MurphyA/hacker-news huggingface dataset:
by naasking | 2025-12-15 15:04:34+00:00
> Traditional capabilities last forever, unless there is some sort of support for revoking already issued capabilities, and those mechanisms tend are far from straightforward.

Revocation is very straightforward in EROS/CapROS and previous systems: it's just incrementing a version number on the capability target. Since the new version number doesn't match any existing capabilities, all of those capabilities are effectively revoked. Revocation is really a non-issue, it's been solved since the 1970s.
by cluckindan | 2025-12-15 15:05:01+00:00
On the contrary, you could swap the database rather easily compared to traditional REST+SQL backends.

Migrate data to another GraphQL DB and join its GraphQL schema to the supergraph. The only pain point could be DB-specific decorators, but even those could be implemented at the supergraph level (in the Federation server) if needed.

Even migrating to a non-GraphQL DB is feasible: you could just write your own resolvers in a separate GraphQL server and join that to the supergraph. But that would be more of a ecosystem lock already :)

Really, any manner of SQL database is more of an ecosystem lock than a GraphQL database behind Federation.
by jsheard | 2025-12-15 15:05:05+00:00
In this case it is actually OpenAI, the IP (74.7.175.182) is in one of their published ranges (74.7.175.128/25).

https://openai.com/searchbot.json

I don't know if imitating a major crawler is really worth it, it may work against very naive filters, but it's easy to definitively check whether you're faking so it's just handing ammo to more advanced filters which do check.

$ curl -I https://www.cloudflare.com HTTP/2 200 $ curl -I -H "User-Agent: Googlebot" https://www.cloudflare.com HTTP/2 403
by asdhtjkujh | 2025-12-15 15:05:10+00:00
Slight tangent, but does anyone have experience with recording hydrophones in excess of 192khz? Last I checked, most of these are specialty devices with high price tags.

Recording full-fidelity whale or dolphin sounds (amongst others) requires using a higher sample rate than is available in most consumer-grade equipment. There's a lot more information down there!
by phil21 | 2025-12-15 15:05:21+00:00
If you mean the difference between the top line capital gains vs income tax rates, I generally agree but also understand the math does not.

You could reset realized long term capital gains taxes to match income tomorrow and it would not be a huge material difference in the budget. I am 100% for doing this anyways simply because it’s fucking absurd any professional W2 employee is paying more percentage in taxes vs someone who just happens to have idle cash at hand - but it’s more of a “social contract” thing for me than actual tax policy.

The issue really is tax deferral strategies and wealthy folks being able to consistently find strategies to roll over investment dollars into new investments without ever having their gains be subject to pretty much any tax. Stuff like stock buybacks, tax loss harvesting, 1031 exchanges etc.

I don’t think the “loans against a stock portfolio” tax dodge thing is nearly as large as social media decided to pretend it is - but I am very much in favor of taxing any realized value at regular capital gains rates at the time of realization. This means you will probably need to sell a bit of an asset to pay the taxes - which is the entire point.

Unrealized gains are tricky. I’ve been in a situation as a bootstrapped startup founder where I owed “phantom” tax on money I had not yet realized and ended up taking a loss on years later. Zero ability to recover those taxes paid. It put me into a hole for over half a decade. This gives huge preference to those with existing wealth and makes it even harder for someone with nothing to “come up” without handing out a majority share of their company/idea to idle capital. Especially if you’re just doing regular economy things to create a small business doing boring stuff at single digit net margins.
by olalonde | 2025-12-15 15:05:32+00:00
True, but the US has a long track record of pursuing both foreigners and citizens—through prosecutions, extraditions, sanctions, or asset seizures—often years later and regardless of nationality. In practical terms, the risk of being targeted by the US for breaking a law is far higher than being blackmailed by a foreign state like China. The consequences are asymmetric as well: blackmail usually amounts to little more than embarrassment, whereas being pursued by the US government can carry lengthy prison sentences or worse.

This is not to mention that the US also engages in data collection for coercion purposes.
Reverse-engineering ATS parsers (and getting banned from Reddit for it)
by lpipe | 2025-12-15 15:05:33+00:00
wasted about 2 months applying to jobs with a "modern" two-column resume design. got zero callbacks.

decided to write a script to see what the actual text-extraction layer sees when it reads my PDF.

the results were pretty bad:

Column Bleed: The parser was reading my "Skills" sidebar line-by-line along with my "Experience" section. It turned "React" into a middle name for my previous boss.

Icon Failure: The little email/phone icons I used instead of text labels resulted in null contact info fields.

i built a simple next.js wrapper to visualize the raw JSON output so i could "debug" my resume format. fixed the layout, parsed it again until the JSON was clean.

posted the findings and the tool on reddit yesterday. it hit 52k views and #1 trending in the sub. woke up today to a permanent account ban. apparently showing candidates the raw parsing data is "spam" or "manipulation."

anyway, if you want to check your own resume's parsing score, i kept the site up:

https://resumefy.pro

(it's paid now to cover the server bill, but the logic is simple: keep it single-column and avoid tables).
by tisdadd | 2025-12-15 15:05:39+00:00
I know we have older models for upstairs and down, and saw a newer one with camera at a thrift store. It could have been a different brand, but I saw camera facing up at about 30 degrees and thought to myself, nope. There are reports of it sending revealing pictures I read, and am quite happy that the bump and go ones keep down dust and fur overall. Most of my wifi gadgets have cameras not moving on their own.
by jcims | 2025-12-15 15:05:48+00:00
My brother does that exact work.

From what I’ve gathered the actual splicing is partly automated today and relatively straightforward if somewhat tedious. The big variable is the context. New construction should have relatively few variables.

With repair, everything goes out the window. I just talked to him last night and he was out on a cable cut repair all night Friday. Middle of a snowstorm, maps were not accurate, repair site was very difficult to work in.

To answer your actual question, the big barrier to adoption (in the US anyway) will be the CWA. :D
by cdurth | 2025-12-15 15:05:55+00:00
I feel that large corps have guard rails that will limit this from happening. For SMB's, this is not a new problem. Gritty IT guys have been doing this for decades. I inherit these bootstrapped reporting systems all the time. The issue is when that person leaves, it is no longer maintainable. I've yet to come across a customer who has had any sort of usable documentation. The process then repeats itself when I take over, and presumably when I'm finished. With a SaaS product, you are at least paying for some support and visibility of the processes. I'm not really trying to make a point other than this is not a new, but still intriguing problem, and not sure that LLMs will be some god answer, as the organizations have trouble determining what they even need.
by tialaramex | 2025-12-15 15:05:58+00:00
In 1995 what you describe isn't crazy. Who knows if this "Unicode" will go anywhere.

In 2005 it's rather old-fashioned. There's lots of 8859-1 and cp1252 out there but people aren't making so much of it, and Unicode aka 10646 is clearly the future.

In 2015 it's a done deal.

Here we are in 2025. Stop treating non-Unicode text as anything other than an aberration.

You don't need checks "for every string operation". You need a properly designed string type.
by ethbr1 | 2025-12-15 15:06:03+00:00
I think you're underestimating (1) how bad most B2B is (from a bug and security vulnerability perspective) & (2) how little B2B companies' engineers understand about how their customers are using their products.

The frequency of mind-bogglingly stupid 1+1=3 errors (where 1+1 is a specific well-known problem in a business domain and 3 is the known answer) cuts against your 'professional SaaS can do it better' argument.

And to be clear: I'm talking about 'outsourced dev to lowest-cost resources' B2B SaaS, not 'have a team of shit-hot developers' SaaS.

The former of which, sadly, comprises the bulk of the industry. Especially after PE acquisition of products.

Furthermore, I'm not convinced that coding LLMs + scanning aren't capable of surpassing the average developer in code security. Especially since it's a brute force problem: 'ensure there's no gap by meticulously checking each of 500 things.'

Auto code scanning for security hasn't been a significant area of investment because the benefits are nebulous. If you already must have human developers writing code, then why not have them also review it?

In contrast, scanning being a requirement to enabling fast-path citizen-developer LLM app creation changes the value proposition (and thus incentive to build good, quality products).

It's been mentioned in other threads, but Fire/Supabase-style 'bolt-on security-critical components' is the short term solution I'd expect to evolve. There's no reason from-scratch auth / object storage / RBAC needs to be built most of the time.
by wouldbecouldbe | 2025-12-15 15:06:11+00:00
Yeah I think the real values is for the Solo developers, indie hackers & side projects.

Being unrestrained by team protocols, communications, jira boards, product owners, grumpy seniors.

They can now deliver much more mature platforms, apps, consumer platforms without any form of funding. You can easily save months on the basics like multi tenant set up, tests, payment integration, mailing settings, etc.

It does seem likely that the software space is about to get even crowdier, but also much more feature rich.

There is of course also a wide array of dreamers & visionairies who know jump into the developer role. Wether or not they are able to fully run their own platform im not sure. I did see many posts asking for help at some point.
by mgoetzke | 2025-12-15 15:06:33+00:00
That depends a lot on many factors and thus I dont like generic statements like that which tend to be more focused on a specific database pattern. That said everyone should indeed be aware of the potential tradeoffs.

And of course we could come up with many ways to generate our own ids and make them unique, but we have the following requirements.

- It needs to be a string (because we allow composing them to 'derive' keys) - A client must be able to create them (not just a server) without risk for collisions - The time order of keys must not be guessable easily (as the id is often leaked via references which could 'betray' not just the existence of a document, but also its relative creation time wrt others). - It should be easy to document how any client can safely generate document ids.

The lookup performance is not really such a big deal for us. Where it is we can do a projection into a more simple format where applicable.
by aynyc | 2025-12-15 15:07:11+00:00
I've seen this type of advice a few times now. Now I'm not a database expert by any stretch of imagination, but I have yet to see UUID as primary key in any of the systems I've touched.

Are there valid reasons to use UUID (assuming correctly) for primary key? I know systems have incorrectly expose primary key to the public, but assuming that's not the concern. Why use UUID over big-int?
by SkyPuncher | 2025-12-15 15:07:36+00:00
This is absolutely not true.

A compromised laptop should always be treated as a fully compromised. However, you can take steps that drastically reduce the likelihood of bad things happening before you can react (e.g. disable accounts/rotate keys).

Further, you can take actions that inherently limit the ability for a compromise to actually cause impact. Not needing to actually store certain things on the machine is a great start.
Show HN: We need to define a new scale for measuring any software project
by donutloop | 2025-12-15 15:07:48+00:00
I am a software engineer with 15 years of experience, and this is the first time I feel the era of traditional software engineering and many desk jobs in general is starting to end. In the next 5 to 10 years, most desk based roles will likely disappear, except for jobs directly connected to AI.

I built this in under 8 hours using AI. I used Gemini 3 to see whether the marketing claim was real that you can build almost anything just by describing it. So far, I have not hit any serious blockers. I used vibe coding.

For the first time in my career, I have actually thought that I might be out of a job in ten years. Not because I lack skills, but because the tools are becoming incredibly powerful. With Gemini 3, I can build games in less than a day, and this feels like only the beginning.

Tools like Antigravity turn developers into managers of AI agents instead of people who write every line by hand. The old model of expensive custom work is fading. Software can now be produced at massive scale, faster and cheaper than ever before.

Gemini 3 feels like the start of a new era. What comes next will reshape how we work and likely society itself much sooner than most people expect.
by hallole | 2025-12-15 15:07:51+00:00
Remote jobs? In tech? In this job market? Credit where credit is due...

And, maybe I'm reading too far into it, but this line:

>With these roles, these individuals allegedly abused their access at the companies to steal virtual currency.

makes it sound like they were stealing Robux or something. Could money be laundered through re-selling video game currencies?
by lukew3 | 2025-12-15 15:08:12+00:00
https://wordcollector.netlify.app An offline dictionary in your browser. Dictionary is pulled from the open source wordnet dataset and cached in browser as a sqlite database. Installable as a PWA as well. Working on adding a study mode to review words that you’ve looked up in the past to help commit them to memory and adding synonyms and antonyms. Plans to add multiple languages in the future so you could use this as a language learning tool as well.
by sehansen | 2025-12-15 15:09:12+00:00
Minor nitpick:

The energy (electricity) they use to smelt aluminium mainly comes from hydropower, around 70% of it. The geothermal boreholes are mainly used for district heating, which is quite a big energy drain in Iceland. And that means that geothermal is the source of around 65% of the energy used in Iceland.
by moi2388 | 2025-12-15 15:09:17+00:00
Except that you have the technical know how to keep advancing, and have already been producing them before they hit market an have been reverse engineered.

Also a lot of research is already done at, or in cooperation of universities, or with research tax breaks.

Let alone the fact that a lot of patents are absolute bullshit. There are patents on UI elements, even black rubber handles with a hand grip. Not white ones, mind you. It’s insanity and stifles innovation.

But if patents and trademarks and copyright are so incredibly important for innovation, I guess that’s why stuff like math and theoretical physics has the lowest amount of innovation, right?
by hobs | 2025-12-15 15:09:54+00:00
Agree, as engineers we should be making the car easier to operate instead of making everyone a mechanic.

Focus on the simple iteration loop of "why is it so hard to understand things about our product?" maybe you cant fix it all today but climb that hill more instead of make your CEO spend some sleepless nights on a thing that you could probably build in 1/10th the time.

If you want to be a successful startup saas sw eng then engaging with the current and common business cases and being able to predict the standard cache of problems they're going to want solved turns you from "a guy" to "the guy".
by justin66 | 2025-12-15 15:10:00+00:00
For someone not inclined to dredge up all that data and do the calculations to factor in dividends, where can we take a look at it?

It's a bit of a miracle any technology company that old is still going after all these years. "Dismal" does not seem like an accurate way of characterizing it.

(for someone just taking a glance at the stock price chart, which doesn't take into account dividends, it looks like they were performing well financially until COVID?)
by SV_BubbleTime | 2025-12-15 15:10:06+00:00
100% nailed my current issue.

We need to get off of VMWare as the min license for us is now $15k pre year… from $3k. But the MSP knows the support for ProxMox isn’t there, and they have SLA contracts to uphold.

I’m going to have to HyperV which I expect to have the same issues as VMWare soon enough/someday.
by kkarpkkarp | 2025-12-15 15:10:16+00:00
honestly, if you are bootstrapping anything, you don't need saas now for the start

SaaS are swiss-army knife tools and you don't need all of this.

do you want to have a contact form on your site? Don't but the whole WP plugin for forms, ask AI for tiny, well-aligned plugin which will display form fields and process the input.

Do you need to A/B test your landing page? Just ask for another plugin which will switch page versions and track impressions.

No need for Hubspot when you have google sheets + AI-made plugin for this.
by alexspring | 2025-12-15 15:10:20+00:00
The only way you can block these "AI" scrapers is a combination of IP filtering (https://spur.us/) and Fingerprinting (https://abrahamjuliot.github.io/creepjs/).

Things like browserbase are easy to block with this. It's a losing battle though, personally moved entirely to real environments for https://browser.cash/developers
by jcims | 2025-12-15 15:10:37+00:00
Yep

https://en.wikipedia.org/wiki/Helicase

The wild thing is that it doesn't have a 'gas tank' of ATP to drive the reaction, it goes this fast while being fueled one molecule at a time from the environment.

Where does the ATP come from?

Buckle up my mechanical engineer friend - https://www.youtube.com/watch?v=OT5AXGS1aL8

I've watched that video a hundred times and it still gives me chills haha.
by stoccupied | 2025-12-15 15:10:39+00:00
I built a web app for DnD 5e who want a fast, lightweight tool for session prep and quick reference during games.

What it does: Search the free (2024) DnD SRD and pin things to your "DM screen" for quick access Create custom monsters, items, and rules Keep notes, lore, faction info, and NPC details organized Build encounters and rollable tables with linked stat blocks

Why I built it: Existing tools like Roll20 and D&D Beyond are powerful but feel bloated when you just need to prep and reference stuff at the table. I wanted something quick and easy.

Technical/privacy notes: No login, no account creation All data stored locally in the browser Export/import JSON for backups or sharing No ads Free (as long as hosting stays manageable)

Built because I wanted it for my own games and figured others might find it useful too. https://sessionprepped.com Would love feedback on UX, feature ideas, or anything else. Thanks for checking it out!
by officeplant | 2025-12-15 15:11:04+00:00
Yes[1], depending on the chromebook / chrometablet it will have varying levels of support for even swapping the firmware and running standard linux/BSD. Sometimes you will need to open up the laptop for a jumper/screw to adjust for enabling firmware flashing. Others its just turning on dev mode first.

[1]https://docs.mrchromebox.tech/docs/supported-devices.html
by lumost | 2025-12-15 15:11:22+00:00
There are core features of the state that we have collectively agreed must be provided - social safety (including police and safety nets), infrastructure, defense, core research funding and more.

The cost of providing the basic obligations and debt service of the U.S. amounts to roughly 1/3rd of the U.S. GDP, while taxation on any activity induces friction and higher costs - the bill will need to be paid either via capital markets or taxation. The investment in automation is no more important than food, or my children's education in my view.

Taxation is generally preferable for capital owners compared to currency debasement and forced debt purchases as it maintains boundaries on what the state can and cannot do. If the current trend is towards a greater share of the economy accruing to capital owners is maintained, then capital taxes will eventually need to rise to sustain state obligations.
by ellisv | 2025-12-15 15:11:33+00:00
About 10 years ago I remember seeing a number of posts saying "don't use int for ids!". Typically the reasons were things like "the id exposes the number of things in the database" and "if you have bad security then users can increment/decrement the id to get more data!". What I then observed was a bunch of developers rushing to use UUIDs for everything.

UUIDv7 looks really promising but I'm not likely to redo all of our tables to use it.
by meindnoch | 2025-12-15 15:11:43+00:00
Those are function pointers. Your parent was referring to the function type. Per ISO/IEC 9899:TC3:

A function type describes a function with specified return type. A function type is characterized by its return type and the number and types of its parameters. A function type is said to be derived from its return type, and if its return type is T , the function type is sometimes called ‘‘function returning T’’. The construction of a function type from a return type is called ‘‘function type derivation’’.
by n4r9 | 2025-12-15 15:11:52+00:00
I wonder if that was some inspiration for Iain M Banks' Culture series, in which citizens are able to change their sex at will over the course of about a year. Banks wrote specifically about what this signified for civilisation:

> A society in which it is so easy to change sex will rapidly find out if it is treating one gender better than the other; within the population, over time, there will gradually be greater and greater numbers of the sex it is more rewarding to be, and so pressure for change - within society rather than the individuals - will presumably therefore build up until some form of sexual equality and hence numerical parity is established.

http://www.vavatch.co.uk/books/banks/cultnote.htm
by NickC25 | 2025-12-15 15:12:11+00:00
>Over the long term it harms them

Yes, but not for the reasons you state. It harms them because we have an zero desire as a society to effectively combat inflation, which negates any benefits we can give people who receive the basic income.

The powers-that-be don't take action to make sure the people who get basic income can actually use it to improve their lives. Food prices rapidly inflate, education costs skyrocket, medical costs increase exponentially almost overnight.

Much like how the government backstopping student loans basically got university costs to jump, promising to give people a basic income while not addressing the root causes of inequality and wealth disparity just makes things worse.

If you want basic income to truly work, you have to engage in some activities in the short term that are inherently un-capitalistic, although if done correctly, actually improve capitalism as a whole for society. Price controls and freezes, slashing executive pay, increasing taxes on the wealthiest, etc.