MurphyA/hacker-news huggingface dataset:
by embedding-shape | 2025-12-30 13:14:41+00:00
I've moved over mostly to uv too, using `uv pip` when needed but mostly sticking with `uv add`. But as soon as you start using `uv pip` you end up with all the drawbacks of `uv pip`, namely that whatever you pass after can affect earlier dependency resolutions too. Running `uv pip install dep-a` and then `... dep-b` isn't the same as `... dep-b` first and then `... dep-a`, or the same as `uv pip install dep-a dep-b` which coming from an environment that does proper dependency resolution and have workspaces, can be really confusing.

This is more of a pip issue than uv though, and `uv pip` is still preferable in my mind, but seems Python package management will forever be a mess, not even the bandaid uv can fix things like these.
by pseudohadamard | 2025-12-30 13:15:18+00:00
>RFC-9580 is basically everything that was rejected by the LibrePGP faction (GnuPG) in the last attempt to come up with a new standard.

That sentence is too long, it should read:

>RFC-9580 is basically everything

The RFC has every idea that anyone involved in its creation ever thought of tossed into it. It's over a hundred pages long and just keeps going and going and going. Want AEAD? We have three of them, two of which have essentially zero support in crypto libraries. PRFs? We've got four, and then five different ways to apply them to secret-key encryption. PKC algorithms? There's a dozen of them, some parameterized so there's up to half a dozen subtypes, including mystery ones like EdDSALegacy which seems to be identical to Ed25519 but gets treated differently. Compression algorithms? There are three you can choose from. You get the idea.

And then there's the Lovecraftian horror of the signature packets with their infinite subtypes and binding signatures and certification signatures and cross-signatures and revocation signatures and timestamp signatures and confirmation signatures and signature signatures and signature signature signatures and signature signature signature aarrgghhh I'm going insane!

The only way you can possibly work with this mess without losing your mind is to look at what { GPG, Sequioa } will accept and then implement a minimal intersection of the two, so you can talk to the two major implementations without ending up in a madhouse.
by mexicocitinluez | 2025-12-30 13:15:28+00:00
That's the exception. not the rule.

So yes, in "trick" plays you can't see the ball. But neither can the defense.

Having watched hockey AND US football my entire life, you can't compare the two. Totally different styles of sports and thus comparing your ability to see the 2 doesn't make sense.

to add: There has never been a football in history that had the ball going from one end of the field to the other and back. And yet, this happpens in hockey regularly and within seconds.
by throw310822 | 2025-12-30 13:15:51+00:00
> I mean, the realpolitik of these sanctions by the US is in hope that the USs involvement in Gaza doesn't get arrest warrants for their own officials

Yet another attempt at explaining how the US is really acting in its own self-interest even if the actual beneficiary is Israel.

So let me state it once again clearly: the beneficiary of this move is Israel. The political capital expended is American. The US works for Israel.
by cjbgkagh | 2025-12-30 13:16:35+00:00
Elon has done sufficiently impressive things which is why it’s sad that he has to make up a whole bunch of new things to try to impress people. Being the richest man alive is not enough he also has to be the best gamer as well. If he lies about small things that don’t matter then how could I trust him to tell the truth on important things that do matter.
by sokoloff | 2025-12-30 13:16:47+00:00
Isn’t this “healthy, large middle class” a reality that is less than 100 years old in the best of cases? (After a smaller initial emergence perhaps 100 years prior to that.) In 250K years since modern humans emerged, that’s a comparative blink of an eye.

There might be slight local dips along the timeline, but I think most Westerners (and maybe most people, but my lived experience is Western) would not willingly trade places with their same-percentile positioned selves from 100, 200, 500, 1000, 2000, 10K, 50K, or 250K years ago. The fact that few would choose to switch has to be viewed with some positive coefficient in a reasonable success metric.
by ben_w | 2025-12-30 13:17:14+00:00
For OOP, I'd say the issue isn't so much that it's not useful (it is very useful), but rather that it was treated as "common sense, the only way to do it".

Sometimes the right tool for the job is objects, sometimes it's functional, sometimes you do want encapsulation but it's better as structs and using composition over inheritance. When everything looks like a `class Hammer extends Tool`…
by esjeon | 2025-12-30 13:17:34+00:00
Expected a rant, got a life-pro-tip. Enough for a good happy new year.

That said, we can abuse the same trick for any languages that treats `//` as comment.

List of some practical(?) languages: C/C++, Java, JavaScript, Rust, Swift, Kotlin, ObjC, D, F#, GLSL/HLSL, Groovy

Personally, among those languages, GLSL sounds most interesting. A single-GLSL graphics demo is always inspiring. (Something like https://www.shadertoy.com/ )

Also, let’s not forget that we can do something similar using block comment(`/* … */`). An example in C:

/*/../usr/bin/env gcc "$0" "$@"; ./a.out; rm -vf a.out; exit; */

#include <stdio.h>

int main() { printf("Hello World!\n"); return 0; }
by notepad0x90 | 2025-12-30 13:18:29+00:00
> Do you expect it to take you a whole, dedicated month to fix 1 bug at a time?

Like I said, the bugfix is not what takes long. They have to figure out the extent of the vulnerability, do regression testing, make sure they don't introduce more issues. And _then_ they can begin sending embargo notifications, let their customers prep, patch,etc... while in parallel they do analysis of in-the-wild exploitation. They have to support all the paying customers that are panicking and want answers. You're not the only one scrutinizing every word they say and demanding answers. They talked to lawyers plenty during that time. If you know legal admission of guilt is one of the things included, then you should know they're publicly traded and SOX plus section 8 filings are a huge deal. Their CISO could literally end up in prison if he screws this up. So yeah, it takes a couple of days. They have to have outside parties (likely) support their response, even without that, "who did what", "what was affected", "how was it abused", "how can it be prevented" , all of that needs to be answered, and then there is lots of back on forth on the specifics of the wording to the public/PR, what to tell investors, customers, etc...

> This is a bit of a no true Scotsman.

There are different detection strategies possible. Your approach could be done, when an error message that hasn't been seen previously suddently shows up, it could be flagged for follow-up investigations, contact mongo support,etc.. that's not what I meant though, you mentioned exfil, abnormal data transfers from 'mongod' could be caught is what I meant. Most moderns SIEMS do this out of the box if you feed them right and well.
by mrexcess | 2025-12-30 13:18:33+00:00
>Their point still stands: neither Israel nor the USA recognize the authority of the ICC

Many others have already pointed out the fact here - that Palestine is under ICC jurisdiction.

Instead what I want to focus on is WHY YOU DID NOT KNOW THIS, despite the fact that the ICC literally ruled on this matter quite a while ago, specifically. The court itself approached this question, evaluated the evidence, and made a ruling. You missed all that?
by embedding-shape | 2025-12-30 13:19:18+00:00
More importantly, the bilateral relationship between the US and Europe represents 30% of global trade, and 40% of the global GDP. Both economies complement each other naturally (at least right now), and neither partners don't want it to end, so even with the relationship becoming more fragile as the US tries to close itself off from the world, I think both will still try to remain collaborative with each other, regardless of this posturing that is going on.
by christinetyip | 2025-12-30 13:20:17+00:00
You’re right that reading the same markdown file is trivial, that’s not the hard part.

Where it stopped being trivial for us was once multiple agents were working at the same time. For example, one agent is deciding on an architecture while another is already generating code. A constraint changes mid-way. With a flat file, both agents can read it, but you’re relying on humans as the coordination layer: deciding which docs are authoritative, when plans are superseded, which tickets are still valid, and how context should be scoped for a given agent.

This gets harder once context is shared across tools or collaborators’ agents. You start running into questions like who can read vs. update which parts of context, how to share only relevant decisions, how agents discover what matters without scanning a growing pile of files, and how updates propagate without state drifting apart.

You can build conventions around this with files, and for many workflows that works well. But once multiple agents are updating state asynchronously, the complexity shifts from storage to coordination. That boundary - sharing and coordinating evolving context across many agents and tools — is what we’re focused on and what an external memory network can solve.

If you’ve found ways to push that boundary further with files alone, I’d genuinely be curious - this still feels like an open design space.
by tomjuggler | 2025-12-30 13:20:39+00:00
We are on Google Maps. Many 5* ratings (apart from that one psycho neighbour who objected to me asking him to turn his base down - they left one night without paying their rent and a week later my business has 1* review. urrgh 10 years and I'm still annoyed)

Instagram has apparently got hyper specific location targeting, so we are doing an ad on there now.
by sjsdaiuasgdia | 2025-12-30 13:20:46+00:00
Cheaper yes, but the entry level for BT is still pretty accessible. Using Google Shopping, the lowest priced match for "wired earbuds" is $1.47. The lowest priced match for "bluetooth earbuds" is $2.46. In both cases, you hit a breakpoint of "this looks like it might possibly work for more than a few seconds" around $10.

The battery point is valid. Funnily enough, the last pair of earbuds I lost was a wired one. Myself, most of my headsets are over-ear, so they're a bit large to be easily lost. The form factor likely determines the loss potential more than the presence/lack of a wire.
by embedding-shape | 2025-12-30 13:20:52+00:00
I kind of feel like if one of the superpowers always been against international law although trying to enforce it on others, and not really wanting to participate in ICC in any shape of form, already made the whole idea dead in the water.

Lots of people realize the importance of this, but if the country who plays world police doesn't want to collaborate on making it reality and they literally still perform violent actions against other sovereign states without repercussions, what is the purpose?
Show HN: I built a zero-log PII redaction API – no AI, just regex and checksums
by Raviteja_ | 2025-12-30 13:21:01+00:00
Hi HN,

I built PII Firewall because I got tired of watching "privacy" APIs secretly pipe user data to cloud AI models. If you're using GPT/Claude to redact PII, you're literally giving the AI your PII.

What makes this different:

- Zero AI – deterministic regex + 30 checksum validators (Luhn, Verhoeff, Mod 11/97)
- Zero storage – processes on Cloudflare edge, no logs, no persistence
- 152 PII types – SSN, Aadhaar, 50+ country IDs, 20 API key formats, crypto wallets
- Two modes: `/fast` (2-5ms) for structured PII, `/deep` (5-15ms) adds names/addresses via 2000+ name gazetteer

The technical approach:

Instead of ML inference, I use combined V8-optimized regex with heuristic pre-scanning. Clean text (90% of requests) skips pattern matching entirely. For IDs that require it, I implemented full checksum validation:

- Credit cards: Luhn
- Indian Aadhaar: Verhoeff
- Chinese ID: ISO 7064 Mod 11
- Brazilian CPF/CNPJ: Dual Mod 11
- IBAN: Mod 97

Runs on Cloudflare Workers (pure JS, no WASM), so no cold starts.

Why I'm sharing:

Enterprise PII solutions cost $50K+/year. I wanted to make this accessible to indie devs, startups, and anyone building AI features who doesn't want to become a data liability. The $5/mo tier covers most use cases.

Would love feedback on the detection coverage or edge cases I might be missing.
by deaux | 2025-12-30 13:21:53+00:00
I know. Parent, along with the reply, also said that women as a result are much less active online, but that's a belief caused by a lack of grass touching.

> "I know nobody that comments on online forums. Nobody would ever comment to strangers on the internet. It's too dangerous."

> Most of her friends are probably women

-> "Women don't comment on the internet (especially compared to men) because it's a hostile place".
by throwaway290 | 2025-12-30 13:22:09+00:00
No, my point is that

> Nor have I heard anyone being sanctioned by the US in the EU unless they're Russia-related somehow

means you heard of ppl are arbitrarily sanctioned unless there is a specific criteria for what means Russia related

Remember you were replying to

> We are rapidly losing our freedoms to the will of these companies. If they decide they don't want to they can even if the law doesn't forbid it.

I asked some questions to see how solid your reply was. seems not very. you basically say nah, no one is losing freedom, people are only sanctioned if they fit... something very vague;)
by Raviteja_ | 2025-12-30 13:22:27+00:00
Quick technical notes for HN:

Why no AI?

The irony of sending PII to an AI model to detect PII is lost on most "privacy" APIs. This is pure algorithmic detection – the same approach your credit card company uses to validate card numbers.

What's validated (not just pattern-matched):
- Credit cards → Luhn checksum
- Aadhaar → Verhoeff (the algorithm that catches single-digit and transposition errors)
- IBAN → Mod 97 (same as banks use)
- Singapore NRIC → Mod 11 with offset
- Brazilian CPF → Dual Mod 11

Latency breakdown:
- Heuristic scan: O(n) single pass for trigger characters (@, -, digits)
- Pattern matching: Only runs if triggers found
- Validation: Only on pattern matches
- Total: 2-5ms for /fast, 5-15ms for /deep

False positive mitigation:
- "Order ID: 123-45-6789" won't trigger SSN (negative context)
- Timestamps won't match phone patterns (separator requirements)
- Random 16-digit numbers won't trigger credit card (Luhn must pass)
by sod22 | 2025-12-30 13:22:37+00:00
Who cares about semantics.

Ultimately it all boils down to the money - show me the money. OAI have to show money and so do its customers from using this tool.

But nope, the only thing out there where it matters is hype. Nobody is on an earnings call clearly showing how they had a numerical jump in operating efficiency.

Until I see that, this technology has a dated shelf life and only those who already generate immense cash flows will fund its continued existence given the unfavourable economics of continued reinvestment where competition is never-ending.
by oersted | 2025-12-30 13:23:09+00:00
This doesn't make sense to me, our current prosperity is founded on an enormous mountain of collaboration and shared beliefs. Usually not out of selflessness of course, often guided and forced by strong leadership and/or strong institutional structures to bend selfishness into selflessness (like capitalism to a degree).

Poor countries tend to stay poor not due to fundamental resource constraints but due to self-reinforcing loops of desperate crab-bucket like behavior, where everyone is cheating one another out of necessity (or culture). Broad collaboration and institution building is always the only way out of the hole, although the hole can be very deep and collaboration can be very costly until you get out.

You are right though, that for an individual living in a good collaborative system, often cheating is very effective, it's just that the system can only handle a certain amount of that behavior before it collapses.

As is discussed in the first scene of Plato's The Republic (surprisingly entertaining to modern tastes), the best play tends to be "to be unjust while seeming just". If people are going to be assholes, it is actually much better if they are discrete about it and keep a pretense of civilization. When people start acting conspicuously like assholes, out of a weird sense of honesty, that's when it propagates and the whole thing collapses, like a bank-run. It's an ancient story that we are still living.
by xg15 | 2025-12-30 13:23:39+00:00
Have to disagree, "technically" yes, both are interpreted languages, but the ergonomics and mental overhead of doing certain things are wildly different:

In python, doing math or complex string or collection operations is usually a simple oneliner, but calling shell commands or other OS processes requires fiddling with the subprocess module, writing ad-hoc streaming loops, etc - don't even start with piping several commands together.

Bash is the opposite: As long as your task can be structured as a series of shell commands, it absolutely shines - but as soon as you require custom data manipulation in any form, you'll run into awkward edge cases and arbitrary restrictions - even for things that are absolutely basic in other languages.
by ben_w | 2025-12-30 13:24:18+00:00
It will take a lot to shift that trade dynamic, but the current US administration seems quite energetic about rapidly tearing down Chesterton's Fences that it doesn't understand nor want to spend the time to understand, so I'd not bet on this remaining so even for the next 3 years.

And yes, I do understand how utterly bonkers it is to suggest something this big changing over just 3 years.
by mft_ | 2025-12-30 13:24:40+00:00
Nah, I think the point is that if you do something deliberately in public, be it social media or something tangible in the real world, you relinquish control over its usage.

If you don’t like this, then you can either try to restrict things to an extent e.g. by obscurity, like posting a YouTube video as unlisted, or building your fireplace somewhere public but remote or hidden, or you keep things enforceably private, like a private online group, or building on someone’s land.
by megous | 2025-12-30 13:25:05+00:00
Might does not make right. Might just means you’re holding the biggest stick, not that you have the faintest clue how to use it responsibly. Power sustained purely by bullshit, as it is these days in USA, eventually drowns in it. I'm not looking forward to it happening, but when it does, I'm sure to at least get some satisfaction out of watching the scum drowning.
by meindnoch | 2025-12-30 13:27:02+00:00
Ok, but have you tried claude-sonnet-GPT-codex-4.5-thinking-fast? That's the game changer. Anyone saying bad things about vibe coding without trying claude-sonnet-GPT-codex-4.5-thinking-fast is like a dinosaur to me, doomed to extinction. Seriously, give claude-sonnet-GPT-codex-4.5-thinking-fast a try, you'll thank me ;)
by badsectoracula | 2025-12-30 13:27:55+00:00
> If someone thinks they can make high production value games without DRM I hope they try and succeed.

CD Projekt RED did exactly that with both Witcher 3 and Cyberpunk 2077, which were available on GOG day #1 (and the Steam version did not have any DRM whatsoever) and while the latter had a rough start because of technical issues, they both sold very well and were positively received (after some patches for CP2077 anyway).

GOG also releases many new high production value games on day #1 too, e.g. Expedition 33 (which won a crapton of awards in recent times) was released on it the same day as on Steam. Baldur's Gate 3 was also on GOG on release date as is Tainted Grail: The Fall of Avalon right now, which also seems to be a high production value game with relatively well reception.

The only games missing are those by companies whose business models rely on sucking out gamers' wallets dry with microtransactions (so they need the "protection" from their own customers that DRM provides) or companies that have people making decisions based on assumptions stuck in past decades.
by svara | 2025-12-30 13:28:23+00:00
Cooperation has been "invented" in evolution many times independently and is long term stable in many species.

If your comment was true that fact wouldn't exist.

We may consider the world we live in today competitive, but at the end of the day, humanity is a globe spanning machine that exists due to cooperative behavior at all scales.

Comments such as yours are really missing the forest for the trees.

I suspect that it's really the fact that cooperation is so powerful and pervasive that makes it normal to the point where any deviation from it feels outrageous.

So you focus on the outrageous due to availability bias (seeing the trees rather than the forest).
by Kim_Bruning | 2025-12-30 13:28:33+00:00
Can you be more specific? Which individuals and why (not)?

Note that eg if you're from (picking two random countries) Nepal and commit a crime in Italy, then Italy still has jurisdiction. Italian police can arrest you. [1]

Also, there's certain crimes that any country is allowed to arrest you for, for instance piracy on the high seas.

[1] Also explicitly taken into account in the Rome statue 12(2)(a) https://legal.un.org/icc/statute/99_corr/cstatute.htm
Show HN: Terminalot – A local-first, open-core SSH terminal with AI copilot
by linkeli | 2025-12-30 13:29:01+00:00
Hi HN,

I built Terminalot, a local-first SSH terminal that runs entirely on your own infrastructure (Docker) and connects to real Linux servers.

The goal was to make an AI-assisted terminal that infra people can actually trust:
- every command is shown and requires explicit approval
- no hidden execution
- no mandatory cloud backend
- all security-critical logic is open and auditable

It’s open-core. The free version is fully functional; paid licensing only unlocks higher limits (e.g. saved connections). You can inspect or modify everything.

Quick start:
docker run -p 3001:3001 linkeliai/terminalot:latest-beta

Repo: https://github.com/linkeli-labs/terminalot

This is the first public beta. I’d really appreciate feedback, especially around security assumptions, UX, and deployment expectations.
by locknitpicker | 2025-12-30 13:29:08+00:00
> Huh? You think starlink is funding space-x?

In the last year alone, around 2/3 of space X's revenue was directly tied to starlink launches.

> If they lost all government and private launch business tomorrow and had to rely on Stalink revenues to stay in business they wouldn’t last through next month.

That's kind of the problem.
by jvanderbot | 2025-12-30 13:29:45+00:00
And honestly this is precisely why I don't fear unemployment, but I do fear less employment overall. I can learn and get better and use LLMs as a tool. So there's still a "me" there steering. Eventually this might not be the case. But if automating things has taught me anything, it's that removing the person is usually such a long tail cost that it's cheaper to keep someone in the loop.

But is this like steel production or piloting (few highly trained experts are in the loop) or more like warehouse work (lots of automation removed any skills like driving or inventory work etc).
by dtagames | 2025-12-30 13:30:26+00:00
This makes sense if you think of chatbots as "faster books," or books plus a TikTok algo. Every kind of BS ever written is already in the training data. No one culled out falsehoods or "bad data." Since the tool is trained to respond precisely to your prompts, the algo feeding you (truth or) BS is laser focused and highly effective.