOS'd by AI generated security CVEs. Those CVEs currently have zero real-world impact; the "researchers" didn't even bother to write a patch/fix for their reports.

My hot-take: it's security theater drama. Burn-out maintainers on one side and wealthy corporate employees on the other.
Show HN: I made a YouTube thumbnail always display the latest comment [video]
by dotspencer | 2025-11-02 06:08:33+00:00
Behind the scenes

1. I pull the latest comments using the YouTube data API.

2. A next.js app using ImageResponse from next/og generates a new thumbnail image by overlaying the latest comment text on the original thumbnail.

3. I use the YouTube API to update the thumbnail for that video.

The text is also truncated to 65 characters and I have comment filtering for the video set to "strict"

It all runs as a cron job every 15 minutes. I wanted it to run more frequently, but each thumbnail update costs ~50 credits, and YouTube only gives 10k API credits per day.

There's also an undocumented limit to the number of times you can change your thumbnail in a 24h period, which I hit the first day when running every 10 minutes. I slowed it down and also added a cache so it only updates if the comment has changed since the last run.

Link to video: https://www.youtube.com/watch?v=HbUgsprjNVY

Link to view thumbnail: https://www.youtube.com/@SmithOffGrid/search?query=HbUgsprjN...

=-=-=

It was pretty fun to build this out. Not the first to do something like this though.

Others I could find:

Tom Scott: https://www.youtube.com/watch?v=BxV14h0kFs0

Sean Hodgins: https://www.youtube.com/watch?v=FV2OqOJcQRc

MrBeast: https://www.youtube.com/watch?v=YSoJPA8-oHc

Hyperplexed: https://www.youtube.com/watch?v=6fAQ_y-1SxI
by enricozb | 2025-11-02 06:09:50+00:00
When reading this project's wiki [0], it mentions that Kanal (another channel implementation) uses an optimization that "makes [the] async API not cancellation-safe". I wonder if this is the same / related issue to the recent HN thread on "future lock" [1]. I hadn't heard of this cancellation safety issue prior to that other HN thread.

[0]: https://github.com/frostyplanet/crossfire-rs/wiki#kanal [1]: https://news.ycombinator.com/item?id=45774086
by visopsys | 2025-11-02 06:09:54+00:00
I took an OS in college in 2006 and the big project that my prof required us to do was to make modification of visopsys. The software was primitive at that time but still had UI interface.

I emailed the author to ask some questions in my project. The author had connection with my prof and informed my prof about this. My prof told me that I was not allowed to ask the author regarding this project. So I had to figured out on my own.

It was fun to play around with and learnt how things work at deep OS level. It was a good memory for me :)

And you guys notice anything about my username? :)
by teleforce | 2025-11-02 06:10:20+00:00
>There is also a general expectation that there is strict order - events should be read in the same order that they arrived in the system.

This is the Achilles' heel of Kafka (and Pulsar) where for all streaming systems (or workarounds) with per message key acknowledgements incur O(n^2) costs in either computation, bandwidth, or storage per n messages [1].

[1] What If We Could Rebuild Kafka from Scratch?: (Top comment of the 220 comments)

https://news.ycombinator.com/item?id=43790420
by davydm | 2025-11-02 06:12:08+00:00
Generally, I find aigen content to be obvious and lacking. However, there are some longer psytrance sets I've listened to that I eventually figured out were generated, but didn't mind in the background whilst working.

I think it's fun for the lulz when a friend gets some in-group song "made" for a joke. But I don't think aigen will ever dominate a creative sphere. It can't extrapolate to create something entirely new. It can only interpolate to create something within the realm it has training on. It relies on creativity "top ups" via training on non-aigen content to even remain remotely relevant.
by bjoli | 2025-11-02 06:13:17+00:00
I once wrote an inliner. When you have not done it, it seems simple. When you are doing it it is like trying to restrain a large rabid dog with a slippery leash.

Now, I am not a programmer by trade, but I have a hard time thinking anyone would find it nice to write an inliner. At least not if you want the inliner to always make things faster.
by ofalkaed | 2025-11-02 06:13:59+00:00
The article bringing up flip-flop clocks reminded me of another mechanical digital clock that I can not quite remember the name of. It was from roughly the same time period as the flip-flop alarm/radio clocks but the numbers were wire grids or cutouts in wire grids and as the numbers changed they sort of faded from one digit to the next. I can't quite remember how the mechanism worked and the only clock of this sort I have ever seen was the one I bought ~20 years ago just to take apart and see how it worked. Anyone know what I am talking about?

The mechanism was surprisingly simple once I got it opened and saw how it worked but from the outside made no sense, I probably stared at that clock for an hour trying to figure out how it worked before I finally opened it up to see what was inside. I might still have the clock mechanism in a box out in the garage.

Edit: I suspect these clocks were actually from the time period at the end of flip-flops, showed up too late to become common, LEDs/LCDs killed them. The digits were on the dim side, perfectly fine for a bedside alarm clock and quite good for that situation but you had to be fairly close to clock to read it in a well lit room. Better than a flip-flop in a dark room but worse than an LCD in the light.
Show HN: Polym – App for knowledge retention and recall. Remember what you learn
by matthewlls | 2025-11-02 06:14:21+00:00
Polym is a mobile app to improve retention and recall of foundational knowledge, such as logic, math, psychology, economics, computer science, philosophy, history, and more.

For those always learning, I think the comparison below articulates how Polym can help:

Current Lifelong Learner → Aspiring Polymath Re-reads and reviews hastily compiled notes → Reviews expert-crafted notes and active learning sets Reviews niche and/or soon-to-be outdated concepts → Masters foundational knowledge, such as logic, economics, math, and psychology Spends hours taking notes and creating flashcards → Focuses on learning since notes and cards are taken care of Engages in infrequent text active learning → Engages in multimodal retrieval practice using spaced repetition
by rafabulsing | 2025-11-02 06:14:35+00:00
Of course, there are different domains of intelligence, and agent A can be more intelligent in domain X while agent B is more intelligent in domain Y.

If you want to make some comparison of general intelligence, you have to start thinking of some weighted average of all possible domains.

One possible shortcut here is the meta domain of tool use. ChatGPT could theoretically make more use of a calculator (say, via always calling a calculator API when it wants to do math, instead of trying to do it by itself) than a calculator can make use of ChatGPT, so that makes ChatGPT by definition smarter than a calculator, cause it can achieve the same goals the calculator can just by using it, and more.

That's really most of humans' intelligence edge for now: seems like more and more, for any given skill, there's a machine or a program that can do it better than any human ever could. Where humans excel is our ability to employ those super human tools in the aid of achieving regular human goals. So when some AI system gets super-human-ly good at using tools which are better than itself in particular domains for its own goals, I think that's when things are going to get really weird.
by nostrebored | 2025-11-02 06:16:00+00:00
I mean it is technically RAG as the LLM is deciding to retrieve a document. But it’s very constrained.

The skills that I use all direct a next action and how to do it. Most of them instruct to use Tasks to isolate context. Some of them provide abstraction specific context (when working with framework code, find all consumers before making changes. add integration tests for the desired state if it’s missing, then run tests to see…) and others just inject only the correct company specific approach to solving only this problem into Task context.

They are composable and you can build the logic table of when an instance is “skilled” enough. I found them worse than hooks with subagents when I started, but now I see them as the coolest thing in Claude code.

The last benefit is nobody on your team even had to know they exist. You can just have them as part of onboarding and everyone can take advantage of what you’ve learned even when working on greenfield projects that don’t have a CLAUDE.md.
by jchw | 2025-11-02 06:18:10+00:00
I was briefly messing around with Pangolin, which is supposed to be a self-hosted Cloudflare Tunnels sort of thing. Pretty cool.

One thing I noticed though was that the Digital Ocean Marketplace image asks you if you want to install something called Crowdsec, which is described as a "multiplayer firewall", and while it is a paid service, it appears there is a community offering that is well-liked enough. I actually was really wondering what downsides it has (except for the obvious, which is that you are definitely trading some user privacy in service of security) but at least in principle the idea seems kind of a nice middleground between Cloudflare and nothing if it works and the business model holds up.
by ulrikrasmussen | 2025-11-02 06:20:22+00:00
I know this is not an argument against LLM's being useful to increase productivity, but of all tasks in my job as software developer, hunting for and fixing obscure bugs is actually one of the most intellectually rewarding. I would miss that if it were to be taken over by a machine.

Also, hunting for bugs is often a very good way to get intimately familiar with the architecture of a system which you don't know well, and furthermore it improves your mental model of the cause of bugs, making you a better programmer in the future. I can spot a possible race condition or unsafe alien call at a glance. I can quickly identify a leaky abstraction, and spot mutable state that could be made immutable. All of this because I have spent time fixing bugs that were due to these mistakes. If you don't fix other people's bugs yourself, I fear you will also end up relying on an LLM to make judgements about your own code to make sure that it is bug-free.
by waste_monk | 2025-11-02 06:21:45+00:00
>I think that is a little entitled. They should be happy google isn't just straight up emailing full-disclisure.

Google has literally billions of dollars in profits (in part because they use FFmpeg in a bunch of commercial products like Youtube and Chrome), and one of the largest software workforces in the world, including expertise on secure software and vulnerability remediation.

If anyone can afford to contribute back a fix instead of just raising a report, and has the ethical responsibility to do so, it's Google.
by paulf38 | 2025-11-02 06:22:56+00:00
It would be nice (speaking as a Valgrind developer) if Valgrind could guarantee safe code. Unfortunately it doesn’t. Firstly, it does not detect all kinds of errors (and indeed no tool does). Secondly, it is unlikely that the test coverage is perfect.

Delusional overconfidence that developer “skill” is all that is needed to overcome the many shortcomings of C is not a solution to the problem of guaranteeing security and safety.
by antoniuschan99 | 2025-11-02 06:23:37+00:00
AI build out is more of an extension of datacenter build out though. All the hyperscalers lead AI build out.

Fiber dailed because the telcos overbuilt and demand lagged. When Amazon introduced AWS it succeeded right away because there was lots of demand.

Jeff Bezos Ted Talk 2003 - https://youtu.be/vMKNUylmanQ
by solidsnack9000 | 2025-11-02 06:25:01+00:00
...it is still worrying if in community projects such as Debian when decisions that come with a cost to some part of the community are pushed through without full consensus.

What are some concrete cases you can point to where a decision was made with full consensus? Literally everyone agreed? All the users?

I'm not sure many projects have ever been run that way. I'm sure we've all heard of the Benevolent Dictator for Life (BDfL). I'm sure Linus has made an executive decision once in a while.
by FooBarWidget | 2025-11-02 06:25:36+00:00
Does anyone have any suggestions on making Claude prefer to use project internal abstractions and utility functions? My C++ project has a lot of them. If I just say something like "for I/O and networking code, check IOUtils.h for helpers" then it often doesn't do that. But mentioning all helper functions and classes in the context also seems like a bad idea. What's the best way? Are the new Skills a solution?
by physicsguy | 2025-11-02 06:27:19+00:00
Most Python libraries that relies on C are numerical stuff.

From experience with this type of code you typically end up with a load of functions that take in a numpy array and its length/dimensions to a C function that works on that array in place or an output array that was also supplied. In terms of getting this wrong, it’s usually a crash caused by out of bounds memory access which would still be a runtime crash in Rust. So I’m not sure there’s a massive benefit for these types of code other than the fun of learning Rust. Other than that, you’re typically writing C/C++ to interface with C and Fortran libraries that are really battle tested, and for which it will take decades for Rust to have equivalents. So moving to Rust will just cause you to have lots of unsafe statements - not a bad thing necessarily if you are doing a lot of work at the C level in existing code but less of a benefit if you are doing a straight wrap of a library.

On the flip side, things on the web side of Python like uWSGI which is written in C are important for the security aspect but they’re a very small part of the Python ecosystem.
by grayhatter | 2025-11-02 06:30:54+00:00
You're incorrect. I have Firefox configured with the most strict privacy settings, and it returns `Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0)` With the exception of it being Wayland instead of X11 it's entirely accurate. Would love to see whatever gaslit you of something so easy to test and validate.
by hitekker | 2025-11-02 06:32:28+00:00
I'm not sure if Kostya's account is truthful. He has a huge axe to grind against ffmpeg https://blog.pkh.me/p/13-the-ffmpeg-libav-situation.html

IIRC, his "LibAV" fork was malicious and his people lied a lot to the community ("ffmpeg is now deprecated!"). Ultimately, they failed, but I see a lot of their rhetoric and resentment in Kostya's post today.
by yawpitch | 2025-11-02 06:32:51+00:00
“Men dressed in black” describes about half the ambulatory Doncastrian population after 3PM on a Friday afternoon, they often travel in small groups to try and at assemble at least one complete set of genitals between them, and the terrorism task force gets called out to just about any mass casualty event in the UK since 2007.

Leaping to (especially racist) conclusions isn’t helping anyone.
Show HN: AI ASMR – Template‑based ASMR video generator
by Lucas1991 | 2025-11-02 06:33:32+00:00
Hi HN,

I’ve been fascinated by ASMR for years, but recording high‑quality ASMR videos is surprisingly hard. Traditional production requires microphones, cameras and editing software; it takes hours to film and edit even a short clip. Prompt‑based AI video tools exist, but they assume you know how to craft the right prompts, and the audio often doesn’t match the visuals.

Over the last one month, I built this website to make creating ASMR videos much easier. The goal is to turn the viral ASMR formats you see on TikTok/YouTube Shorts into a simple template‑driven workflow. Instead of writing prompts, you pick a template (e.g. soap cutting, bubble wrap popping, chocolate melting), type the materials/objects you want to see, choose video quality and aspect ratio, and the site generates an 8‑second clip with synchronized audio and video. Under the hood it uses Google Veo 3.1 for video generation, and we generate the audio alongside the visuals so each frame’s sound matches perfectly. There’s a fast mode (~2 minutes) for rapid testing and social media content creation and a high‑quality mode (~6 minutes) for professional projects.

Current features:

• Native audio + visuals – audio and video are generated together so the cutting, tapping or melting sounds match each visual action.

• Template‑based workflow – no prompt engineering; just customize colours, materials and textures.

• Multiple categories – satisfying videos, food, fantasy/surreal, nature/ambient, object interaction and sensory/texture templates.

• Aspect ratio options – 16:9 HD for YouTube/desktop and 9:16 for TikTok, Instagram Reels and Shorts.

• Generation modes – fast mode for rapid testing and social media content creation and high‑quality mode for professional projects.

• 60 free credits for new users so you can try it out without a subscription.

Limitations:

the current version only produces 8‑second clips and uses a preset library of templates; you cannot yet using your own prompt or extend the duration. Also, English is not my first language, so the UI and descriptions may still need polish. I’m planning to add longer durations, more templates, and allow user upload first and last frames.

Why I’m posting:

Show HN is a great place to get early feedback, even for MVPs. I’d love to know:

• Are the templates and customization options intuitive?

• Generation quality — which templates made the videos feel off or not great?

• Is the pricing/credit model reasonable?

• Any bugs or confusing UI elements you notice?

Demo: https://www.ai-asmr.co

Thanks for taking the time to try it out! I’ll be around in the comments to answer questions, admit limitations and share more technical details. Your feedback will help me decide what to build next.
by physicsguy | 2025-11-02 06:33:38+00:00
pkg-config isn’t the hard bit though, is it?

Usually the hard bit with C libraries is having dependencies with dependencies all of which use their own complex build systems, a mix of Make, CMake, Autotools, Ninja, etc.

Then within that for e.g. a mix of using normal standard names for build parameters and not e.g. PROJECTNAME_COMPILER instead of CMAKE_C_COMPILER
by MangoToupe | 2025-11-02 06:34:42+00:00
Crazily, I think the easiest way is to remove any and all incentives, awards, finite funding, and allegedly merit-based positions. Allow anyone who wants to research to research. Natural recognition of peers seems to be the only way to my thinking. Of course this relies on a post-scarcity society so short of actually achieving communism we'll likely never see it happen.
by usr1106 | 2025-11-02 06:34:47+00:00
I type these words on my year old Sailfish device. I had 2 other ones for roughly 10 years altogether.

The UI is astonishingly polished. It has not changed a lot for 10 years, but still nice to use. There is e.g. the tutorial video that comes installed on every device. Sorry, probably won't have time to share it later, I have a funeral to organize when I get out of bed. Maybe some other user can if it's not on Youtube.

The biggest problem areas IMHO:

- No hardware that meets my reqirements. The current one is too big for my pockets / my taste. It's not very good HW either, in the period when Sony Xperia were supported the situation was different. Even the original Sailfish phone over 10 years ago was relatively better at the time.

- Predictive keyboard is gone. I understand it's a licensing issue that they cannot offer it anymore. Blame Apple and Google for killing all small players.

- There is a severe maintenance backlog in many places and it's probably also growing. The browser is based on Firefox with a 2 digit version number. It crashes on many bloat sites and Cloudflare blocks it for being too old. I severly hope it won't crash now before I click reply. (I guess most users use a Browser on the Android compatibility environment)
by anigbrowl | 2025-11-02 06:37:51+00:00
What I mean is teh arguments over nomination process are a sideshow. I did not want Biden to run again, but the president getting waved through to run for a second term is a totally normal thing, and normalcy bias is a major Democratic flaw. I don't care so much about Harris picking up the candidacy without a primary when Biden dropped out, it wasn't ideal but a rushed primary would have been a different sort of shitshow.
by viraptor | 2025-11-02 06:39:31+00:00
> The goal of scraping traffic isn't to overwhelm your site, it's to read it once.

If the authors of the scrapers actually cared about it, we wouldn't have this problem in the first place. But today the more appropriate description is: the goal is to scrape as much data as possible as quickly as possible, preferably before your site falls over. They really don't care and side effects beyond that. Search engines have an incentive to leave your site running. AI companies don't. (Maybe apart from perplexity)
by wasabi991011 | 2025-11-02 06:39:56+00:00
> When they are in the camp what happens?

I don't believe there's a clear picture of what happens next.

Though I know some report the conditions inside the camps are pretty bad, access to lawyers is spotty, reportedly some people are deported without an official removal order / due process, and some people we don't know because they disappear from the public database that's supposed to inform family about the detained person's condition and whereabouts.

I'm not sure if all of that is covered in this BBC report, but feel free to read other journalistic sources

https://www.bbc.com/news/articles/cwy3zel0r3go