MurphyA/hacker-news huggingface dataset:
Show HN: Treyspace ─ Open Source Graph RAG on Your Excalidraw Canvas
by lforster | 2025-11-16 14:40:34+00:00
Hi HN! I built Treyspace, an SDK that turns Excalidraw canvases into queryable knowledge graphs using RAG (Retrieval Augmented Generation).

What it does: - Ingests canvas data and mirrors it into a graph-vector database (Helix) - Performs semantic, relational, and spatial clustering of canvas elements - Lets you query your diagrams with natural language via LLM-powered analysis

Why I built it: I found myself creating complex diagrams in Excalidraw but struggling to extract insights from them later. Traditional search doesn't understand spatial relationships or semantic connections between elements. Treyspace bridges that gap by treating your canvas as a knowledge graph.

Demo: https://app.treyspace.app/ (no API key required)

Key features: - Works with in-memory mode by default (no DB setup needed) - Optional Helix DB backend for production use - OpenAI-compatible responses API - SSE streaming for real-time analysis - Use as a library or standalone server

Example use case: Load an architecture diagram, ask "What are the security vulnerabilities in this design?" and get context-aware answers based on spatial proximity, element relationships, and semantic understanding.

The SDK and source code is MIT licensed and designed to be hacked on. I’ve tried to make it as simple as possible to set up (all you should need is an OpenAI API key)

Repo: https://github.com/L-Forster/treyspace-sdk

Would love feedback on the approach and hear how you might use canvas-based RAG!
by marginalia_nu | 2025-11-16 14:41:24+00:00
What's missing is effective international law enforcement. This is a legal problem first and foremost. As long as it's as easy as it is to get away with this stuff by just routing the traffic through a Russian or Singaporean node, it's going to keep happening. With international diplomacy going the way it has been, odds of that changing aren't fantastic.

The web is really stuck between a rock and a hard place when it comes to this. Proof of work helps website owners, but makes life harder for all discovery tools and search engines.

An independent standard for request signing and building some sort of reputation database for verified crawlers could be part of a solution, though that causes problems with websites feeding crawlers different content than users, an does nothing to fix the Sybil attack problem.
by billy99k | 2025-11-16 14:42:15+00:00
"Being attentive to your practice (i.e. recording, going over your work, etc.)"

If you practice the same thing over and over, you won't get better. If you fail, figure out what you did wrong, and improve, that's competition.

"Asking, and taking the advice of other people in your field"

I will agree with you here.

"teams more diverse in culture, race, and gender,

'diversity of thought' has nothing to do with race, gender, or culture. I've found that many companies will use inferior ideas just to say that they are 'diverse'.

You also have to be careful, because when you take too many ideas from people that lack experience/expertise, you have to tune out the noise.

I do agree you need to get a wide array of ideas, though, regardless of race, culture, or gender.

"in a game jam session, you're collaborating with those around you to produce lots of interesting and good art."

This isn't competition, and there is a place for it..but this isn't really what we are discussing.

"another perspective, a second pair of eyes, the well-worn advice of the 40yro burned out techies"

Most learning like this happens if you get stuck on something and don't want to spend lots of time on it (although failing until you succeed will allow you to learn 5X more).

However, to take what you learned and actually improve, takes competition.
by kamranjon | 2025-11-16 14:42:21+00:00
I wonder if the inverse rule for this is “how to know when quitting is more effective than trying” - because I think that often times, and especially for folks who can be incredibly persistent when they put their mind to something, it’s helpful to have a cost benefit analysis of your efforts and it might just be that in more cases than not, just not trying actually resolves the core problem your trying to solve.

I really enjoyed this article and it really resonated with me, which made me wonder if it is actually an evolutionarily selected solution in a way - like that ignoring something turns out to be a surprisingly effective form of triage for many situations? Obviously the cases where this doesn’t hold are what the article is addressing but I found it fascinating to think about why that approach might be so common.
by cholantesh | 2025-11-16 14:45:00+00:00
>that thing is overwhelming with all its popups, hovers, sidebars etc.

I think it's fairly normal if you're coming from heavy IDE use, eg: Eclipse. If you've spent most of your time editing using tmux/[vi|nano|emacs]], maybe that's not the case, but I can't really speak to that as I've never really worked that way.
by salawat | 2025-11-16 14:45:09+00:00
How convenient for the investor class to have such a scapegoat to always fall back on. It's the consumer's fault! Not ours! Truly!

Nevermind that the bounds of what consumers have to buy/consume are entirely drawn and selected by investor prospectus, and business collusion, in an environment shaped by regulatory capture or selective compliance!

I'm open to accepting some blame on consumers, but trying to scapegoat them as the root of the problem is horseshit of the highest order.

MBA's and investors of the past 50 years drank deep of the draught of economic growth through regulatory arbitrage by off shoring, labor replacement above all else, and trying to chase shareholder returns over stakeholder returns. Fuck you, got mine in the socioeconomic sense.
by nicoburns | 2025-11-16 14:45:12+00:00
Even using something as simple as Vec means using `unsafe` code (from the std library). The idea isn't to have no `unsafe` code (which is impossible). It's to limit it to small sections of your code that are much more easily verifiable.

For some use cases, that means that "user code" can have no `unsafe`. But implementing a GC is very much not one of those.
by mft_ | 2025-11-16 14:45:29+00:00
…unless someone has sufficient time and/or money to spend on it, and wants to do so as a point of principle.

If I had large amounts of spare money, I’d love to seed small endeavours that (according to my personal world view) made the world incrementally better.

As has been noted before, what’s the point of having ‘FU money’ if you don’t use it to say ‘FU’ now and again?
by Retric | 2025-11-16 14:45:40+00:00
America has huge trade deficit from China but America imports more from the EU (605.8) and Mexico (505.9) than China (438.9) followed closely by Canada (412.7). At the same time just under 15% of China’s exports are going to the US, so America really isn’t a large fraction of their emissions.

In terms net imports vs exports staple agricultural products have a very high carbon footprint per dollar and America exports a lot of low value food. So the carbon balance is way more tricky than just suggesting America has exported its manufacturing.
by thomascountz | 2025-11-16 14:46:06+00:00
Yes! That's the one!

I have to dig up my old code. I remember It was difficult to observe and identify the replicators. I don't remember following their "tracker" idea.

As you've mentioned, it can be quite self destructive, so I've been experimenting with the instruction set itself.

Each cell is one of 256 values, where only 10 of those values are instructions. In addition, the original instruction set is not uniformly distributed. This means that the likelihood of mutating destructively is highly affected by ratio of valid instructions and their distribution. For example, a cell with value 0xD0 is much less likely to mutate to a valid instruction than a cell of value 0x0D (assuming UTF-8). By playing with these parameters to make the state space smaller, I've seen significantly different levels of stability.

I'd love to follow your work if you share it anywhere!
by Retric | 2025-11-16 14:46:59+00:00
Facts are neutral, when someone says something incorrect it’s worth pointing out the truth.

UAE, Saudi Arabia, Canada, Russia, and Australia are mid sized countries that emit more CO2 than the US per capita but you need to come up with a new metric to get that list. CO2 emissions by countries with more than 10m people or whatever. Perhaps bump it to countries with over 100m people so America is #2 on a list of 16 countries, or 300m so America is #1 on a list of 3 countries.
by stingraycharles | 2025-11-16 14:47:09+00:00
Yup. One recent thing I started using it for is debugging network issues (or whatever) inside actual servers. Just give it permission to SSH into the box and investigate for itself.

Super useful to see it isolate the problem using tcpdump, investigating route tables, etc.

There are lots of use cases that this is useful for, but you need to know its limits and perhaps even more importantly, be able to jump in when you see it’s going down the wrong path.
by mark_l_watson | 2025-11-16 14:47:22+00:00
Is it my imagination, but don’t the CEOs of Anthropic and OpenAI spread around a lot of bullshit whenever they want to raise more money or even worse try to get our government to set up regulatory barriers to hurt competitors?

I think this ‘story’ is an attempt to perhaps outlaw Chinese open weight models in the USA?

I was originally happy to see our current administration go all in on supporting AI development but now I think this whole ‘all in’ thing on “winning AI” is a very dark pattern.
by sn | 2025-11-16 14:48:44+00:00
I think this is partially restating "try smarter, not harder" with a lot more words.

I also think it's unkind not to recognize that we have limited time and energy and it's simply not possible to address everything all at once.

IMO the better takeaway is to learn to admit when we're doing that (deprioritizing a problem we don't have the resources to address,) rather than pretending there is no choice, so it occurs to us to revisit the problem if and when there are the resources to do so. My personal approach to this would be to add it a todo list with no assigned due date.

Also, I don't know who the author is talking about, but when I read:

"These are people who could successfully launch a product in a foreign country with little instruction, but who complain that there aren’t any fun people to meet on the dating apps."

I hear someone who maybe isn't valuing romantic relationships but also views admitting that as socially taboo, so they come up with an excuse for why they're not in a relationship. I don't necessarily perceive someone who isn't applying agency to all areas of their life.
by Yoric | 2025-11-16 14:48:55+00:00
Yes, my kid has ADHD. The browser add-on does the job at slowing down the impulse of going to YouTube (and a few online gaming sites) during homework hours.

I've deployed the same one for me, but setup for Reddit during work hours.

Both of us know how to get around the add-on. It's not particularly hard. But since Firefox is the primary browser for both of us, it does the trick.
by kccqzy | 2025-11-16 14:49:09+00:00
Diamond inheritance is in fact highly pervasive in Python. The reason is that every class is a subclass of object since Python 3 (Python 2 allows classic classes that are different). So every single time you use multiple inheritance you have diamond inheritance. Some of this diamond inheritance is totally innocuous, but mostly not, because a lot of classes override dunder methods on object like __setattr__. It was Guido van Rossum himself that observed the prevalence of diamond inheritance that led to Python 2.3 fixing the MRO, and introducing the super() function to make multiple inheritance sane.

You should read his essay: https://www.python.org/download/releases/2.2/descrintro/
by mistrial9 | 2025-11-16 14:49:50+00:00
LOL - the deeper mythological meanings are quite applicable (!)

What meanings, a reader might ask? First to say, art and mythos can have layers of meanings..There is no "right answer" exactly. think for yourself a moment about "falling" "The Sun", "a son", endeavor, catastrophe, and add knowledge or fate as you see fit.
by y-curious | 2025-11-16 14:50:12+00:00
Is there any compelling evidence that this was marketing done by Sony? Yes, the sniff test does not pass for me about the government officials advertising the device, but this Reddit thread[1] makes the whole story seem plausible. America and Japan really did impose restrictions on shipping to Iraq and people did eventually chain PS3s together for cheap computing.

1: https://www.reddit.com/r/AskHistorians/comments/l3hp2i/did_s...
by jchw | 2025-11-16 14:50:18+00:00
Anubis is definitely playing the cat-and-mouse game to some extent, but I like what it does because it forces bots to either identify themselves as such or face challenges.

That said, we can likely do better. Cloudflare does good in part because Cloudflare runs so much traffic, so they have a lot of data across the internet. Smaller operators just don't get enough traffic to really deal with banning abusive IPs without banning entire ranges indefinitely, not ideal. I hope to see a solution like Crowdsec where reputation data can be crowdsourced to block known bad bots (at least for a while since they are likely borrowing IPs) while using low complexity (potentially JS-free) challenges for IPs with no bad reputation. It's probably too much to ask for Anubis upstream which is probably already too busy dealing with the challenges of what it already does at the scale it is operating, but it does leave some room for further innovation for whoever wants to go for it.

In my opinion there is at least no reason why it is not plausible to have a drop-in solution that can mostly resolve these problems and make it easier for hobbyists to run services again.
by hnthrowaway747 | 2025-11-16 14:50:19+00:00
Exactly, and anyone without even needing much evidence to do so.

It’s allowed in the current day and time to criticize someone else for not providing evidence, even when that evidence would make it easier for the attackers to tune their attack to prevent being identified, and everyone will be like “Yeah, I’m mad, too! Anthropic sucks!” When in the process that only creates friction for the only company that’s spent significant ongoing effort to prevent an AI disasters by trying to be the responsible leader.

I’ve really had my fill of the current climate where people are quick to criticize an easy target just because they can rally anger. Anyone can rally anger. If you must rally anger, it should be against something like hypocrisy, not because you just get mad at things that everyone else hates.
by gjsman-1000 | 2025-11-16 14:50:56+00:00
The problem with anything, anything, without a centralized authority, is that friction overwhelms inertia. Bad actors exist and have no mercy, while good people downplay them until it’s too late. Entropy always wins. Misguided people assume the problem is powerful people, when the problem is actually what the powerful people use their authority to do, as powerful people will always exist. Accepting that and maintaining oversight is the historically successful norm; abolishing them has always failed.

As such, I don’t identify with the author of this post, about trying to resist CloudFlare for moral reasons. A decentralized system where everyone plays nice and mostly cooperates, does not exist any more than a country without a government where everyone plays nice and mostly cooperates. It’s wishful thinking. We already tried this with Email, and we’re back to gatekeepers. Pretending the web will be different is ahistorical.
by Yokolos | 2025-11-16 14:51:12+00:00
> That's still higher than what seems reasonable

Based on what? Your arbitrary standards. I still don't understand what's wrong with 30% for everything Steam provides as a platform. It's perfectly acceptable. It's not making indie developers poorer. It helping to ensure Valve can focus on the things that matter to them and do things like invest in Steam Input, Proton, SteamOS, and Steam Deck/Machine/Controller/Frame/etc. And it's still significantly better than the times when your only option was brick and mortar, where you maybe got 10-30% as the developer.

Every other digital storefront does far less and still takes 15-30%. Why is Valve the big boogey man and everybody else is free to charge whatever they want on developers while doing fuck all for anybody but themselves?
by dzink | 2025-11-16 14:51:50+00:00
The only question is whether what is valuable to Humans remains what is valuable. If major chunks of global money is in the hands of a few entities who can generate more money by doing things that humans don’t care for (example oligarchs profiting from war, or by some far out analogy - some AI company blocking the sun to extract as much energy as possible to power AI farms at the expense of food farms). Then you have a real problem.

Money at its start was human willpower packaged conveniently for transport - in exchange for money you could have humans do something for you they wouldn’t normally do on their own. If you can make money by crunching numbers with a GPU that doesn’t sleep or eat, using energy that doesn’t need humans to make, and you can buy products with it that make you more money automatically, how much would you ask of humans and serve to humans?
by ACCount37 | 2025-11-16 14:51:52+00:00
But security advancements scale.

On average, today's systems are much more secure than those from year 2005. Because the known vulns from those days got patched, and methodologies improved enough that they weren't replaced by newer vulns 1:1.

This is what allows defenders to keep up with the attackers long term. My concern is that AGI is the kind of thing that may result in no "long term".
by rincebrain | 2025-11-16 14:52:24+00:00
My experiences with trying AMD CPU laptops is that they're not good.

Every time I've tried it in the last 10 years, it's felt like I was teleported into the late 90s PC era - weird bugs in specific drivers that you can find lots of reports of for this specific model and no resolution, heat management that feels like someone in a basement strung things together in 5 minutes and never tested it again, strange failures in "plug and play" support for USB devices that work on every other machine flawlessly with the same cable and device, and don't get me started on Bluetooth. (My favorite ever might be the time that attempting to pair a specific pair of headphones to the laptop shut off every USB port, reproducibly, apparently because the BT adapter was connected over the USB M.2 pins to the root hub, and was crashing in firmware, so both Windows and Linux did the same style of dance of "try to reset it, once that fails, go up a level and turn off the complex to make sure other things keep working"...except up one level was the root.) (Though, to be fair to AMD, that was an Intel BT/wifi chip in an AMD laptop...)

I really want to like and recommend AMD mobile hardware, but every time I've tried it has been a shitshow without fail.
by voxleone | 2025-11-16 14:52:54+00:00
The split between inheritance-heavy OOP and composition-first OOP really just reflects how software design has shifted toward approaches that handle change better. Inheritance still solves real problems, but for most modern, fast-changing systems, composition usually offers a smoother path.

Of course, developers mix and match depending on what the situation calls for. But knowing how these two mindsets differ can make it easier to build code that stays clean and easy to evolve.

And as programming continues to pull ideas from functional, reactive, and declarative styles, the compositional way of thinking will probably stay right at the heart of how we approach object-oriented design.

https://d1gesto.blogspot.com/2025/05/the-split-in-oop-compos...
by _n_b_ | 2025-11-16 14:54:12+00:00
> I suspect that the push for civilian SMRs is a disguised subsidy for the naval reactor programme

It absolutely isn’t. There is very little crossover between the RR SMR (which is 470 MWe, not really an ‘SMR’ by IAEA definition) and a submarine reactor core. Sub cores are smaller and optimised for different conditions. They’re vastly different tech. The teams at RR working on these are totally distinct with no crossover.

RR just got £9B for sub NSSS work. They don’t need a back door subsidy when they have a big cheque coming right through the front door!

If anything, UK govt is prioritising domestic technology, whether or not that’s the best from a purely economic point of view.
by BirAdam | 2025-11-16 14:54:14+00:00
Perhaps the modern world has softened the term fascist dictator by using it for regimes to which it only partially applies.

The generalissimo used forced labor not unlike the DPRK, made widespread use of concentration camps, and was quite fond of executing dissidents. All religions other than Catholicism were outlawed and all political parties were outlawed.

Why would opposition to a murderous dictator be a bad thing? It isn’t as though the protestors/rioters/rebels were the ones escalating the situation. The government was already killing people. This could easily be viewed as justified violent opposition in the pursuit of stopping more murder.
by ronef | 2025-11-16 14:54:34+00:00
Ron from Flox here, woke up to feed a brand new 3 day old to see this here! On about 3 hours of sleep (over the lat 48 hours) but excited to try and answer some questions! Feel free to also drop any below <3

We did just launch this last week after a good bit of work from the team. Steve wrote up a deeper technical dive here if anyone is interested - https://flox.dev/blog/kubernetes-uncontained-explained-unloc...
by scuderiaseb | 2025-11-16 14:55:41+00:00
This hits hard, not in my programming work which it also hits but there at least I am sharpening my toolset by reading books, and learning things. This hits the hardest for me training Jiu Jitsu, where I do love the sport but I feel it's so hard to come back to training when I am in such a bad shape. So I say to people that I do Jiu Jitsu, I watch videos, I follow some competitions. Heck I even go with my kids to THEIR training but I only train myself once a month maybe at this rate.
by Yokolos | 2025-11-16 14:56:37+00:00
Their audience is Steam users primarily. There are millions of them and all they need to do is market it on Steam. And as Valve had said (and shown with their hardware survey), the vast majority of users have shitty PC's. People keep mentioning in these comments "oh who is this for? I just built a gaming PC with an RX 9070". Good for you. Then you don't need it. However, there are millions of Steam users who do not have a 9070.
by hyperpl | 2025-11-16 14:58:16+00:00
Agreed. I run my OpenBSD firewall on my odroid h4 - it's relatively cheap and plenty powerful to route gigabit+. I prefer pf and the simplicity of OpenBSD over Debian for such a purpose-built application. For my other "home servers" I simply run Debian as I believe it to be one of the more sane Linux choices for a server-type application.
by mystraline | 2025-11-16 14:58:18+00:00
"No u" isn't a valid argument here.

I'm following the body of capitalist thought, as you can see here:

https://uk.indeed.com/career-advice/career-development/consu...

They are demonstrably very different. And from a 10000 foot view, consumers are reactionary and impulsive and easier to control.

Customers are the ones who give thought in how they purchase.
by time4tea | 2025-11-16 14:58:28+00:00
Had to ban RU, CN, SG, and KR just cos of the volume of spam. The random referer headers has recently become a problem.

This is particularly annoying as knowing where people come from is important.

Its just another reason to give up making stuff, and give in to the FAANG and the AI enshittification.

:-(