MurphyA/hacker-news huggingface dataset:
by Buttons840 | 2025-11-23 22:57:04+00:00
I've bounced off that blog post in the past, because it makes it appear the first step to doing something in avy is to position all my files and "windows" (a "window" is an editing pane inside Emacs) in some clever way, and after I got all that setup, and the windows are all looking at just the right parts of the files, then I can move a paragraph from one window to another with just a few special keystrokes.

I feel like moving from a large monitor to a small monitor would limit the usefulness of avy; it's weird that the physical size of a monitor would limit a tool like this.

If I can only see 3 lines of text at a time (maybe an accessibility thing), the usefulness of Vim-bindings is not significantly reduced. Is the same true for avy?

Again, I'm willing to learn that I was wrong, but this is the specific issue that ended my enthusiasm for learning avy.
by MengerSponge | 2025-11-23 22:57:25+00:00
Aside from the fact that it's recyclable, nothing here indicates that the design is any good, or that it will last any longer than a $15 plastic and steel equivalent. Why brass? And more specifically: why that particular brass alloy? Same vibes as https://craighill.co/ style design: mostly vibes and a the smallest twist of mechanical insight.

"We CNC'd a public domain mechanism out of a billet of brass and you'll buy it for $100"
by doubled112 | 2025-11-23 22:57:40+00:00
My 8 and 11 year old both use KDE. About 10 minutes and they figured out enough to start a browser and mod Minecraft.

I think the people who have the hardest time are those who think they know what they’re doing so feel they need to change things.

I’ve never seen a beginner at anything start digging through settings wildly, and experienced people know what they want to change. It’s that middle ground.
by swatcoder | 2025-11-23 22:57:48+00:00
> It’s ridiculous to think the world’s best companies are just wasting money on “average grade labor”.

Hah!

By now, most people have worked with quite poor-to-mediocre colleague who have either:

* grinded Leetcode and wormed through the pipeline to an overpaid gig at FAANG or a Big Four firm, or

* came into their current position with years of FAANG/BigFour on their resume

Everybody beyond theor first few starry eyed years in the industry knows better than that.

Those companies don't have time and resources to develop earnest meritocracy, nor do they have an actual need to do so, since the overwhelming majority of what they need done is still just "average" (or less) white collar grunt work. They have a pipeline to hire lots of good-enough people as mechanically as possible, because they're huge organizations with a lot of seats to fill.

I'm not saying that H1B's need be -- or are -- any worse than domestic hires, but lets not glamorize either one as the haven for meritocracy. While some of the best talent in the world does work at each, these are ultimately high-volume meat griding code/deck factories, not artisan workshops.
by flossposse | 2025-11-23 22:58:17+00:00
> You cannot have a functioning "Business Internet" without identity verification.

Yes, you can. Just like you can have a functioning grocery store without checking the identity of each shopper that walks through the door.

What you cannot have is a free and democratic society or an efficient free market without robust protections for individual privacy. Privacy is the best shield the less powerful have from being abused and exploited by the more powerful.

> We accepted the SLA for the "Business Internet" in exchange for free, billion-dollar tools.

No, we did not accept. There was no informed consent. The full consequences of our use of these services was and is still is kept hidden from us. Tracking happens invisibly, without our knowledge or consent. This deprives us of the opportunity to express our true preference and opt out and choose an alternative. It's employing deception in order to subvert the consumer's ability to make a rational choice that represents their best interests.

> on the modern web, anonymity looks exactly like a security threat

An anonymous user who just uses the service normally and does not attempt to access sensitive information without authorization does not look like a security threat.
by btilly | 2025-11-23 22:58:59+00:00
When I saw it was for computer scientists, I briefly hoped that it would take the Big-O, little-o approach as Knuth recommended in 1998. See https://micromath.wordpress.com/2008/04/14/donald-knuth-calc... for a repost of Knuth's letter on the topic.

Sadly, no. It just seems to start with a gentle version of real analysis, leading into basic Calculus.
by kace91 | 2025-11-23 22:59:05+00:00
>Then think about our current era, that started in late 2022(...) We’ve flattened Engineering organizations where many roles that previously focused on coordination are now expected to be hands-on keyboard, working deep in the details

Is this everyone's experience nowadays? Personally I haven't experienced such a big shift at all.

Our C-suite is irrationally pushing AI-everything and eng culture is suffering a bit from not fully figuring out how to integrate new tooling safely, but nothing as fundamental as the mentioned changes are taking place so far.
by byko3y | 2025-11-23 22:59:31+00:00
Because it follows same structure as the one used by LLM-s. At least there is a reason to think so — before you've tried to actually read the article and realize LLM-s just don't write text like this... yet. Of course, this structure is also the one used by scientific articles, which I read a lot too, so I'm really inclined to follow this style. "Has the form of scientific article but statements are not precise = AI slop" — that's the implication.

Funny fact: one of the reasons Qwen suggested my article is LLM-generated is because it considered link as impossible. I was so gaslit I opened the article and clicked the link. And it worked. Mic drop.
by lilsneddz | 2025-11-23 23:00:09+00:00
Ouch, that was certainly not my intention. I didn't expect this to be shared around, and hadn't considered the best way to make it available. It's open, and I've shared it for free with every single person who has emailed me. I feel like this slower form of distribution is closer to the original intent of the font as I've been able to connect and chat with lots of incredible SF locals and Muni fans in the process. :)

I made Fran Sans for fun in my own spare time which was a lot of work. I do want to add that all fonts are inspired by work that came before it... yet at some point, the font becomes your own. Yes, Fran Sans is based on the Trans-Lite signage, however when I digitised it, I had to make a number of my own personal design decisions along the way which makes this work my own. Particularly the addition of different styles and characters that were never made for the original signage.

I hoped my intent came through in my commitment to researching and sharing this piece of local history that would have otherwise been lost as there was nothing to be found online when I started this journey.

Hope this clears up my intention, I'd love to send you a copy if you're interested, and I'm open to hearing your distribution ideas.
by cosmic_cheese | 2025-11-23 23:00:14+00:00
The consistency of the theming isn’t the issue, it’s that it’s just theming (unless I’m just misunderstanding). KDE or GNOME with an XP theme applied settings toggled still acts like KDE or GNOME rather than acting like XP. The resemblance is skin-deep.

Good theming is great to have, but what’s more important is that the user’s prior experience and muscle memory still applies, e.g. the task manager can be summoned in the same ways, settings panels are structured similarly (and aren’t either overflowing or too stripped down like KDE and GNOME, respectively), key shortcuts are the same with no caveats, etc.
by tptacek | 2025-11-23 23:01:35+00:00
Node.js and Go are both memory safe, as are Python, Ruby, and Java. "Memory safe" is a term of art referring to susceptibility to memory corruption vulnerabilities in code written by an ordinary practitioner of the language. Almost invariably, attempts to show languages like Go and Python as memory-unsafe involve a programmer deliberately working to defeat the language. But you can do that in any language, including Rust.

There are essentially just two mainstream memory-unsafe languages: C and C++.
by estimator7292 | 2025-11-23 23:01:49+00:00
Okay, we can sum this one up real quick: "I can't conceive of anything larger than myself or longer than my lifespan having value, therefore it is a literal impossibility on par with actual flying dragons"

Also "I have never studied a foreign culture in any level of detail"

ETA: but also everything you really need to know is right at the top: "my 'controversial' book is out now and you should buy it"
Show HN: Revisit – Session recording analysis that "watches" the video
by egykettoharo | 2025-11-23 23:02:13+00:00
Hello HN, I’m the creator of Revisit (https://revisit.pro), a session recording and analytics platform.

We built this because existing tools (FullStory, Smartlook) force you to manually watch thousands of user sessions to find one bug. We wanted an AI that could watch the sessions for us and just tell us why users are churning.

The "AI" Architecture - Store Events: We record DOM events, console logs, network requests, and assets using a lightweight script. - Replay & Render: On the backend, we spin up a headless browser (Puppeteer) to replay the session exactly as the user saw it. - Video Generation: We convert that replay into a physical video file. - Visual Analysis: We send that actual video file to Gemini

This allows the AI to "see" the session like a human does. It can detect visual glitches, rage clicks, and confusing layouts that code-based analysis might miss.

Project-Wide Chat - Beyond single-session analysis, we built a project-wide chat assistant.

Contextual Answers: The AI retrieves the most relevant sessions, "watches" the key moments, and writes an answer backed by video evidence.

Features - Deep Context: We capture everything—console logs, network payloads, and assets—so you can debug issues without asking users for screenshots. - Unlimited Seats: We don't charge per seat. Bring your whole team. - Privacy First: Built-in masking for sensitive data before it leaves the user's browser. - And much more.

We are currently open for signups and would love feedback on the analysis quality!

-Martin
by evilmonkey19 | 2025-11-23 23:02:35+00:00
Im from Spain and Im surprised. Do you still use copper? Here everything is fiber. Cheaper, stable, good and the cabinets are (most of the times) secured. Im not saying we are better because we have many issues (no ipv6 for instance) but It surprises me how few isp options you have in US. Doesnt the government force ISPs to being you good internet?
by Nextgrid | 2025-11-23 23:03:37+00:00
It’s possible but would not bring you any extra security.

The advantage of non-exportable, HSM-backed keys is that you are guaranteed that the only way to use that key is to have online access to the HSM, and you can recover from HSM access compromise without having to replace the keys.

If you make the key exportable it is no better than if it was stored on your disk to begin with.
by wat10000 | 2025-11-23 23:03:40+00:00
What sort of work do you do? I suspect a lot of the differences of opinion here are caused by these systems being a lot better at some kinds of programming than others.

I do lower level operating systems work. My bread and butter is bit-packing shenanigans, atomics, large-scale system performance, occasionally assembly language. It’s pretty bad at those things. It comes up with code that looks like what you’d expect, but doesn’t actually work.

It’s good for searching code big codebases. “I’m crashing over here because this pointer has the low bit set, what would do that?” It’s not consistent, but it’s easy to check what it finds and it saves time overall. It can be good for making tests, especially when given an example to work from. And it’s really good for helper scripts. But so far, production code is a no-go for me.
by QuantumNomad_ | 2025-11-23 23:03:48+00:00
> if you get a new device, you have to go add its pubkey to every server you ever use

It’s not too bad, if the number of servers is not too high.

I have different client pub keys on my phone, multiple laptops and desktop computers and manage my authorized keys to be able to ssh into my servers from the devices, as well as from one laptop to another or from my phone to one of the laptops, etc.

Because I already have several client devices I don’t really need any backup ssh keys. The fact that each device has a different key means that if one laptop breaks or my phone is stolen, I can still ssh into everything from one of the remaining devices and remove the pub key of the broken or stolen device from authorized keys and generate new keys on new devices and then using one of the existing devices to add the pub key of the new device to the authorized keys of the servers and other devices.

For me it’s manageable to do it manually. But if you have very many servers you’d probably want to use a configuration management tool like Chef, Ansible, Puppet or Saltstack. Presumably if you have a very high number of servers you’d already be using a configuration management tool like one of those for other configs and setup anyways.
by chickensong | 2025-11-23 23:04:35+00:00
LLM output isn't always technical though, so I'm not sure if it's as black and white as text vs images. Writing fiction in particular, is quite an artistic endeavor, and just as visual artists typically finds their own style, writers do too.

If someone isn't great at grammar or writing in general, using an LLM to compose an email seems fine to me. I also don't feel strongly about using it for advertising or marketing content, or purely informational cases like technical documentation, as long as it's accurate. Telling an LLM to write a novel in the style of another author however... that's not cool. The use case and intent matters greatly.

I'm not in game dev, so I'm curious where you see people drawing the line for genAI usage? I do have friends in that circle though, but their complaints have mostly been about the industry in general (brutal), and the offshoring of work, particularly in the 3d modeling/asset creation areas.

I will say however, that I've long had dreams of making a game, but the asset generation has always been too big of a hurdle to overcome, so genAI gives me some hope that maybe one day I might be able to attempt something.
by lxgr | 2025-11-23 23:04:46+00:00
Is there a way to import an existing (compatible) key and still mark it as non-exportable?

That seems more useful for the SSH key scenario: Generate a key in memory and back it up to offline storage once, and otherwise only use it in a way totally non-exportable by any malware.

This sentence

> The exportable private key is encrypted with Elliptic Curve Encryption Standard Variable IVX963 algorithm which is backed by a Secure Enclave key.

makes it sound like exportable keys might inherently not be Secure Enclave resident in Apple's implementation, which would be unfortunate, as anything else can still be accessed by malware with kernel-level privileges.

(GPG, and I believe also PIV, allow importing externally-generated keys without necessarily marking them exportable; they'll just, correctly, lack any attestation statement about having been generated in secure hardware.)
by themgt | 2025-11-23 23:04:49+00:00
You cannot go along like “I’m writing a cold path high-level code, I don’t need performance, I don’t need to go deeper into lifetime handling, I just want to write a high level logic”. You will be forced into the low level nuances every time you write a single line of Rust. There is no garbage collector for Rust and will never be — you will have to semi-manually pack all your data into a tree of ownership. You have to be fluent in ownership, borrowing, traits to write just a few lines of code.

It's still quite rough around the edges, but Crystal is a fun choice for this type of thing. If you want a readable high level language and sane package manager that compiles to reasonably performant machine code, it's worth a look.
by deadbabe | 2025-11-23 23:05:15+00:00
If it’s any comfort, no one ever truly knows who you are, even if you wanted to be totally honest.

Everyone has a version of you they’ve constructed, no one has your entire perspective on your life and access to your inner thoughts, and even if they did they would forget or misinterpret details.

Don’t chase a desire to have people know the real you, they never will. Even if you had a new gay lover just because they know you’re gay doesn’t mean they know the real you.

And sometimes people don’t even know their own real self.
by bccdee | 2025-11-23 23:06:38+00:00
> telling a victim “but the memory was not corrupted in the crash” is a weak consolation. We actually had a recent Cloudflare outage caused by a crash on unwrap() function. It’s probably the strongest point of my whining: Rust is memory safe and unreliable. The price of memory safety was reliability

This is incorrect in a way that honestly feels insulting. It's not the language's fault that you called the `crash()` function—every language has a way to terminate execution, and for good reason. Crashing isn't even necessarily incorrect behaviour; that's how you pass the error up to the infrastructure layer for handling. The problem here existed at a system design level, not a language level.

For the author to paraphrase this (bad) critique like this:

> You cannot get 99.999% reliability with Rust — it crashes all the time.

is outright dishonest and insulting to me as a reader.
by wat10000 | 2025-11-23 23:07:19+00:00
Can you describe some of it? On one hand, it is amazing that a computer can go from prose to code at all. On the other hand, it’s what I like to describe as a dancing bear. The bear is not a very good dancer, but it’s amazing that it can dance at all.

I’d make the distinction between these systems and what they’re used for. The systems themselves are amazing. What people do with them is pretty mundane so far. Doing the same work somewhat faster is nice, and it’s amazing that computers can do it, but the result is just a little more of the same output.
by bediger4000 | 2025-11-23 23:07:21+00:00
The obvious answer is because conservatism and libertarianism moved away from free markets. I think it's undeniable that mainstream conservatism has retreated from free market fundamentalism into mercantilism during the past few years. Libertarians have followed suit, apparently due to Trump loyalism. I acknowledge that there's some holdouts in both ideologies, but the vast bulk of adherents aren't militant about free markets anymore.

Those were the loud voices advocating for free markets everywhere.
by astrange | 2025-11-23 23:07:40+00:00
> Sodium lights are a problem not because they’re yellow, but because they have very spiky spectra.

A side effect of this (and other low-CRI lights) is that it's hard to take pictures in them, because if you take a picture of a person you want their skin tone to look just right or else they look weird and sickly and unattractive.

Regular white balance algorithms are not quite able to handle this. So you might imagine why phone cameras are motivated to do AI processing or people processing or other things that make the picture look overprocessed. Because the people are temporarily literally the wrong color in that lighting, and an AI model may be capable of knowing what color they "actually" are.

(That said, the main reason photos look overprocessed is that for some reason nobody on Earth ever implements sensible sharpening algorithms. They always use frequency-based ones that cause obvious white halos. Learn about warp-sharpen and median filters, people.)
by erentz | 2025-11-23 23:07:57+00:00
The US isn’t pouring money into Ukraine. Under the PURL agreement this year it has switched to selling weapons at a mark up that is being paid for by NATO allies. So this plan is not only screwing our own defense industry in the short term, it is doing so in the long term by showing any agreement with the US can’t be trusted and if you agree to buy weapons from the US you may find your supply cut off randomly as you need them.
by DroneBetter | 2025-11-23 23:08:00+00:00
I think Zeilberger is taken heavily out of context and confused with Norman Wildberger a lot; he certainly has some eccentric opinions but that one is not at all reflected in his blog's contents (which are largely things like "[particular paper] presents [conjecture/proof] that can be [resolved/shortened] by routine methods" that are only routine because of his decades of work), it's a shame that him being the go-to example of a crank seems to have become engrained into LLMs
by Nextgrid | 2025-11-23 23:09:33+00:00
In this case you can maintain an offline SSH CA and trust that on the remote machines, and then sign yourself leaf certificates against a non-exportable HSM-backed key. In case of loss you just make a new key and sign a new certificate.

Of course this just moves the key management problem somewhere else: now you need to protect the CA key, but that might be easier since you would only need access to it in a disaster recovery scenario if you replaced the laptop or otherwise lost access to your HSM-backed key.

As usual, it all depends on your threat model.
by xp84 | 2025-11-23 23:09:36+00:00
Idk but I’m still waiting for AT&T to get off their butts, as is most of my county. And this is a nearly fully urbanized county, basically no rural areas here at all, and all the cities touch.

AT&T is allergic to capex and even if they changed their mind recently they waited an unforgivably long time (20 years!) to start. They and their predecessors were happy to take all those sweet subsidies for doing so in the 90s though.
by godelski | 2025-11-23 23:10:35+00:00
I've had similar results in both mathematics and programming. For one paper I was writing I wanted to try them and it was a fairly straightforward problem counting the number of permutations. I spent much more time trying to get the AI to figure it out than it took to actually solve it. Couldn't get it to do it even after I solved the problem. Similarly in coding I've had it fail to find trivial bugs like an undefined keyword, which would have easily been caught had I turned on ctags (because the keyword was inherited from a class, which made it so easy to miss). But similarly I've had them succeed on non-trivial tasks and those have been of great help, though nothing has ever been end-to-end just the AI.

So I agree. I think these tools are very helpful, but I also think it is unhelpful that people are trying to sell them as much more than they are. The over hype of them not only legitimizes any pushback but provides ammunition. I believe the truth is that they're helpful tools, but are still far from replacing expertise. I believe that if we try to oversell them then we run the risk of ruining their utility. If you promise the moon you have the deliver the moon. That's different from aiming for the moon and landing in the trees.
by preommr | 2025-11-23 23:12:14+00:00
crtystal and nim, probably not.

Zig... is surprisngly used a lot given how rough the state of the language is. It makes me think that if it ever reaches v1.0, it has a very good chance of being at least a "Kotlin", probably a "elixir"/"haskell", and a decent enough shot of "typescript".