MurphyA/hacker-news huggingface dataset:
by ezfe | 2025-11-24 19:26:52+00:00
Right, and the hearing aid has a microphone, so it presents itself as a headset with mic. This is not new, the Oticon also does this.

The difference is that the Oticon supports the "Made for iPhone" hearing aid settings which means you get fine-grained control over which microphone is used.

Apple should give that control to all devices, including standard bluetooth headsets.
by wahnfrieden | 2025-11-24 19:27:09+00:00
You misunderstand: I remove the logging as soon as the task is done. I definitely do not keep the LLM logging around.

That's the beauty of it - it's able to add and remove huge amounts of logging per task, so I never need to manage the scale and complexity of logging that outlasts the task it was purposefully added for. With typical development, adding logging takes time so we keep it around and maintain it.
by mmooss | 2025-11-24 19:27:09+00:00
I understand the concerns and anger of GrapheneOS's leadership, but the hyper-escalation tactic doesn't do what they hope:

First, it sends a message of inexperience in business, negotiation, and conflict resolution: 'I'm going to take my ball and leave' - it looks like an emotional overreaction without strategic thinking. These days you sometimes see powerful parties making similar threats - e.g., Uber threatening to leave certain markets. But those people have significant power and their tactic is really to demonstrate that in order to shift their negotiating position; usually they don't actually decamp, and GrapheneOS has relatively little power so that tactic doesn't apply.

As importantly, it sends the message that GrapheneOS can be pushed around and manipulated: A slight hint of a threat and they flee. Others will take note, and many will think the same of other FOSS projects, large and small - they are easily intimidated and dismissed.

Another reason people don't use these tactics is that they have other important interests besides the one under immediate threat. A requirement of anyone with significant investments that can't be easily abandoned - which is everyone doing anything of value - is to navigate in a way that upholds all those interests. You don't burn down the house to kill a rat. It can be hard and requires careful, deliberate thought and strategy.

One unmentioned interest that might appeal to GrapheneOS's leadership is the freedoms of people in France to create FOSS, and to individual privacy and security.
by zahlman | 2025-11-24 19:27:23+00:00
> If I give Rust an optimistic number by picking its average lower-bound and Python a handicap of picking its average upper-bound, we get:

> 3 ms for Rust (333 Hz)

> 33 ms for Python (30 Hz)

A big chunk of the Python time reported here is likely just starting up the runtime before any of the script can actually run.

For tools that only need the standard library, there is (depending on system config) some room to improve on this by passing `-S` to Python, which will disable running the standard library `site.py` at startup (used for parsing `.pth` files in the `site-packages` folder as well as running any custom local startup hooks).
by bob1029 | 2025-11-24 19:27:48+00:00
> forcing the facility to shut down for at least a few hours

> As a result, the company had to scrap thousands of wafers

Anything involving wet chemistry, photoresist, furnaces, etc. is very time-constrained. You can't let wafers sit around indefinitely. Certain process steps must be followed up very quickly to avoid scrap.

This is why you dont see redundant power for manufacturing lines. A 3nm line needs hundreds of megawatts to operate. You cant clear queued lots without a fully functional line. There's not much you could save by keeping part of the line operational.
by adgjlsfhk1 | 2025-11-24 19:28:04+00:00
I don't think anyone is arguing that Kyber is purposefully backdoored. They are arguing that it (and basically every other lattice based method) has lost a minimum of ~50-100 bits of security in the past decade (and half of the stage 1 algorithms were broken entirely). The reason I can only give ~50-100 bits as the amount Kyber has lost is because attacks are progressing fast enough, and analysis of attacks is complicated enough that no one has actually published a reliable estimate of how strong Kyber is putting together all known attacks.

I have no knowledge of whether Kyber at this point is vulnerable given whatever private cryptanalysis the NSA definitely has done on it, but if Kyber is adopted now, it will definitely be in use 2 decades from now, and it's hard to believe that it won't be vulnerable/broken then (even with only publicly available information).
by ahepp | 2025-11-24 19:28:20+00:00
Isn't cloud init just slurping its own config file, then generating the "real" config files and slurping those into the right spaces?

To me, "copies a file named wpa_supplicant.conf from /boot to /etc on first init" is simpler than "parses some yaml, the generates /etc/wpa_supplicant".

Maybe I'd find it worthwhile if I had encountered cloud init years ago before I invested in learning the other 900 linux networking configuration tools, but now it just feels like a case of XKCD 927 (+1 competing standards). If cloud init is even better, it definitely doesn't seem 10x better to be worth the change.
by XorNot | 2025-11-24 19:28:20+00:00
If you're developing in a container then you would have to be doing it without doing something like say, mounting your home directory into it.

The reality here is this is the sort of attack SELinux should be good at stopping (it's not because no one uses SELinux, the policies most commonly used don't confine the user profile in a useful way, and a whole bunch of tools love ambient credentials in environment variables).
by mritchie712 | 2025-11-24 19:28:38+00:00
> only Claude Code has been able to really solve; Sonnet 4.5 in there consistently performs better than Sonnet 4.5 anywhere else.

I think part of it is this[0] and I expect it will become more of a problem.

Claude models have built-in tools (e.g. `str_replace_editor`) which they've been trained to use. These tools don't exist in Cursor, but claude really wants to use them.

0 - https://x.com/thisritchie/status/1944038132665454841?s=20
by yjftsjthsd-h | 2025-11-24 19:28:48+00:00
That's a different thing. They're also doing at least some degree of open hardware:

> We’ve also published electrical and mechanical design files for Pebble 2 Duo. Yes, you can download the schematic (includes KiCad project files) right now on Github! This should give you a nice jumpstart to designing your own PebbleOS-compatible device.

But this is about the software/firmware running on it.
by wahnfrieden | 2025-11-24 19:28:51+00:00
That's great when you have to maintain a large amount of logs for weeks, months, years.

But I'm talking about adding and removing logs per dev task. There's really no need to have sophisticated log levels and maintaining them as the app evolves and grows, because the LLM can "instantly" add and remove the logging it needs per granular task. This is much faster for me than maintaining logs and carefully selecting log levels and managing how logs can be filtered. That only made sense to me when it took actual dev effort to add or remove these logs.
by sekh60 | 2025-11-24 19:29:18+00:00
Consumer vendors for routers/firewall combos are trash, but I think they'd go a long way in helping people by having an easy to turn on IoT vlan.

Matter devices run without internet access (at least this is the whole point of the spec, some manufacturers have fewer features without using the cloud based app, but to be Matter certified it must run locally to some extent), so blocking the vlan should be okay with a lot of IoT devices.

Random dodgy streamer box does need internet access though, so I think at best having a vlan (probably one just for it sadly) that doesn't have access to the rest of your internal network would be the only realistic solution. Still won't help prevent it from using your connection as part of a botnet though. It's a hard problem.

Unfortunately users are very adverse to learning anything about how their devices work, so I don't have any idea what can be done about the problem.

Maybe we have to rely on the state going after sellers of such pre-compromised devices? I'd say hold the users somewhat liable, maybe a small fine, when they are part of a botnet, and wave them when it's a "legit brand" that gets compromised outside of the users control? Pressure would need to be done on "legit" consumer manufacturers to actually provide security updates to somewhat older devices and not abandon them the minute the latest model is released.
by add_n_to_x | 2025-11-24 19:29:18+00:00
I hope his wife is getting the support she needs to deal with this very challenging situation he's put her in.

It must be very difficult for her to have to deal with her husband suddenly revealing that he wants to live such a bizarre and sexist fantasy full-time, especially considering they have a daughter together who will be also affected by this, perhaps even more adversely so.
by ssl-3 | 2025-11-24 19:30:06+00:00
Use multiple VLANs and SSIDs, and only punch holes or route between them (and to the WAN) if/when absolutely necessary.

It does make it harder to use these things. Some things may even become impossible to use effectively.

The simpler method is just to never trust anything, ever, but that's just a long-winded path that asymptotically approaches having a completely disconnected (airgapped) home.

But the usual default method is even easier. Just use the stuff on the default WLAN that is provided by the ISP like a commoner, have no local services at all (what homelab? what file server? what printer?), and fuhgetaboutit.

So what if the botnet spreads from the Android TV box to the light bulbs? As long as all of the things keep performing their primary roles (rule #1 of a successful infection: don't kill the host), then the bliss of ignorance will be complete.
by MangoToupe | 2025-11-24 19:30:07+00:00
> The US is far from perfect, but has nothing on China in terms of nastiness.

I think you have this reversed, friend. Our culture is based on violence and death. Theirs is based on stability and prosperity.

> That's not even touching the biggest problem of dictatorship, which is what happens when Dear Leader takes a fall. I doubt Xi has much more than a decade of leadership in him, and I worry for the Chinese populace when he goes.

I pray he liberates us before he passes. I agree it's not likely but.... one must maintain hope in this world
by j45 | 2025-11-24 19:30:12+00:00
That's a little over reaction.

Most wifi routers have a guest network mode, that does the first few good steps.

Devices on the guest network can't see or ping devices on your main home network.

But... if appropriately configured the home network should be able to see the devices on the guest network.

There's a few great guides out there that help plan out your home network for such undertakings.
by svieira | 2025-11-24 19:30:26+00:00
I rather prefer the holistic take that we are our whole selves and not just the part that reflects on what we do or the part that reacts to external and internal material stimuli. We know we can change the instincts, emotions, and hormones when they conflict with what we know by reflection to be just and good. To put it another way, we know that we can do things "without thinking" that are either just or unjust and by reflection can achieve some level of mastery over the direction of our impetuses.
by genuser | 2025-11-24 19:30:36+00:00
Roku has unveiled a significant update to its mobile application, delivering a substantially improved user experience for millions of streamers. The most notable enhancement introduces intuitive swipe-based navigation, replacing the traditional virtual directional pad. This redesign aims to reduce finger fatigue and accelerate content discovery, with internal testing suggesting users may complete navigation tasks up to 30% faster. The update, now available for both iOS and Android, represents Roku’s continued effort to make its mobile app a comprehensive control center for its streaming ecosystem.
by janeway | 2025-11-24 19:30:37+00:00
Cool!

I have worked 100% in 3 comparable systems over the past 10 years. Can you access with ssh?

I find it super fluid to work on the HPC directly to develop methods for huge datasets by using vim to code and tmux for sessions. I focus on printing detailed log files constantly with lots of debugs and an automated monitoring script to print those logs in realtime; a mixture of .out .err and log.txt.
by bluGill | 2025-11-24 19:30:53+00:00
One of my needs is when something breaks in the real world I can figure out why. Bugs that happen at my desk I do what you said, add the logs I need and then delete them when it is fixed. However often there are things that I can't figure out how to reproduce at my desk and so I need logs that are always running on the off chance a new bug happens that I need to debug.
by lonjil | 2025-11-24 19:31:12+00:00
> If they successfully contribute an implementation that satisfies these properties and meets our normal production requirements, we would ship it.

That's what they said a year ago. And a couple of Mozilla devs have been in regular contact with the JXL devs ever since then, helping with the integration. The patches to use jxl-rs with Firefox already exist, and will be merged as soon as a couple of prerequisite issues in Gecko are fixed.
by pchavez2025 | 2025-11-24 19:31:26+00:00
I've been exploring how so-called "pathological" mathematics, higher-dimensional algebras with zero divisors, can be used for AI development and safety.

Zero Divisor Transmission Protocol (ZDTP) Chess is the proof-of-concept. It evaluates positions across 16D tactical, 32D positional, and 64D strategic dimensions. The key feature is lossless data transmission of piece positions across multiple dimensions, enabling a mandatory safety override: if the tactical layer detects disaster (hanging queen, etc.), the move is blocked regardless of how good it looks strategically.

The motivation: Building mathematical infrastructure for safer AGI. Systems optimizing overall success can mask immediate disasters, but ZDTP enforces tactical reality over strategic optimism.

Quantified result from testing: Ignored the safety warning once, lost my queen. Game over with a -9.0 material deficit and -18.48 evaluation collapse. After adding safety constraints, that move gets blocked automatically.

The math: Zero divisor structures in Cayley-Dickson algebras (16D sedenions, 32D pathions, 64D chingons). The same six patterns have been verified in their respective Clifford algebras, displaying framework-independence and suggesting portable safety constraints across different AI architectures.

Code is rough but functional. Feedback, critique, and contributions welcome.

Background: Former reporter with more than 30 years experience (AP/LA Times), now researching Applied Pathological Mathematics. This is part of a larger project on mathematical infrastructure for AGI development and safety.
by otterley | 2025-11-24 19:31:28+00:00
It's not clear whether you're using Kubernetes, but the Kubernetes way of dealing with this problem is to declare a memory reservation (i.e., a request) along with the container specification. The amount of the reservation will be deducted from the host's available memory for scheduling purposes, regardless of whether the container actually consumes the reserved amount. It's also a best practice to configure the memory limit to be identical to the reservation, so if the container exceeds the reserved amount, the kernel will terminate it via the OOM killer.

Of course, for this to work, you have to figure out what that reserved amount should be. That is an exercise for the implementer (i.e., you).

See https://kubernetes.io/docs/concepts/configuration/manage-res...

> Attempting to enumerate every resource variable (CPU, IOPS, RSS, Disk, logical count) into a single scoring function feels like an NP-hard trap.

Yeah, don't do that. Figure out what resources your applications need and the declare them, and let the scheduler find the best node based on the requirements you've specified.

> We are trying to write a "God Equation" for our load balancer. We started with row_count, which failed. We looked at disk usage, but that doesn't correlate with RAM because of lazy loading.

A few things come to mind...

First, you're talking about a load balancer, but it's not clear that you're trying to balance load! A good metric to use for load balancing is one whose value is proportional to response latency.

It smells like you're trying to provision resources based on an optimistic prediction of your working set size. Perhaps you need a more pessimistic prediction. It might also be that you're relying too heavily on the kernel to handle paging, when what you really need is a cache tuned for your application that is scan-resistant, coupled with O_DIRECT for I/O.
by sekh60 | 2025-11-24 19:31:56+00:00
I use vyos instead of OpenWRT, but I'd presume OpenWRT can mirror a port? It'd be better to do it on your switch of course. But you could mirror your traffic going across the LAN-WAN barrier and direct it to a security onion install, it's an opensource IDS. It has pretty heavy demands, but traffic analysis is not an easy, computationally cheap task.
by zahlman | 2025-11-24 19:32:13+00:00
It's been about 20 years and I don't know if I could even find it, nor have the legal right to disclose it. Regardless, this sort of thing is pretty trivial to figure out if you're already familiar with MIDP (and have access to the documentation) and understand the PNG specification (https://www.libpng.org/pub/png/spec/1.2/PNG-Contents.html). The hard part is having the idea in the first place.
by artisin | 2025-11-24 19:32:24+00:00
Worth mentioning that Bubblewrap[1] (bwrap) can remove most npm/node attack vectors or, at the very least, limit the damage from running arbitrary code during install/execution. Far from a silver bullet, and you'll want to combine it with a simple wrapper script to avoid dinking around with all its arguments, but it beats dealing with rootless Podman containers.

[1] https://github.com/containers/bubblewrap
by tekacs | 2025-11-24 19:32:25+00:00
This is also super relevant for everyone who had ditched Claude Code due to limits:

> For Claude and Claude Code users with access to Opus 4.5, we’ve removed Opus-specific caps. For Max and Team Premium users, we’ve increased overall usage limits, meaning you’ll have roughly the same number of Opus tokens as you previously had with Sonnet. We’re updating usage limits to make sure you’re able to use Opus 4.5 for daily work.
by jasonthorsness | 2025-11-24 19:32:45+00:00
I used Gemini instead of my usual Claude for a non-trivial front-end project [1] and it really just hit it out of the park especially after the update last week, no trouble just directly emitting around 95% of the application. Now Claude is back! The pace of releases and competition seems to be heating up more lately, and there is absolutely no switching cost. It's going to be interesting to see if and how the frontier model vendors create a moat or if the coding CLIs/models will forever remain a commodity.

[1] https://github.com/jasonthorsness/tree-dangler
by jay_kyburz | 2025-11-24 19:32:49+00:00
I agree, I think schools and universities need to adapt, just like calculators, these things aren't going away. Let students leverage AI as tools and come out of Uni more capable than we did.

AI _do_ currently throw in an occasional wrong thing. Sometimes a lot. A students job needs to be verifying and fact checking the information the AI is telling them.

The student's job becomes asking the right questions and verifying the results.
by lazide | 2025-11-24 19:32:53+00:00
The beauty of being rich/powerful enough is that when the yes man turns out to be wrong, you can throw them into the meat grinder too.

Do it enough times, and you end up with yes men that also force other people into the meat grinder well enough you don’t have to care, directly.

It’s a type of genius. It works best when you embrace that everyone wants to suck up to you anyway, and there are always more flunkies where they came from, so you’re really helping the world out by filtering down to the somewhat effective ones ASAP.
by jjcm | 2025-11-24 19:33:02+00:00
Tangental observation - I've noticed Gemini 3 Pro's train of thought feels very unique. It has kind of an emotive personality to it, where it's surprised or excited by what it finds. It feels like a senior developer looking through legacy code and being like, "wtf is this??".

I'm curious if this was a deliberate effort on their part, and if they found in testing it provided better output. It's still behind other models clearly, but nonetheless it's fascinating.
by whatevermom2 | 2025-11-24 19:33:03+00:00
This was my stance as well about 1.5 year ago.

This is simply not true even when hyperoptimizing for cash.

I always had this gut feeling of using GrapheneOS and QubesOS but decided to go with an iPhone and MacOS because of this idea that I should optimize for cash first and then only I should buy private devices.

Truth is: I started ignoring my "tech intuition" and stopped enjoying programming at all, which obviously led to a decrease in both happiness and revenue.

I started picking up tech that I'm interested about (GrapheneOS, QubesOS, Rust) and I've had a big boost in productivity as a result.

Same can be said with AI adoption; I was forcing myself to use it to be more productive but it had the opposite effect given that it weakened the exceptional intuition that gave me my incredibly privileged position.

Some people need to just execute, but some people are meant to explore, learn and gather new ideas and innovations. Sure, I am not a R&D researcher but everything I learn our of pure joy ends up being useful to my coworkers who are more the "get shit down" type and don't bother learning new tech.

There is a cost to ignoring your intuition and taste! If you feel like implementing privacy and security into your product or your digital life, you will pay a cognitive price by ignoring it.
by tracker1 | 2025-11-24 19:33:05+00:00
You can use a diy mini pc with OpnSense for a router along with a dedicated AP box... most commercial AP boxes can configure for separate SSIDs and VLAN configurations... this can allow you to monitor, configure and block certain access to the devices on your network into different trust groups.

Also, just having a pihole configured for your dhcp dns helps a lot with some traffic, but it can interfere with some legit services (CBS was a really bad one in my experience).

That said, if you don't have the technical skills or desier to learn these things... as you said, don't buy anything that gives you "easy" or "cheap" access to pirate content. It is pretty crazy.
by hu3 | 2025-11-24 19:33:23+00:00
> I gave Sonnet 4.5 a base64 encoded PHP serialize() json of an object dump and told him to extraxt the URL within.

This is what I imagine the LLM usage of people who tell me AI isn't helpful.

It's like telling me airplanes aren't useful because you can't use them in McDonald's drive-through.
by wilg | 2025-11-24 19:33:56+00:00
> But at the same time, the amount of money being earned by creative workers has only fallen over this period [50 years, so since 1975], both in real terms (how much money an average creative worker brings home) and as a share of the total (what percentage of the revenues from a creator's work the creator gets to keep).

Is there evidence this is true? It doesn't sound very true.
by dsign | 2025-11-24 19:34:54+00:00
I don't know, even ChatGPT 5.1 hallucinates API's that don't exist, though it's a step forward in that it also hallucinates the non existence of APIs that exist.

But I reckon that every time that humans have been able to improve their information processing in any way, the world has changed. Even if all we get is to have an LLM be right more times than it is wrong, the world will change again.