MurphyA/hacker-news huggingface dataset:
by johnnyanmac | 2025-12-20 21:48:51+00:00
>At any time any company could turn evil, and any free(ish) government could become totalitarian overnight. This is a fact, but also pretty useless one.

Is it isrlsss paranoia when it's happening around us as we speak?

It's strange how we call it "preparation" to spend trillions of dollars on mobilizing a military, but "paranoia" to simply take some best practices and not have the citizen's data dangling around. Its a much cheaper aspect with huge results, like much of tech.

I live in a good neighborhood and I have left my door unlocked once or twice to no consequence. That doesn't mean it's paranoia to make a habit out of locking my doors.

That's all I assert here. Care and effort. I don't know all the subtle steps to take since I'm not in cybersecurit, but we still shouldn't excuse sloppiness.
by johnwheeler | 2025-12-20 21:48:54+00:00
Thank you for your response. This is exactly the type of commentary I'm talking about. The key phrase is "at the moment." It's not that developers will be replaced, but there will be far less need for developers, is what I think.

I think the flaws are going to be solved for, and if that happens, what do you think? I do believe there needs to be a human in the loop, but I don't think there needs to be humans, plural. Eventually.

I believe this is denial. The statement that the best AI can't be reliable enough to do a modest refactoring is not correct. Yes, it can. What it currently cannot do is write a full app from start to finish, but they're working on longer task execution. And this is before any of the big data centers have even been built. What happens then? You get the naysayers that say, "Well, the scaling laws don't apply," but there's a lot of people who think they do apply.
by erulabs | 2025-12-20 21:49:45+00:00
Well sure you still have 2 or 3 infra people but now you don’t need 15. Comparing to modern Hetzner is also not fair to “cloud” in the sense that click-and-get-server didn’t exist until cloud providers popped up. That was initially the whole point. If bare metal behind an API existed in 2009 the whole industry would look very different. Contingencies Rule Everything Around Me.
by tptacek | 2025-12-20 21:50:05+00:00
I don't follow? I didn't flag you; you were remarking on a previous comment alleging shillage from 'antirez, and I'm pointing out that the behavior you say is "downvoted" is actually a black-letter guideline violation. People flag those posts.

Another one, though:

Please don't comment about the voting on comments. It never does any good, and it makes boring reading.
by skillcreator | 2025-12-20 21:50:34+00:00
Alot of the major coding assistants now support "skills" (instruction files that customize behavior), but they're scattered everywhere and each agent uses different directories.This implements the open Agent Skills standard(agentskills.io). We built a universal installer with the most popular claude skills that you can now install into any agent directly

via

npx ai-agent-skills install frontend-design --agent --Codex (cursor, amp etc)

Looking for feedback on this, anything we can do to improve it
by cm2012 | 2025-12-20 21:50:53+00:00
Can you post your social security number and other personal info here then? You will still have it afterwards!

Oh also, I don't see why I should ever pay for trains or movie tickets if there are seats available. I can just walk in! The event will happen anyway. Its not stealing.

Everyone should just download all art, music and literature for free. Musicians, artists and writers can all make money some other way while I enjoy the works of their efforts.
by chrneu | 2025-12-20 21:50:58+00:00
>We just don’t have those kinds of communities for music online anymore

They're still kind of around, but yeah, everything is very much on it's way out in the music scene, at least in terms of that late 90s early 00s culture. Or has been until recently. There is a renewed interest in self-hosting and "offline" style music collections.

It sucks too. The way folks discover music is important. The convenience of streaming has lead to some interesting outcomes. When self-hosting music comes up this is always one of the top questions people have: How do you find new music?

The answer isn't that hard and really hasn't changed much. People just don't want to spend any time or effort doing it. Music stores still exist, they're amazing. Lots of 2nd hand stores carry vinyl and CDs now, which can give you great ideas for new music. There are self-hosted AI solutions and tools. Last.fm and Scrobbling are still very much around. My scrobble history is so insanely useful. There are music discords. Friends. Asking people what they're listening to in public. Live shows with unique openers(I once went to a Ben Kweller show with 4 opening bands, I still listen to 3 of them.)
by Jaygles | 2025-12-20 21:51:09+00:00
> No one ever forced any company to work with China.

"Forced" is a strong word here, but company's do need to compete or die. If your competitors are manufacturing in China and selling widgets at a price less than what an American factory can produce them for, what choices do they realistically have?

To expect merchants to get together and act according to some greater good is a pipe dream. Government should have stepped in and prevented the offshoring of American industry through policy
by mike_d | 2025-12-20 21:52:10+00:00
This is a lot of basically sharpshooting, but I will address your last point:

> There was no way to move from 32-bits to >32-bits without every network stack of every device element (host, gateway, firewall, application, etc) getting new code. Anything that changed the type and size of sockaddr->sa_family (plus things like new DNS resource record types: A is 32-bit only; see addrinfo->ai_family) would require new code.

That is simply not true. We had one bit left (the reserved/"evil" bit) in IPv4 headers that could have been used to flag that the first N bytes of the payload were an additional IPv4.1 header indicating additional routing information. Packets would continue to transit existing networks and "4.1" capable boxes at edges could read the additional information to make further routing decisions inside of a network. It would have effectively used IPv4 as the core transport network and each connected network (think ASN) having a handful of routed /32s.

Overlay networks are widely deployed and have very minor technical issues.

But that would have only addressed the numbering exhaustion issues. Engineers often get caught in the "well if I am changing this code anyway" trap.
by api | 2025-12-20 21:52:13+00:00
This is a major reason the cloud commands such a premium. It’s a way to make down time someone else’s problem.

The other factor is eliminating the “one guy who knows X” problem in IT. What happens if that person leaves or you have to let them go? But with managed infrastructure there’s a pool of people who know how to write terraform or click buttons and manage it and those are more interchangeable than someone’s DIY deployment. Worst case the cloud provider might sell you premium support and help. Might be expensive but you’re not down.

Lastly, there’s been an exodus of talent from IT. The problem is that anyone really good can become a coder and make more. So finding IT people at a reasonable cost who know how to really troubleshoot and root cause stuff and engineer good systems is very hard. The good ones command more of a programmer salary which makes the gap with cloud costs much smaller. Might as well just go managed cloud.
by yurishimo | 2025-12-20 21:52:41+00:00
C# I don’t believe was/is a common tuning for most western instruments, classical or modern.

A digital piano can transpose things to make it “easier” to play.

Cursory google search says that a sitar is traditionally tuned to something useful for c#

I’m curious if C# is one of those notes that lines up nicely with whatever crappy consumer stereos/subs were capable of reasonable reproducing in the 90s as electronic music was taking off and it stuck around as a tribal knowledge for getting more “oomph” out of your tracks.
by johnwheeler | 2025-12-20 21:52:56+00:00
I guess the main thing people aren't taking into account from what I see is that the models are substantially improving. Claude Opus 4.5 is markedly better than Claude Sonnet 3.7. If the jump to version 5 represents such a leap, I see it is game over, pretty much. You'll just need one person to manage all your systems or the subsystems, if the entire system is extremely large. And then I can't think past that. I don't know how long it is before AI replaces that central orchestrator and takes the human out of the loop, or if it ever does, that's what they seem to want it to do.

Anyway, I appreciate the response. I don't know how old you are, but I'm kind of old. And I've noticed that I've become much more cynical and pessimistic, not necessarily for any good reasons. So maybe it's just that.
by analog31 | 2025-12-20 21:53:17+00:00
My expectation (well, maybe my hope) is that the Arduino community will diverge from the Arduino business and become self sustaining.

Arguably, the cloud based development environment may have been a good idea, especially since a lot of students are stuck with locked down Chromebooks that can't install the toolchain locally. And I lack the expertise to speculate about this, but it would seem to me that if an entire Python toolchain can run in a web app (e.g., Jupyter Lite), then maybe an embedded dev environment could be make to work in a similar way.
by WarOnPrivacy | 2025-12-20 21:53:51+00:00
> especially as it seems everything is 2001::/16

I was sort of expecting that this week.

I had to transcribe a v6 addy for a WAN-WAN test (a few mi apart).

That's when I noticed that Charter (Spectrum) had issued

2603:: for one WAN and 2602:: for the other WAN.

ref: https://bgp.he.net/AS33363#_prefixes6
by bongodongobob | 2025-12-20 21:54:02+00:00
I had a negative view of MS when I was young. Then I got jobs at large orgs managing IT for 1000s of people. I don't know how else you'd do it without the Microsoft stack. I'm not saying you can't, but good luck managing whatever custom ball of knots you manage to come up with and also finding people to work on it for you. If you think open office and some kind of custom IAM solution will work, you just don't have the experience to have an opinion on it, IMHO.
by Tazerenix | 2025-12-20 21:54:36+00:00
Something the computer scientists of Hackernews might not realise is that most mathematicians are by nature Platonists, even if they would not try to defend that position when pressed.

most mathematicians act as though they are Platonists, even though, if pressed to defend the position carefully, they may retreat to formalism https://en.wikipedia.org/wiki/Mathematical_Platonism

Mathematicians begrudgingly retreat to formalism and foundations when pressed because its easier to defend, but the day-to-day of contemporary mathematics is much more an explorative process of a "real" mathematical landscape. They aren't concerned with foundations because it "feels" self-evident that the mathematics they are discovering is true (because their means of discovery, rigour and proof, "guarantee" it to be so).

A lot of the comments here are making false assumptions like "but surely mathematicians all know that their field is ultimately justified as a symbol-pushing game from some axiomatic system right?" in the same way one might say "surely all computer scientists know that every language ultimately compiles down to 1s and 0s processed by a CPU" but that is not at all how most mathematicians think about doing mathematics.
by einr | 2025-12-20 21:55:02+00:00
It's both. Musicians and music nerds buy CDs and LPs and tapes and Bandcamp files and they "pirate" music both because they care about ownership and quality and rare or substantially different editions of records that aren't available legally, and because they've seen the sausage factory from the inside and know that "stealing" $0.02 from an artist who's starving like them anyway isn't really that far up on the list of heinous crimes. Buy the shirt, download the album. No one cares.
by p0w3n3d | 2025-12-20 21:55:11+00:00
This is something really important, especially in the days when music and film vanishes from platforms one by one. I myself have three playlists with greyed out titles (titles are missing so there's no possibility for me to find out what was there).

That's why I divide music to the one that I want to have forever - I buy it on CDs - and dance music that I can live without one day
by mtone | 2025-12-20 21:56:08+00:00
> if you could exclude all of the R&D and training costs

LLMs have a short shelf-life. They don't know anything past the day they're trained. It's possible to feed or fine-tune them a bit of updated data but its world knowledge and views are firmly stuck in the past. It's not just news - they'll also trip up on new syntax introduced in the latest version of a programming language.

They could save on R&D but I expect training costs will be recurring regardless of advancements in capability.
by api | 2025-12-20 21:56:20+00:00
Yes, I forgot about SLAAC and worthless privacy extensions.

Privacy extensions are worthless because there are just sooooo many ways to fingerprint and track you. If you are not at least using a VPN and a jailed privacy mode browser at a bare minimum, you are toast. If you’re serious about privacy you have to use stuff like Tor.

V6 privacy extensions are like the GDPR cookie nonsense: ineffective countermeasures with annoying side effects.

SLAAC sucks too. They should have left assignment up to admins or higher level protocols like with V4. It’s better that way.
by wiml | 2025-12-20 21:56:31+00:00
Okay, that was insensitive of me.

But yes, what you say is the logical consequence (except I'm not kidding about grief and impatience).

My point really is that if we want our kids not to get horribly injured or killed, we can't just focus on "other people" making bad decisions like driving drunk. We have to acknowledge that we've collectively built a system that requires people to put each other in danger with cars, and we have to think about how to change that. Cars bring a lot of benefits like autonomy and decentralization, how do we keep that but kill fewer people?
by popalchemist | 2025-12-20 21:56:51+00:00
This is simply not true. Your heuristic is broken.

The recent Gemma 3 models, which are produced by Google (a little startup - heard of em?) outperform the last several OpenAI releases.

Closed does not necessarily mean better. Plus the local ones can be finetuned to whatever use case you may have, won't have any inputs blocked by censorship functionality, and you can optimize them by distilling to whatever spec you need.

Anyway all that is extraneous detail - the important thing is to decouple "open" and "small" from "worse" in your mind. The most recent Gemma 3 model specifically is incredible, and it makes sense, given that Google has access to many times more data than OpenAI for training (something like a factor of 10 at least). Which is of course a very straightforward idea to wrap your head around, Google was scrapign the internet for decades before OpenAI even entered the scene.

So just because their Gemma model is released in an open-source (open weights) way, doesn't mean it should be discounted. There's no magic voodoo happening behind the scenes at OpenAI or Anthropic; the models are essentially of the same type. But Google releases theirs to undercut the profitability of their competitors.
by chrneu | 2025-12-20 21:57:55+00:00
think popcorn time for mp3s/flac instead of mp4.

a client can selectively list and then stream individual files from a huge torrent. if you've ever watched illegal movies/shows on those random domain websites, you're likely streaming it from a torrent on the backend somewhere.

it wouldn't surprise me if we start to see some docker images pop up in a few days to do exactly this as a sort of "quasi-self-hosted jellyfin". Where a person host a thin client on a machine that then fetches the data from the torrent, then allows the user to "select" their library. A user can just select "Top hits from the 80s" and it'll grab those files from the torrent, then stream or back them up.

I don't really see why it wouldn't, from an end user perspective, be any different than a self hosted jellyfin or plexamp.
by manuelmoreale | 2025-12-20 21:58:07+00:00
That’s a fun math. I just checked mine: 96000 minutes. 2 minutes per song is way too generous as an assumption, for me everything seems to be > 3 minutes so ~20000 streams.

I’m paying for a family account (that’s around 250/year) and there are 5 people on it so my usage is 1/5th of that (50/year)

So that’s 0.0025€ per stream. I don’t think your assumption is unreasonable.
Show HN: Shannon Uncontained – generate src for live target, go for the pwn
by _steake | 2025-12-20 21:58:26+00:00
The security-industrial complex peddles spreadsheets of vibes. Severity badges. Ritual scans. Then, at the moment of truth, it refuses the simple, adult question: can you actually pwn it?

Shannon said yes. It did the unfashionable thing: try the exploit, ship receipts, or shut up. No exploit, no report. That single sentence wipes out half the ceremony and all of the superstition.

Shannon Uncontained is the fork for people who don’t need a container to run Node, don’t always have source, and don’t swear fealty to a single LLM vendor. It runs natively. It speaks Claude, GPT-4.1, support connecting via GitHub Models, and the locals (Ollama/llama.cpp/LM Studio).

And when all you’ve got is a URL and permission, it crawls, fingerprints, and assembles pseudo‑source—a structured model of routes, inputs, and flows—then hands that to the same exploit-first pipeline. Less incense, more impact.

This is a pentester that behaves like it means it:

If it can’t make the vuln sing—shell, XSS pop, auth bypass, SSRF reach—it doesn’t log it as gospel. It maps your mess to OWASP Top 10, spits SARIF for auditors, JSON/HTML for humans, and keeps an audit trail that’s actually evidence, not a confession.

It slots into CI/CD without container cosplay, because “portable” shouldn’t mean “pretend Linux wrapped around JavaScript.”

Yes, the tone is combative. That’s because the default is complacency. “We ran the scanner” is a lullaby. If your app can be owned, your pipeline should find out before someone less poetic does.

If the idea of pseudo‑source offends you, excellent—show me where it fails. If you think it’s useful, tell me the guardrails you want in CI (timeouts, scope fences, auth flows). Either way, the premise stands: suspicion without a proof-of-concept is astrology with YAML.

Repo: https://github.com/steake/shannon-uncontained
by db48x | 2025-12-20 21:58:56+00:00
It’s a really complicated rule called “subtraction”. Addresses are always 128 bits long, or 8 groups of four hex digits. 2000::1 is two groups, so you need six groups in between to make 2000:0000:0000:0000:0000:0000:0000:1. But I don’t know why people always ask this, because it’s always the computer you are typing addresses in to that does the subtraction. You never ever have to type out the whole address. Just type the shortened version, because 2000::1 _is_ the whole address.
by gitgud | 2025-12-20 22:00:12+00:00
Nice! Very interesting idea and seems well executed in the demo video. “3D Presentations” seems like a very strange use case though.

I actually think you could pivot this to be a very simple “3D movie maker”! Just make the presentation autoplay, allow different durations for each slide, different interpolation strategies… then you have a super clean and minimal 3D video maker!
by socalgal2 | 2025-12-20 22:01:04+00:00
> Every graffiti artist is a superhero.

No, every Graffiti artist is a vandal. If you disagree, give me your address, I'll be happy to graffiti your car, your house, your TV, and your laptop and be a superhero!. If you don't like that you're a hypocrite!

I always wish I had the guts to go into a museum showing off a graffiti artist's graffiti and graffiti it.

Note: that's a separate question from whether or not the person is a talented artist.
by mschuster91 | 2025-12-20 22:01:18+00:00
> There are many bad things about LLMs, but a benign shift in popular language usage isn't one of them.

Organic shifts in language are fine. What is not fine is Big Money (which most forms of AI are) manipulating society at large - and that's not just the AI companies' doing. Think of Tiktok leading people to say "unalive" instead of the various clear words before (e.g. kill, murder, executed, run over by car, mauled to death by animal).
by fhcuvyxu | 2025-12-20 22:02:37+00:00
No, many applications need to be fault tolerant.

Crashing your web stack because one route hit an error is a dumb idea.

And no, calling it a warning is also dumb idea. It is an error.

This article is a navel gazing expedition.

They're kind of right but you can turn any warning into an error and vice versa depending on business needs that outweigh the technical categorisation.
by JackSlateur | 2025-12-20 22:03:56+00:00
"Much more important also is that LLMs don't try to scam you, don't try to fool you, don't look out for their own interests"

This is so naive, especially since both google and openai openly confess to manipulate the data for their own agenda (ads but not only)

AI is a skilled liar

You can always pride yourself and playing with fire, but the more humble attitude would be to avoid it at all cost;
by jug | 2025-12-20 22:05:13+00:00
I've had some weird "thinking outside the box" behavior like this. I once asked 3 Pro what Ozzy Osbourne is up to. The CoT was a journey, I can tell you! It's not in its training data that he actually passed away. It did know he was planning a tour though. It had a real struggle trying to consolidate "suspicious search results" and even questioned whether it was fake news, or running against a simulation!, determining it wasn't going to fall for my "test".

It did ultimately decide Ozzy was alive. I pushed back on that, and it instantly corrected itself and partially blamed my query "what is he up to" for being formulated as if he was alive.
by bgwalter | 2025-12-20 22:05:56+00:00
I can't help you if you repeatedly misinterpret me. Once you made the first response in this subthread, 4 or 5 of my comments went from 1 to 0 or -1. Cum hoc ergo propter hoc? Maybe.

I'll design a system for the senate that enables outside voters to first turn down the microphone's volume of a speaker if he says that another senator works for company X and then removes him from the floor. That'll be a great success for democracy and "intellectual curiosity", which is also in the guidelines.
by dhampi | 2025-12-20 22:06:01+00:00
The actual title is pretty buzzy given how limited the task described is. In one specific, very constrained and artificial task, you can find something like detailed balance. And even then, their data are quite far from being a perfect fit for detailed balance.

Would love it if I could use my least action principle knowledge for LLM interpretability, this paper doesn't convince me at all :)
by ChrisMarshallNY | 2025-12-20 22:06:02+00:00
Well, we'll have to see what all the "in-between" bits do. There's a lot in it, that will require implementation by countless layers of routers, switches, caches, firewalls, etc.

Look at Bluetooth, for an example, or TIFF.

I printed out the Bluetooth spec once, just for Ss and Gs. It was over 2,000 pages (double-sided).

I once tried writing a fully-compliant TIFF reader. Didn't go so well.