MurphyA/hacker-news huggingface dataset:
by pseudohadamard | 2025-12-30 04:30:11+00:00
What you actually want doing crypto is a security engineer, not a cryptographer. To quote Shamir's Law, "cryptography is bypassed, not attacked". No-one ever attacks the crypto, they attack the way it's used, so you need an experienced cryptoplumber to set it up correctly, not a cryptographer who will design a mathematically elegant whatsit and announce "there, solved!".

Ideally, this person will also design the system that uses the crypto, because no matter how skilled the people on a standards committee might be their product will always be, at best, a baroque nightmare with near-infinite attack surface, at worst an unusable pile of crap. IPsec vs. Wireguard is a prime example, but there are many others.
by Gimpei | 2025-12-30 04:30:25+00:00
I think people need to chill out on this thread. LLMs are neither pure slop nor the end of the programming profession. They are immensely useful tools, particularly for tedious tasks or for quickly getting up to speed on a new API or syntax. They’re great for catching bugs too. Every now and again I’ll give an LLM a prompt and it will knock it out of the park, but that’s exceedingly rare. Most of the time, though, it just allows me to focus on the more interesting parts of my job. In short, for now at least, it is a big productivity booster, not a career ender.
by AnthonyMouse | 2025-12-30 04:30:35+00:00
Government pensions seem like the easy one. The state would be getting the revenue from when they spend the money, so they could use it to adjust the amount of the pension ("cost of living adjustment") and it would be revenue-neutral.

But also, government pensions tend to be, shall we say, unreasonably generous, because they live in that sour spot between "the legislature doesn't have to pay for this in the current year's budget" and "the union negotiates reasonable-seeming rules it knows it can game against public officials who are in their pocket or DGAF" e.g. pension is based on compensation in the last year before retirement and overtime is "awarded" based on seniority, so that people put in 80 hours of overtime every week in their last year. And then we're back to, aren't those the people we want to be taxing anyway?
by conductr | 2025-12-30 04:32:13+00:00
> Right now, though – I’m broke. Anyone need a website or IOT project built? I am AI assisted, very fast!

Oh wow, this author is tone deaf to the entire situation that is occurring in the world right now. I just had a conversation with my 70 year old Aunt (no tech skills) about AI and its impact on the labor market and I used the example of how for the first time ever I actually believe she could build her own iPhone app by just talking to her computer. This is an hypothetical app that would have cost her $10k-100k or more in the very recent past. I really think the market for the very services this author is selling is evaporating or at least on hold while everyone is at least trying to diy it with AI.
by reactordev | 2025-12-30 04:32:21+00:00
Oh I totally agree. More so I think the ability for AI to generate any kind of game you wish is in the not so distant future.

Dwarf Fortress has some wonderful world events and npc choice trees. For example in my biggest fortress, Ragnar was bored. Ragnar got really bored. Ragnar stared at a rock for almost 3 months game time. Then Ragnar got inspired so he ran over to the bowyer workstation, fetched a few gems and wood from the nearby piles, and started crafting a masterpiece crossbow. 6 months later, this thing comes out decked in jewels and gems, it’s got a +++ rating on the end. It’s wonderful. Then Ragnar loads a bolt. Pulls the trigger.
by owyn | 2025-12-30 04:33:39+00:00
Shadow of Mordor (and the sequel) had something called the "Nemesis" system where some of the Orc Captains you kill (and the ones who kill you) might survive off screen and get stronger and come back with scars and buffs and new nicknames. It didn't do the village/town stuff you are talking about. They talked about doing it in future games but never did.

Didn't find any good technical write-ups. Although apparently it's "patented".

Here's a decent video overview. I hate that everything is video now but this is the world we live in I suppose.

https://www.youtube.com/watch?v=3Fh5qc-ZnaM
by JumpCrisscross | 2025-12-30 04:33:40+00:00
> they’re talking about graduate degrees and academia as an occupation

PhDs have the lowest unemployment rate of any education bracket, and roughly match the earnings of professional-degree holders (e.g. MBAs) [1].

[1] https://www.bls.gov/careeroutlook/2025/data-on-display/educa...
by notepad0x90 | 2025-12-30 04:34:26+00:00
> IANAL, but this seems like a pretty strong stance to take? Who exactly are you blaming here?

It's a factually statement, unless you know of some information that indicates MongoDB was breached. I think you mistook "MongoDB" there to be the software instead of the company. They meant the company, their systems and infrastructure was not compromised.

> Interesting choice of words. I wonder if their SIEM/SOC discovered a compromise, or if someone detected a tweet.

I highly doubt that. it could be a crash someone noticed, a code audit, internal bug-bounty,etc.. either way I wouldn't ascribe to them deceit without proof, if it was an external source, give them the benefit of doubt that they'd have said so.

> It took 72 clock hours, assumably hundreds of man hours, to fix a malloc use after free and cstring null term bug? Maybe the user input field length part was a major design point??

You are familiar with things like SOC and SIEM, and you're confused by this? Are you familiar with Incident Response? The act of editing the code in a text editor and committing it to a branch isn't what took 72 hours.

> Boy this sure seems like a long time for a first communication for a guaranteed compromise if internet facing bug.

It does not, far from it.

> Not sure there's a security tool in the world that would stop data exfiltration via protocol error logs.

Maybe not prevent, but certainly detect and attempt to interdict/stop is certainly possible. That's what SIEMs do if they're adequately configured. But the drawback might be considerable volume of false hits. It might be better to simply reduce exposure to the internet, or remove it entirely. Just pointing out that, at least detection is possible, even with 0 days like this.
by SOLAR_FIELDS | 2025-12-30 04:34:41+00:00
This is a valuable lesson I learned when I worked with someone, not at Elastic, but who had previously worked at Elastic. Elastic was one of the original companies who made FOSS but with enterprise licensing work well. We were discussing in a meeting at this place we worked how to design license checking into the product.

What the guy said I found very insightful: he said that you don’t really need to spend a bunch of time and effort creating sophisticated license checks, you just need perhaps a single phone call to a server or something else that can be trivially defeated for anyone with a reasonable amount of technical knowledge. Why? Because the people who would defeat it are the kind of people who make horrible enterprise customers anyway. So in a way it’s just like a cheap lock. Won’t defeat anyone determined, because it’s not designed to. It’s designed to keep already honest people honest
Show HN: Cascade – AI agent that optimizes your ads across channels
by Kazza_cascade | 2025-12-30 04:34:42+00:00
We’re building Cascade, an AI-driven platform for in-house growth teams running multi-channel ads. It connects GA4 + ad platforms, explains what changed (and why), and proposes concrete actions like budget reallocation, pausing waste, and prioritizing next experiments—designed to close the loop from analysis to execution with approvals.

It’s not self-serve yet — if you want to try it, request a demo.
Would love feedback: where’s your biggest bottleneck today — analysis, decision-making, or execution?
by qubitcoder | 2025-12-30 04:35:29+00:00
There are many things wrong with this. I have an iPhone 17 Pro Max and use it to capture HEIF 48 and ProRAW images for Lightroom. There’s no doubt of the extraordinary capabilities of modern phone cameras. And there are camera applications that give you a sense of the sensor data captured, which only further illustrates the dazzling wizardly between sensor capture vs the image seen by laypeople.

That said, there is literally no comparison between the iPhone camera and the RAW photos captured on a modern full-frame mirrorless camera like my Nikon Z6III or Z9. I can’t mount a 180-600mm telephoto lens to an iPhone, or a 24-120mm, or use a teleconverter. Nor can I instantly swing an iPhone and capture a bird or aircraft flying by at high speed and instantly lock and track focus in 3D, capture 30 RAW images per second at 45MP (or 120 JPEGs per second), all while controlling aperture, shutter speed and ISO.

Physics is a thing. The large sensor size and lenses (that can make a Mac Studio seem cheap by comparison) serve a purpose. Try capturing even a remotely similar image on an iPhone in low light, and especially RAW, and you’ll be sitting there waiting seconds or more for a single image. Professional lenses can easily contain 25 individual lens elements that move in conjunction as groups for autofocus, zoom, motion stabilization, etc. They’re state-of-the-art modern marvels that make an iPhone’s subject detection pale by compare. Examples:
I can lock on immediately to a small bird’s eye 300 feet away with a square tracking the tiny eye precisely, and continue tracking. The same applies to pets, people, vehicles, and more with AI detection.

You can handhold a low-light shot at 1/15s to capture a waterfall with motion blur and continue shooting, with the camera optimizing the stabilization around the focus point—that’s the sensor and lens working in conjunction for real-time stabilization for standard shots, or “sports mode” for rapidly panning horizontally or vertically.

There’s a reason pro-grade cameras exist and people use them. See Simon D’entrement, Steve Perry, and many others on YouTube for examples.

For most people, it doesn’t matter. They can happily shoot still images and even amazingly high-quality video these days. But dismissing the differences is wildly misleading. These cameras require memory cards that cost half as much or more than the latest iPhone, and for good reason [1].

With everything, there are
trade offs. An iPhone fits in my pocket. A Nikon Z8 and 800mm lens and associated gear is a beast. Different tools, different job.

A modern lens, for comparison: https://www.nikonusa.com/p/nikkor-z-600mm-f63-vr-s/20122/ove...

[0] https://youtu.be/2yZEeYVouXs

[1] https://www.bhphotovideo.com/c/product/1887815-REG/delkin_de...
by senshan | 2025-12-30 04:37:45+00:00
Did you have to hire people? If so, why did you do that? Was it because you had "too much on your plate"? If so, did not hiring a good employee "make your life easier"? Was there another reason for doing that? (honest question)

Indeed, it was assumed that the manager is intelligent (per Carlo Cipolla). One would not take or stay in the job otherwise.

https://en.wikipedia.org/wiki/Carlo_M._Cipolla
by prawn | 2025-12-30 04:37:59+00:00
I rewatched it in recent weeks and enjoyed all the bits that I enjoyed years ago during the first watch. The stories I found a bit tedious first time (High Sparrow plotline, Arya and faceless men) weren't as miserable; I think I was expecting them to drag on even more. My biggest grievance on the rewatch was just how poorly it's all tied up. I again enjoyed The Long Night through the lens of 'spectacle over military documentary'. The last season just felt like they wrote themselves into a corner and didn't have time and patience to see it through. By that point, actors were ready to move on, etc.
by krackers | 2025-12-30 04:38:40+00:00
Before you can define statistical significance, you have to clearly define the success criteria. From what I see, remote viewing produces vague results, so some amount of human interpretation is necessarily. What counts as a "hit"? If you look at "verified" examples from the social-rv site GP mentioned, some of them match only in an abstract sense, but are still counted as a success. The more reliable thing would be to remote view a coin flip and have the person say heads or tails, but that's not how the stargate experiments were defined and I haven't been able to find any trials like this.

Edit: Actually I did find at least one experiment-ish, which is more precognition rather than remote viewing to determine crypto coin price trends [1]. Seems 53 correct predictions, 50 incorrect predictions which is well within statistical chance.

[1] https://reddit.com/r/remoteviewing/comments/lg6sf2/precognit...
Show HN: C/C++ source code graph RAG based on Clang/clangd
by artigent | 2025-12-30 04:39:44+00:00
Graph RAG for C/C++ Development

1. Overview

This project enables deep code analysis with Large Language Models. By constructing a Neo4j-based Graph RAG, it enables developers and AI agents to perform complex, multi-layered queries on C/C++ codebases that traditional search tools simply can't handle. With only 4 MCP APIs and a vanilla agent, it is already able to accomplish lots of tasks related to the codebases.

2. How it works

Using clangd and clang, the system parses and indices your source files to create a high-fidelity code graph. It captures everything from high-level folder structures to granular relationships, including entities like Folders, Files, Namespaces, Classes/Structs, Variables, Methods, etc.; relationships like: CALLS, INCLUDES, INHERITS, OVERRIDES, and more.

The system generates summaries and embeddings for every level of the codebase (from functions up to entire folders) using a bottom-up approach. This structured context helps AI agents understand the "big picture" without getting lost in the syntax.

To get you started easily, the project includes: an example MCP (Model Context Protocol) server, and a demonstration AI agent to showcase the graph’s power. You can easily build your own custom agents and servers on top of the graph RAG.

3. Efficiency & Performance

Incremental Updates: The system detects changes between commits and updates only what’s necessary.
Parallel Processing: Parsing and summary generation are distributed across worker processes with optimized data sharing.
Smart Caching: Results are cached to minimize redundant computations, saving you both time and LLM costs.

4. A benchmark: The Linux Kernel

When building a code graph for the Linux kernel (WSL2 release) on a workstation (12 cores, 64GB RAM), it takes about ~4 hours using 10 parallel worker processes, with peak memory usage at ~36GB. Note this process does not include the summary generation, and the total time may vary based on your LLM provider.
by ramoz | 2025-12-30 04:39:45+00:00
Part of my initial pitch was to automate linting. Interesting insight on the stop loop. Ive been wanting to explore that more. I think there is a lot to be gained also with llm-as-a-judge hooks (they do enable this today via `prompt` hooks).

Ive had a lot of fun with random/creative hooks use cases: https://github.com/backnotprop/plannotator

I dont think the team meant for the hooks to work with plan mode this way (its not fully complete with approve/allow payload), but it enabled me to build an interactive UX I really wanted.
by mrtksn | 2025-12-30 04:40:32+00:00
> Imagine building a house from scratch

Thats why those Engineering fields have strict rules and often require formal education and someone can even end up in prison if screw up good enough.

Software is so much easier and safer, till very recently anonymous engineering was the norm and people are very annoyed with Apple pushing for signing off the resulting product.

Highly paid software across the board must have been an anomaly that is ending now. Maybe in the future only those who code actually novel solutions or high risk software will be paid very well - just like engineers in the other fields.
by amber_raza | 2025-12-30 04:40:36+00:00
That is a fair critique. The frontier models are getting incredible at general reasoning.

The gap Evidex fills isn't 'Intelligence'. It is Provenance and Liability.

Strict Sourcing: Even advanced models can hallucinate a plausible-sounding study. Evidex constrains the model to answer only using the abstracts returned by the API. This reduces the risk of a 'creative' citation.

Explorer vs. Operator: You mentioned using AI as an 'explorer' (Patient use case). Doctors are usually 'operators'. They need to find the specific dosage or guideline quickly to close a chart.

I view this less as replacing Gemini/GPT. It is more of a 'Safety Wrapper' around them for a high-stakes environment.
by thedotmack | 2025-12-30 04:41:14+00:00
*Claude-Mem: Persistent memory for Cursor IDE*

Every Cursor session starts fresh—your AI forgets yesterday's work. Claude-mem fixes that by building cumulative knowledge about your codebase, decisions, and patterns.

*How it works:*
- Session hooks capture tool usage, file edits, shell commands
- AI extracts semantic summaries from observations
- Relevant context auto-injected into new sessions
- Local memory viewer at localhost:37777

*No paid subscription required.* Works with Gemini's free tier (1500 req/day) or OpenRouter.

```bash
git clone https://github.com/thedotmack/claude-mem.git
cd claude-mem && bun install && bun run build
bun run cursor:setup
```

The setup wizard detects your environment and configures everything.

GitHub: https://github.com/thedotmack/claude-mem
by mcphage | 2025-12-30 04:41:25+00:00
The trick is you hold the controller in your limp hands, with your fingertip resting on one of the channel buttons. Usually the plus. So when you want to swipe you just extend your index finger just a fraction of an inch. And the screen changes. They dialed in the interface over years, and have gotten it to a process with almost no work involved.
by KPGv2 | 2025-12-30 04:42:26+00:00
> Trust has eroded so much over the last two decades that most forums are either full of bots or full of annoyed and toxic people. It's very rare to find welcoming communities to newbies, and most of the ones I have discovered were offline connections.

Tumblr is still doing pretty well on that front. I'm there for a fandom, and it's a super positive atmosphere where everyone just wants to make and talk about cool art.
by adzm | 2025-12-30 04:42:35+00:00
> The soap opera effect is only a problem because no one is used to it. Higher FPS is objectively better.

But synthesizing these frames ends up with a higher frame rate but with the same shutter angle / motion blur of the original frame rate, which looks off to me. Same reason the shutter angle is adjusted for footage that is intended to be slow motion.
by astrange | 2025-12-30 04:42:46+00:00
Dynamic Contrast = Low is needed on LG TVs to actually enable HDR scene metadata or something weird like that. 60->120hz motion smoothing is also useful on OLEDs to prevent visual judder; you want either that or black frame insertion. I have no idea what Super Resolution actually does, it never seems to do anything.

Also, as a digital video expert I will allow you to leave motion smoothing on.
by KnuthIsGod | 2025-12-30 04:43:11+00:00
"In a regulatory filing today, L&F revealed that the contract’s value has been written down to just $7,386.

No, that is not a typo. $2.9 billion to roughly $7,400."

https://electrek.co/2025/12/29/tesla-4680-battery-supply-cha...
by qudat | 2025-12-30 04:43:21+00:00
I don’t really understand how you got that from my post. I can and do drop in to refactor or work on the interesting parts of a project. At every checkpoint where I require a review I can and do make medications by hand.

Are you complaining about code formatters or auto fix linters? What about codegen based on APIs specs? A code agent can do all of those and more. It can do all the boring parts while I get to focus on the interesting bits. It’s great.

Here’s another fantastic use case: have an agent gen the code, think about its prototype, delete, and then rewrite it. I did that on a project with huge success: https://github.com/neurosnap/zmx
by torstenvl | 2025-12-30 04:43:38+00:00
UB doesn't mean there will be nasal demons. It means there can be nasal demons, if the implementation says so. It means the language standard does not define a behavior. POSIX can still define the behavior. The implementation can still define the behavior.

Plenty of things are UB just because major implementations do things wildly differently. For example:

realloc(p, 0)

Having initialization be UB means that implementations where it's zero cost can initialize them to zero, or implementations designed for safety-critical systems can initialize them to zero, or what have you, without the standard forcing all implementations to do so.
by ofalkaed | 2025-12-30 04:44:16+00:00
I am not arguing about a 20 pixel slider, not even arguing, that was just a random number which works just as well as any other number to demonstrate the problem and why knobs have their place despite having their own problems. Shift clicking was also just an example, one of the many tricks you can use, which is why I said "shift clicking or the like."

Doing things like 6 pixels of movement on the screen equal 1 pixel on the slider can cause problems with display scaling and will mean if you have sliders near the edge of the screen you will not be able to use jump on click and even then can be a headache.

It is an interesting topic and far from solved.
by 8note | 2025-12-30 04:44:41+00:00
on the other hand, it does currently feel like when angular and react were starting to come out, and there was a billion different javascript libraries to learn with a new one coming out every couple weeks, and you arent quite sure what you should spend your time on and how much, vs now where you just learn react, and maybe extend to next.js

LLM forward development has a lot of things going on, and it really isn't clear yet what is going be the common standard in a few years time in terms of dev ux, async tools, ci/cd tools, in production and offline workflows, etc.

its an easy time to hop down a wrong path picking subpar tools or not experimenting further, but if you just wait, the people who try the right tools are going to be way ahead on making products for their customers.
by pfannkuchen | 2025-12-30 04:44:49+00:00
I think part of what is happening here is that different developers on HN have very different jobs and skill levels. If you are just writing a large volume of code over and over again to do the same sort of things, then LLMs probably could take your job. A lot of people have joined the industry over time, and it seems like the intelligence bar moved lower and lower over time, particularly for people churning out large volumes of boilerplate code. If you are doing relatively novel stuff, at least in the sense that your abstractions are novel and the shape of the abstraction set is different from the standard things that exist in tutorials etc online, then the LLM will probably not work well with your style.

So some people are panicking and they are probably right, and some other people are rolling their eyes and they are probably right too. I think the real risk is that dumping out loads of boilerplate becomes so cheap and reliable that people who can actually fluently design coherent abstractions are no longer as needed. I am skeptical this will happen though, as there doesn’t seem to be a way around the problem of the giant indigestible hairball (I.e as you have more and more boilerplate it becomes harder to remain coherent).
by AdieuToLogic | 2025-12-30 04:44:54+00:00
> ... if the LLM hits a wall it’s first inkling is not to step back and understand why the wall exists and then change course, its first inkling is ...

LLM's do not "understand why." They do not have an "inkling."

Claiming they do is anthropomorphizing a statistical token (text) document generator algorithm.