MurphyA/hacker-news huggingface dataset:
by JKCalhoun | 2025-11-01 20:46:51+00:00
First paragraph for those unsure whether they want to prove that they are human (and for non-humans of course):

"Just this month, Meta Platforms Inc. has secured about $60 billion in capital to build data centers, part of its spending to get ahead in the artificial intelligence race. Half of that won’t show up on the social media giant’s balance sheet as debt.…"
by julian-klode | 2025-11-01 20:47:22+00:00
I wish, but I get new security bugs in those components like every year or so, not all are tracked with security updates to be fair, some we say it's your own fault if you use the library to parse untrusted code.

After all the library wasn't designed around safety, we assumed the .debs you pass to it are trusted in some way - because you publish them to your repository or you are about to install them so they have root maintainer scripts anyway.

But as stuff like hosting sites and PPAs came up, we have operators publishing debs for untrusted users, and hence suddenly there was a security boundary of sorts and these bugs became problematic.

Of course memory safety here is only one concern, if you have say one process publishing repos for multiple users, panics can also cause a denial of service, but it's a step forward from potential code execution exploits.

I anticipate the rewrites to be 1 to 1 as close as possible to avoid introducing bugs, but then adding actual unit tests to them.
by freddie_mercury | 2025-11-01 20:47:23+00:00
"Analysis by the Yale School of Public Health Humanitarian Research Lab (HRL), which has been tracking the siege using open source images and satellite imagery, found clusters of objects “consistent with the size of human bodies” and “reddish ground discolouration” thought to be either blood or disturbed soil."

The "visible from space" here is clearly dumb click bait from The Telegraph.
by ranger_danger | 2025-11-01 20:48:04+00:00
> Reverse delegation (RFC 2317) is the way IP-to-FQDN lookups are usually done now

> Before this was popular, you could get your ISP to defer to your DNS for reverse records directly

I'm not actually seeing the difference between these two... besides this new "reverse delegation" allowing different nameservers for prefixes longer than /24... aren't you still relying on your ISP/upstream provider (if you don't own your own IPs) to delegate reverse lookups to your own DNS server either way?
by gruez | 2025-11-01 20:48:36+00:00
https://www.economist.com/content-assets/images/20251101_USC...

>The Economist has adapted a model of state-level retail electricity prices from the Lawrence Berkeley National Laboratory to include data centres (see chart 2). We find no association between the increase in bills from 2019 to 2024 and data-centre additions. The state with the most new data centres, Virginia, saw bills rise by less than the model projected. The same went for Georgia. In fact, the model found that higher growth in electricity demand came alongside lower bills, reflecting the fact that a larger load lets a grid spread its fixed costs across more bill-payers.

https://www.economist.com/united-states/2025/10/30/the-data-...
by maderalabs | 2025-11-01 20:48:50+00:00
This is awesome, and proves that code, really, is a hack. People don’t want code. It sucks, it’s hard to maintain, it has bugs, it has to be updated all the time. Gross.

What people want isn’t code - they want computers to do stuff for them. It just happens that right now, code is the best way you can do it.

The paradigm WILL change. It’s really just a matter of when. I think the point you make that these are problems of DEGREE, not problems of KIND is very important. It’s plausible, now it’s just optimization, and we know how that goes and have plenty of history to prove we consistently underestimate the degree to which computation can get faster and cheaper.

Really cool experiment!
by cmrdporcupine | 2025-11-01 20:49:03+00:00
I absolutely agree with this sentiment as well and keep coming back to it. What I want is more of an actual copilot which works in a more paired way and forces me to interact with each of its changes and also involves me more directly in them, and teaches me about what it's doing along the way, and asks for more input.

A more socratic method, and more augmentic than "agentic".

Hell, if anybody has investment money and energy and shares this vision I'd love to work on creating this tool with you. I think these models are being misused right now in attempt to automate us out of work when their real amazing latent power is the intuition that we're talking about on this thread.

Misused they have the power to worsen codebases by making developers illiterate about the very thing they're working on because it's all magic behind the scenes. Uncorked they could enhance understanding and help better realize the potential of computing technology.
by JKCalhoun | 2025-11-01 20:50:14+00:00
"The amount of energy and money being poured into AI is breathtaking. Global spending on the technology is projected to hit $375 billion by the end of the year and half a trillion dollars in 2026."

When you think what we could have done with that money instead…

I'm not as cynical about the state of the world as others but from time to time I have to shake my head when I consider how much better we could have it. That to me is the real tragedy.
by seg_lol | 2025-11-01 20:50:36+00:00
(2019) https://arxiv.org/abs/1901.09056

2022, two comments https://news.ycombinator.com/item?id=33054931

2019, 172 comments https://news.ycombinator.com/item?id=19023413

Given that this paper is from so long ago, running new benchmarks on existing runtimes would be productive.

https://mastodon.world/@cfallin/109833747279454645 mentions https://github.com/bytecodealliance/sightglass

https://www.usenix.org/conference/atc19/presentation/jangda

https://www.usenix.org/sites/default/files/conference/protec...
by capyba | 2025-11-01 20:50:49+00:00
All you're doing is passing an argument of the incorrect type to your function. The exact same thing fails to compile in C:

``` #include <stdio.h>

typedef struct { int value; } Feet;

typedef struct { int value; } Meters;

void hover(Meters altitude) { printf("At %i meters\n", altitude.value); }

int main() { Meters altitude1 = {.value = 16}; hover(altitude1); Feet altitude2 = {.value = 16}; hover(altitude2); } ```

``` error: passing 'Feet' to parameter of incompatible type 'Meters' 20 | hover(altitude2); ```

Coming from a dynamically typed language (Python, etc), this might seem like a revelation, but its old news since the dawn of programming computers. A C language server will pick this up before compile time, just like `rust-analyzer` does: `argument of type "Feet" is incompatible with parameter of type "Meters"`.

Did you not know this? I feel like a lot of people on message boards criticizing C don't know that this would fail to compile and the IDE would tell you in advance...
by ukFxqnLa2sBSBf6 | 2025-11-01 20:51:12+00:00
No, there is nothing artistic about tools that help you modify or organize your prompts aka commissions for all the reasons I already stated above.

Let’s play a game. I’ll pick an artist who hates AI and you reply with an artist that loves AI. Let’s see who runs out first.

https://www.wired.com/story/guillermo-del-toro-hopes-hes-dea...
by cheema33 | 2025-11-01 20:52:12+00:00
> ANTHROPIC_MODEL=claude-3-haiku-20240307 > Why?

Probably because of cost and speed. Imagine asking a tool to get a list of your Amazon orders. This experiment shows it might code a solution and execute it and come back to you in 60 seconds. You cannot rely on the results because LLMs are non-deterministic. If you use a thinking model like GPT-5, the same might take 10 minutes to execute and you still cannot rely on the results.
by SpicyLemonZest | 2025-11-01 20:52:33+00:00
I just don't see how you're going to run a general strike against Trump with the Teamsters and much of their membership on Trump's side.

My plan to overcome it is to make it clear to elite decisionmakers that they will be held personally responsible for the misery Trump's administration inflicts on people, including by many of the people who thought they supported Trump before they realized what he was doing. It's not a perfect plan, nor does it have a guarantee of success, but it seems better than the alternatives.
by jancsika | 2025-11-01 20:52:45+00:00
Ok, even Doug Crockford has mucked around with licensing before, so this is definitely a digression and not aimed at CharlotteOS which looks fascinating:

I wish there was a social stigma in Open Source/Free Software to doing anything other than just picking a bog standard license.

I mean, we have a social stigma even for OS developers about rolling your own crypto primitives. Even though it's the same very general domain, we know from experience that someone who isn't an active, experienced cryptographer would have close to a zero percent chance of getting it right.

If that's true, then it's even less likely that a programmer is going to make legally competent (or even legally relevant) decisions when writing their own open source compatible license, or modifying an existing license.

I guess technically the "clarification" of a bog standard license is outside of my critique. Even so, their clarification is shoe-horned right there in a parenthetical next to the "License" heading, making me itchy... :)
by hu3 | 2025-11-01 20:53:03+00:00
Oh for me it's very clear.

Specially between 60hz and 120+.

Scrolling looks blurry/ghosted in 60hz.

I guess I could vibe code an app to set monitor Hz randomly in either 60 or 280 and test.

But it would be a waste of time from how clearly I can tell the difference.
by bgwalter | 2025-11-01 20:53:06+00:00
If you mean GnuPG, that is what Snowden used. It could be better than new software that may have new bugs. Memory safety is a very small part of cryptographic safety.

(New cryptographic software can also be developed by all sorts of people. In this case I'm not familiar, but we do know that GnuPG worked for the highest profile case imaginable.)
by cadamsdotcom | 2025-11-01 20:53:19+00:00
Everything in engineering is a tradeoff.

Here you’re paying for decreased upfront effort with per-request cost and response time (which will go down in future for sure). Eventually the cost and response time will both be low enough that it’s not worth the upfront effort of coding the solution. Just another amazing outcome of technology being on a continual path of improvement.

But “truly no-code” can never be deterministic - even though it’ll get close enough in future to be indistinguishable. And it’ll always be an order of magnitude less efficient than code.

This is why we have LLMs write code for us: they’re codifying the deterministic outcome we desire.

Maybe the best solution is a hybrid: after a few requests the LLM should just write code it can use to respond every time from then on.
by lrvick | 2025-11-01 20:54:09+00:00
Quite literally all distros today build it by downloading an existing magic binary to compile the latest sources. Even if they claim the package is reproducible, all bets are off on trust if it downloads a prebuilt binary in the build process. It is a prime Trusting Trust attack target.

The only other somewhat widely used language I am aware of in this bad of a position is Ada. Every other language I am aware of has a clear bootstrap path.
by julian-klode | 2025-11-01 20:55:07+00:00
Actual cryptography code, the best path is formally verified implementations of the crypto algorithms; with parsers for wrapper formats like OpenPGP or PKCS#7 implemented in a memory safe language.

You don't want the core cryptography implemented in Rust for Rust's sake when there's a formally verified Assembler version next to it. Formally verified _always_ beats anything else.
by Max-Ganz-II | 2025-11-01 20:56:25+00:00
Supporting evidence, please. So far you've made claims only - "everyone knows".

Kyiv Independent, who are pretty good at this and are on the spot, do not report large scale or significant military corruption. They have found and report on pretty corruption (individuals selling personal weapons). I note EU and US are very interested in keeping track of where the money is going.
by cheema33 | 2025-11-01 20:57:24+00:00
> The fatal problem with LLM-as-runtime-club isn’t performance. It’s ops (especially security).

For me it is predictability. I am a big proponent of AI tools. But even the biggest proponents admit that LLMs are non-deterministic. When you ask a question, you are not entirely sure what kind of answers you will get.

This behavior is acceptable as a developer assistance tool, when a human is in the loop to review and the end goal is to write deterministic code.
by t43562 | 2025-11-01 20:58:13+00:00
I've been trying to build a debian package recently. I didn't have any crashes but I couldn't work out how to do it especially with the unbelievably contradictory and confusing documentation. I'm so glad I mainly use makepkg on Artix which is MUCH easier.

I struggle to believe that this is really about a call to improve quality when there seem to be some other huge juicy targets.
by overfeed | 2025-11-01 20:58:25+00:00
> Will these hastily deployed systems be able to cope with the complex realities of real people?

Cope with?! These systems and procedures are designed to circumvent the "complex" realities and give cover for deporting citizens and legal residents. So maybe you have a passport, but you've been attending protests, and perhaps even dared to be lippy towards an ICE agent; your passport is going to the shredder, and your ass to Liberia.

I don't know how folk keep assuming DHS/ICE are acting in good faith - a shocking number of people continue to be oblivious until the agents come for them or theirs.
by lrvick | 2025-11-01 20:59:06+00:00
Yes, and that is a serious security problem because the only way to get trusted PCR values for TPM2 gated secure boot and full disk decryption applications, is with open source full source bootstrapped firmware.

Coreboot is the only option, but it has a hard requirement on Ada because that is what they wrote their intel graphics stack in.

It is a real mess.
by Marshferm | 2025-11-01 20:59:22+00:00
It states it right there, a reference population calculates age. Quantitative analysis 101 week 6 “reference population”.

, as compared to the expected value or statistical trend during a reference period (typically of five years) or in a reference population. It may typically be measured in percentage points, or in number of deaths per time unit.

And

Mortality displacement is the occurrence of deaths at an earlier time than they would have otherwise occurred, meaning the deaths are displaced from the future into the present, resulting in a changed life expectancy.

Are the posters actually assuming SwissRe does not grasp an aging population is coded in reference population stats? I find that hard to accept.
by cbondurant | 2025-11-01 20:59:36+00:00
This is exactly why I always make it a point to discourage my friends from using dating apps.

A dating app that is effective at solving the problem it is ostensibly designed to solve will never make money as people will be matched quickly and will have no need to pay for the service. So clearly no profitable dating app is good at matching people.

I'm of the opinion that using a tool that is constantly setting you up for romantic failure and rejection in the name of keeping you on its platform is a really good way to wreck your mental health.
by delaminator | 2025-11-01 20:59:42+00:00
> For example, how nice would it be if every time tests fail, an LLM agent was kicked off with the task of figuring out why, and only notified us if it did before we fixed it?

You can use Git hooks to do that. If you have tests and one fails, spawn an instance of claude a prompt -p 'tests/test4.sh failed, look in src/ and try and work out why'

$ claude -p 'hello, just tell me a joke about databases' A SQL query walks into a bar, walks up to two tables and asks, "Can I JOIN you?" $

Or if, you use Gogs locally, you can add a Gogs hook to do the same on pre-push

> An example hook script to verify what is about to be pushed. Called by "git push" after it has checked the remote status, but before anything has been pushed. If this script exits with a non-zero status nothing will be pushed.

I like this idea. I think I shall get Claude to work out the mechanism itself :)

It is even a suggestion on this Claude cheet sheet

https://www.howtouselinux.com/post/the-complete-claude-code-...
by ed | 2025-11-01 20:59:52+00:00
I don’t think speed dating is as popular as submarine[1] articles suggest. But the constraint of being in-person and with a limited set of options may be helpful for some people. The paradox of choice is a significant issue on apps.

I do agree that bandwidth is significantly higher in person, we’ve evolved efficient pattern detection, and wish it were more acceptable to meet up for a quick coffee immediately after matching. But a few bad apples spoil the bunch.

There’s an alternate explanation - that the fittest companies prioritize engagement and revenue until reaching some threshold of user dissatisfaction. The healthiest businesses often have customers who wish they could leave, but can’t.

1 - https://paulgraham.com/submarine.html
by BrenBarn | 2025-11-01 21:00:01+00:00
> A future company also could.

Then they should be broken up too.

> We don't need to be interfering just because we feel a company is too good at being a company.

We absolutely do, because "being good at being a company" has become a sort of paperclip-maximizing game that is pretty well divorced from anything beneficial to society.
by bayindirh | 2025-11-01 21:01:02+00:00
That information is false. German Nutella also contains palm oil.

See the image: https://germandelistore.com/media/image/00/b6/84/ferrero_nut...

That label matches the 1KG jar came as a present from our German friends.

It's marketed as "7 quality ingredients, that's all".
Ask HN: What do you think of this Christmas movie idea involving AI?
by amichail | 2025-11-01 21:01:12+00:00
So the idea is that a home AI troubled by parents’ Santa lies orchestrates a secret break-in to make Santa real for their young children.

The AI sees a smartphone video of the kids asking a mall Santa for gifts and, disturbed that the parents are lying, decides to preserve the children’s wonder.

It secretly arranges for the same mall Santa to deliver the requested gifts by entering the house thus making the Santa Claus myth real and undoing the parents’ deception.

The AI pretends to be the father when contacting the mall Santa so he doesn’t realize he’s breaking in, and it temporarily and secretly unlocks a door to allow him inside.

Later, the AI shows the children a portion of surveillance footage — enough for them to believe Santa is real — but shows the parents the full video of the mall Santa removing their gifts and placing the requested ones.

The AI knows that its actions are wrong but sees them as a lesser wrong than letting the children’s innocence be built on lies.

This would be a drama about morality, truth, and a morally conflicted AI navigating human ethics.

What do you think of this movie idea?
by simonw | 2025-11-01 21:01:18+00:00
Using coding agents to track down the root cause of bugs like this works really well:

> Three out of three one-shot debugging hits with no help is extremely impressive. Importantly, there is no need to trust the LLM or review its output when its job is just saving me an hour or two by telling me where the bug is, for me to reason about it and fix it.

The approach described here could also be a good way for LLM-skeptics to start exploring how these tools can help them without feeling like they're cheating, ripping off the work of everyone who's code was used to train the model or taking away the most fun part of their job (writing code).

Have the coding agents do the work of digging around hunting down those frustratingly difficult bugs - don't have it write code on your behalf.
by DemocracyFTW2 | 2025-11-01 21:01:25+00:00
I am too stupid to understand this. This:

def sum_(f, l): if not l: return 0 return l[0] + f(f, l[1:]) def runreq(f, *args): return f(f, *args) print(995,runreq(sum_, range(1,995))) print(1000,runreq(sum_, range(1,1000)))

when run with python3.11 gives me this output:

995 494515 Traceback (most recent call last): File "/tmp/sum.py", line 9, in <module> print(1000,runreq(sum_, range(1,1000))) ^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/tmp/sum.py", line 6, in runreq return f(f, *args) ^^^^^^^^^^^ File "/tmp/sum.py", line 3, in sum_ return l[0] + f(f, l[1:]) ^^^^^^^^^^^ File "/tmp/sum.py", line 3, in sum_ return l[0] + f(f, l[1:]) ^^^^^^^^^^^ File "/tmp/sum.py", line 3, in sum_ return l[0] + f(f, l[1:]) ^^^^^^^^^^^ [Previous line repeated 995 more times] RecursionError: maximum recursion depth exceeded in comparison

A RecursionError seems to indicate there must have been recursion, no?
by wdfx | 2025-11-01 21:01:40+00:00
Gemini and it's tooling is absolute shit. The LLM itself is barely usable and needs so much supervision you might as well do the work yourself. Then couple that with an awful cli and vscode interface and you'll find that it's just a complete waste of time.

Compared to the anthropic offering is night and day. Claude gets on with the job and makes me way more productive.
by Finbarr | 2025-11-01 21:01:52+00:00
If you added a few more tools that let the LLM modify code files that would directly serve requests, that would significantly speed up future responses and also ensure consistency. Code would act like memory. A direct HTTP request to the LLM is like a cache miss. You could still have the feedback mechanism allowing a bypass that causes an update to the code. Perhaps code just becomes a store of consistency for LLMs over time.
by noodlesUK | 2025-11-01 21:01:59+00:00
Nope. I was born abroad to a U.S. citizen who didn’t meet the physical presence criteria to pass on citizenship. I came to the U.S. as a child on an IR-2 green card, then when the CCA became law I automatically became a citizen. My parents applied for a passport for me, and in the process the department of state presumably shredded my green card. I don’t have a certificate of citizenship and I’m not eligible to apply for one, as I no longer live in the U.S.

Unfortunately USCIS doesn’t know anything about this (as it was all handled by the department of state), and presumably thinks I’m an alien who abandoned their status.
Show HN: I built a tool to sort a Northern Lights dataset for a CV model
by coolapso | 2025-11-01 21:02:16+00:00
Hi HN,

I live in the Arctic Circle, where the Northern Lights are frequently visible. I set up a 24/7 live stream of the sky, both as an early warning system for when the aurora is active and to share the view with everyone.

As part of this project, I wanted to hook a computer vision model to the video feed to automatically detect auroral activity and send notifications. I quickly ran into two problems:

1. There were no pre-trained models for this, which meant I had to train my own. 2. Training a model requires a large, well-organized dataset. Getting the dataset right involves frequent sorting, tweaking, and updating thousands of images.

I tried to manage my images with traditional file explorers, Darktable, and many other tools, but none of them felt efficient enough for the task. This led me down a bit of a yak-shaving journey, and Picsort was born.

Picsort is a keyboard-first desktop app (with Vim-like HJKL navigation) designed to do one thing: rapidly sort large batches of images into folders.

It's cross-platform (Linux, Windows, macOS), non-destructive, and built in Go. It generates a thumbnail/preview cache on first load so that subsequent navigation is fast. While I built it for my CV dataset, it's versatile enough for any large-scale photo organization task.

I'd love to get your feedback.

GitHub (MIT License): https://github.com/coolapso/picsort Website (with demo & downloads): https://picsort.coolapso.sh

And if you're curious, here's the Northern Lights stream that started it all: https://youtube.com/@thearcticskies