MurphyA/hacker-news huggingface dataset:
by phasmantistes | 2025-12-02 18:05:19+00:00
Organizations with many frontends/loadbalancers all serving the same site tend to adopt one of four solutions:

- Have one node with its own ACME account. It controls key generation and certificate renewal, and then the new key+cert is copied to all nodes that need it. Some people don't like this solution because it means you're copying private keys around your infrastructure.

- Have one node with its own ACME account. The other nodes generate their own TLS keys, then provide a CSR to the central node and ask it to do the ACME renewal flow on their behalf. This means you're never copying keys around, but it means that central node needs to (essentially) be an ACME server of its own, which is a more complex process to run.

- Have one ACME account, but copy its account key to every node. Have each node be in charge of its own renewal, all using that shared account. This again requires copying private keys around (though this time its the ACME key and not the TLS key).

- Give every node its own ACME account, and have each node be in charge of its own renewal.

The last solution is arguably the easiest. None of the nodes have to care about any of the others. However, it might run into rate limits; for example, LE limits the number of new account registrations per IPv6 range, so if you spin up a bunch of nodes all at once, some of them might fail to register their new accounts. And if your organization is large enough, it might run into some of LE's other rate limits, like the raw certificates-per-domain limit. Any of the above solutions would run into that rate limit at the same time, but rate limit overrides are most easily granted on a per-account basis, so having all the nodes share one account is useful in that regard.

Another factor in the decision-making process is what challenge you're using. If you're using a DNS-based challenge, then any of these solutions work equally well (though you may prefer to use one of the centralized solutions so that your DNS API keys don't have to live on every individual node). If you're using an HTTP-based challenge, you might be required to use a centralized solution, if you can't control which of your frontends receives the HTTP request for the challenge token.

Anyway, all of that is a long-winded way to say "there's no particularly wrong or right answer". What you're doing right now makes sense for your scale, IMO.
by lenkite | 2025-12-02 18:06:28+00:00
> Tibet is an example of china protecting it from british/indian invasion at the request of tibetans. Funny how we don't hear about that part.

Have you actually spoken to Tibetan refugees who fled Chinese extermination before you arrived at this crazy world-view ? There were 100,000 of them in India at one point of time. Still ~60k presently. Suggest coming to India and talking to them. You will know what true brutality means.

> Lets stop pretending india is the good guy here. India ain't. It's just selfish interests on all sides.

India hasn't annexed and exterminated several hundred-thousand native civilians. China has. Will never claim that India is good, but an objective assessor can definitely know who are the bad guys regarding the conquest of Tibet.
by barrell | 2025-12-02 18:06:33+00:00
Thank you :) and you're definitely not the only one.

Full transparency, the first backend version of phrasing was 'vibe-coded' (long before vibe coding was a thing). I didn't like the results, I didn't like the experience, I didn't feel good ethically, and I didn't like my own development.

I rewrote the application (completely, from scratch, new repo new language new framework) and all of the sudden I liked the results, I loved the process, I had no moral qualms, and I improved leaps and bounds in all areas I worked on.

Automation has some amazing use cases (I am building an automation product at the end of the day) but so does doing hard things yourself.

Although most important is just to enjoy what you do; or perhaps do something you can be proud of.
by Rendello | 2025-12-02 18:07:11+00:00
Math Academy is a good option, but I wrote about the issues I had with it here.

Recently, I've been going through Introduction to Graph Theory by Richard J Trudeau. It's from the 70s, and I'm doing all the exercises. It really is an intro, and teaches some set theory and proof stuff. Doing Math Academy at least taught me that doing exercises is incredibly important for mathematics learning.

https://news.ycombinator.com/item?id=46124247
by lloeki | 2025-12-02 18:07:12+00:00
> I really wanted the templates to just be nix functions

This feels like Ruby template engines like haml† and slim†† a lot, or the various xml builders††† too

† https://github.com/haml/haml

†† https://slim-template.github.io

††† https://nokogiri.org/rdoc/Nokogiri/XML/Builder.html#class-No...
by ianferrel | 2025-12-02 18:07:16+00:00
I remembered a third one:

3. It won't reliably play music anymore! I have a good set of songs in my iPhone's Apple Music library. When I say "Hey siri, play <song/artists>", it asks me for access to Pandora (which I do have on my phone). I don't want to play it on Pandora. I have the song! I have just spent the last 10 minutes trying to figure out how to change this, and neither the youtube video I found searching nor this reddit thread (https://www.reddit.com/r/ios/comments/y18ioq/changing_the_de...) seems to work.

Amusingly (?) the reddit people have the opposite problem. They want to use a 3rd party music app but can't get their phones to stop preferring Apple-provided apps.

I can sometimes get this to work by saying "Play <song/artist> on Apple Music", but even that is not reliable.
by AlexandrB | 2025-12-02 18:07:20+00:00
"Thiel owns Vance" is obviously shorthand, but is there evidence that Vance is actually under Thiel's control or do they just agree on stuff? I think proving corruption would probably require that Thiel personally/materially benefit from actions that Vance takes in office, not just that he funded Vance's campaign because he agrees with Vance's politics.

Edit: I think there's a much stronger case for some kind of corruption charge against Trump, since he's been using the office to enrich himself.[1]

[1] https://en.wikipedia.org/wiki/$Trump
by lenerdenator | 2025-12-02 18:07:27+00:00
Ridiculous that stuff from 1930 is what's coming out in the US.

Just make it 50-ish years, absolute max.

On a side note, that web page's presentation of the items is leaving much to be desired. I can't click on each individual item out-of-order on Safari.

EDIT:

Oh, it's a countdown/Advent calendar.

I mean I admire the creativity but I don't care enough to visit the page each day. Just give me the list.
by ACCount37 | 2025-12-02 18:07:47+00:00
The logic of all of those things is really, really simple.

An LLM emits a "tool call" token, then it emits the actual tool call as normal text, and then it ends the token stream. The scaffolding sees that a "tool call" token was emitted, parses the call text, runs the tool accordingly, flings the tool output back into the LLM as text, and resumes inference.

It's very simple. You can write basic tool call scaffolding for an LLM in, like, 200 lines. But, of course, you need to train the LLM itself to actually use tools well. Which is the hard part. The AI is what does all the heavy lifting.

Image generation, at the low end, is just another tool call that's prompted by the LLM with text. At the high end, it's a type of multimodal output - the LLM itself is trained to be able to emit non-text tokens that are then converted into image or audio data. In this system, it's AI doing the heavy lifting once again.
by hearsathought | 2025-12-02 18:08:05+00:00
> Communism and its associated pairings have killed far more than capitalism ever will.

Ever will? The "capitalists" have already killed far more. Did communists wipe out a continent full of native americans? Did communists killed more people than the Nazi germany, the US, british empire, chinese empire, japanese, etc in ww2? Did communists kill more people during both the vietnam wars?

> Communism only ever exists when paired with an authoritarian government and cannot exist without one. Capitalism can (and does) exist without an authoritarian government.

Fine, that's an actual argument that can be discussed. But why lie outright about reality. But pretty sure the natives would have loved to live under their own authoritarian government rather than being wiped out by the capitalist paradise.

> There is a reason why the only people that defend communism have never lived under it.

Must be why you are so good at lying. Because you grew up under communism?
by carlCarlCarlCar | 2025-12-02 18:08:19+00:00
Free speech is a circular right.

One is free to say racist things. Others are free to mock them in return.

Racists are not free from consequences. If they don't like others freely expressing themselves in return, at the rhetorical and emotional expense of the racist, racists can freely express themselves in their home.

You're advocating a very reductive approach to free speech.
by maxglute | 2025-12-02 18:09:06+00:00
The basic problem is PRC resolved 12/14 land borders (majority with concessions) and flipping Bhutan would make india the last holdout and the optics of that doesn't work in Indian favour. But Bhutan can't settle bilaterally since they are legally obligated to consider Indian security interests and being landlocked country with India as only feasible access abroad constrains Bhutan from true sovereign decision making. As in they could but they'd be stupid to piss off india especially when disputes invovle trijunction/chicken neck/strategic land. TBH PRC fine with ceding Doklam to Bhutan now (it's not that strategic anymore with how much PRC MIC has advanced), but it's far more useful as barginning chip to try to pressure India to settle broader border disputes with PRC, which India (at least populist Modi) can't because ceding territory is political suicide in democracy even if India gets >50%. Still the pressure point going to keep get pressed, salami going to keep getting sliced until India or Bhutan decides the opportunity costs of not security drama is worth settling. This isn't meant to malign/attribute blame to India (who just has a poor record settling borders, i.e. Bangladesh took 40 years, most of PRCs took 5-10), merely pointing out structurally/politically, it's much more difficult for India to settle border disputes with any loss via dialogue, after 50 years of getting nowhere, for PRC the only strategy left is to stir the pot.
by charlie-83 | 2025-12-02 18:09:14+00:00
I completely agree with you. While I got a piece of paper at the end, I also learned lots of really useful things and met a lot of interesting people. There are still lots of passionate students that want to learn as much as they can.

But those students aren't going to be using AI to skip all the learning. The article and just about everyone in higher education right now are saying that a large number of students are doing that. So, there must be a large number of students who are primarily motivated by piece of paper (and the job opportunity it provides).

That doesn't mean that they must be completely disinterested in their subject. They might have some lectures they really like and where they do the coursework properly. However, the epidemic of AI cheating speaks to the inefficiency created by the need for the piece of paper. If someone is essentially skipping 80% of the learning with AI then the job market requiring you to have a piece of paper is causing someone to waste 80% of their time and money. They would be better served by a short course teaching them only that 20% of skills they actually want.

The social side of things isn't something I was really addressing in this context. To me, that's a bonus of university. Given the cost, it doesn't seem worth going to university primarily for a social experience (unless you live somewhere where it's free). I also really hope that AI isn't affecting these social aspects.
by JosephjackJR | 2025-12-02 18:09:47+00:00
they took the already ridiculous v3.1 terminus model, added this new deepseek sparse attention thing, and suddenly it’s doing 128k context at basically half the inference cost of the old version with no measurable drop in reasoning or multilingual quality. like, imo gold medal level math and code, 100+ languages, all while sipping tokens at 14 cents per million input. that’s stupid cheap. the rl recipe they used this time also seems way more stable. no more endless repetition loops or random language switching you sometimes got with the earlier open models. it just works. what really got me is how fast the community moved. vllm support landed the same day, huggingface space was up in hours, and people are already fine-tuning it for agent stuff and long document reasoning. i’ve been playing with it locally and the speed jump on long prompts is night and day. feels like the gap to the closed frontier models just shrank again. anyone else tried it yet?
by mcpherrinm | 2025-12-02 18:10:10+00:00
Note that renewing certificates is generally exempt from rate limits: https://letsencrypt.org/docs/rate-limits/#limit-exemptions-f...

We are working on further improvements to our rate limits, including adding more automation to how we adjust them. We're not ready to announce that yet.

We wanted to get this post out as soon as we'd decided on a timeline so everyone's on the same page here.
by parliament32 | 2025-12-02 18:10:35+00:00
By "distributed websites" you mean multiple webservers for one FQDN? Usually TLS termination would happen higher up the stack than on the webservers themselves (reverse proxy, L7 load balancer, etc) and the cert(s) would live there. But if your infrastructure isn't that complicated then yes, the happy path is have each webserver independently handle its own certificate (but note your issuance rate limits, 5 certs per week for the exact same hostname[1]).

[1] https://letsencrypt.org/docs/rate-limits/#new-certificates-p...
by jairuhme | 2025-12-02 18:10:43+00:00
I don't have any advice on self learning, but I have been getting a MS in CS for similar reasons. I also have a stats degree, work full time, and struggle with self learning. For me, being in a structured program makes it easier for me to manage. Certainly not a requirement, but it is the way I learn best. Maybe look for classes you can take at a local university or online and see if anything grabs your attention.
by thiago_fm | 2025-12-02 18:11:14+00:00
They should integrate this to ruby-core and make it even better by changing the parser and making it faster in terms of performance, as optimized as it can.

But I have a hard time believing ruby-core will want to hear community feedback... people have been talking about this for ages... Ruby is omakase?

RBS and Sorbet suck. One is very limited, the other isn't part of ruby-core and makes you rewrite the function arguments again, similar to Java's annotations... Doesn't look like Ruby at all, or DRY, mostly like a workaround!

LowType is what it should have been -- hard to believe we are in 2025 and we still don't have a decent, programmer-friendly solution in ruby-core.

Meanwhile Python has it right since a long time. No wonder it is so stagnated with people going for other stacks.

Ruby is slowly becoming what Perl did, a very niche language.
by lowkey_ | 2025-12-02 18:11:17+00:00
The above commenter's point was actually drawing a distinction between these, and "one-upping" by saying there was a difference, or worse one, out of these extremist ideologies.

I disagreed and said that they are both equally horrid.

Expressing equal hatred for people and systems that kill countless millions through starvation, gulags/concentration camps, and disappearing them, is not childish. I have a ton of solidarity with victims of other evil regimes.
by hellojesus | 2025-12-02 18:11:22+00:00
> He now wields enough scary-factor that even though we have handwritten proof of his involvement with Eepstein that his own party is too cowardly to impeach him or even release the files

I think they're only cowardly because each elected individual's goal is to survive long enough to get a sweet exit deal. Voting to impeach Trump is the correct thing to do (blatant corruption, violation of due processes, etc.), but it will surely lessen their chances of reelection.

I think Congress is full of a bunch of individuals trying to maximize personal gain agnostic of the outcome for the country, but I'm not sure how to realign the incentives to fix that.
by ChrisArchitect | 2025-12-02 18:11:55+00:00
On Fizzy's public codebase:

dhh > Unlike Campfire, where we shared a zero-history copy of the codebase, Fizzy's public codebase has the entire life of the product development cycle out in the open. 1,792 pull requests of historical fun and insight into how we make things at 37signals! https://github.com/basecamp/fizzy/pulls?q=is%3Apr+is%3Aclose...
by butlike | 2025-12-02 18:12:03+00:00
Counter-point: I upgrade day 1 (or in a reasonable timeframe) because I know there's no way the company will ever "go back" on what they're doing. If the new UI nukes the pleasant atmosphere of the OS by making all the icons look glass-like, then I'd better get used to it now. I don't want to forego upgrading, then have to learn a bunch of new features ON TOP of the UI differences.

For example, iOS 26 introduced the liquid glass, which, coupled with how some UI elements work, was essentially the only change. If I wait until the inevitable iOS 36, I'll have to learn the UI paradigm on top of 10 versions worth of functional upgrades. The delta would be too large for me.
by encyclopedism | 2025-12-02 18:12:05+00:00
You can make categorical judgements on many things that are hard to define. Often by taking the opposite approach. It's hard to define what consciousness itself is yet I can define what it isn't and that teases a lot out.

So I can categorically say LLM's do not understand by quite literally understanding what NOT understanding is.

We know what LLM's are and what they are NOT.

Please see my earlier comment above:

> LLM's do not think, understand, reason, reflect, comprehend and they never shall.
by add-sub-mul-div | 2025-12-02 18:12:10+00:00
Even conceding that you, the person reading this comment, will only use AI the right way. With diligence and curiosity. It takes a significant amount of denial not to understand that the majority of people see AI a shortcut to do their job with the least possible amount of effort, or as a way to cheat. These are the people you will be interacting with for the coming decades of your life.
by officeplant | 2025-12-02 18:12:12+00:00
> 2) It’s not legal, obviously. I’d always have a tinge of worry that if I join a Teams call or something then my employer is on the hook for me doing something naughty.

Maybe I'm wrong, but I assume most people here are talking about their personal computers unless self employed.

The company IT department isn't going to be deploying oddball versions of Windows 10, unless you're shady small business.
by advisador | 2025-12-02 18:12:46+00:00
One thing I forgot to mention that blew our own minds:

We built CodeBake using CodeBake.

From the very first ticket → final deploy, our AI agents were real participants on the board (pulling tasks, updating statuses, writing summaries). Zero manual PM busywork for the entire project.

That’s when we knew this wasn’t just a side project — it actually removed an entire category of work for us.
by dfltr | 2025-12-02 18:13:13+00:00
Strudel is dope and a ton of fun, but every single piece of its interface seems determined to confuse people who already know music theory and composition.

That's not really a point against it, it's a great tool and it's a ton of fun, but I wish there was a way to use it that at least kind of sort of mapped back to traditional music notation, especially rhythm notation.
by 542354234235 | 2025-12-02 18:13:19+00:00
Airlines currently don't want them (which is not even 100% accurate since airlines pulled A380s out of storage, and continue to push back plans to retire them). You started this by saying "You know you can just make the wing engines 50% more powerful, right?". You weren't talking about commercial decisions, you were talking about engineering decisions and capabilities. So, no you can't just make twin engines bigger in all situations. If airlines want large capacity aircraft again, they will be quad jets, not super powerful twin engines.
by taeric | 2025-12-02 18:13:20+00:00
Right, I've also seen people that couldn't get some higher math items because they haven't learned to recognize some things on sight. Curves are a good example. You should be able to roughly sight identify basic curves. Or distributions based on their shape. With obvious caveats.

I suspect this is a lot like being able to recognize a piece of art to the artist by sight. Strictly, not required. But a lot of great artists can do it.

For real fun, I saw an interview with Magnus Carlsen where someone was quizzing him on famous games. He was able to say the match on the first 2-3 moves a remarkable number of times.
by morgan814 | 2025-12-02 18:13:37+00:00
> no one

I recently took a union software job after I was laid off due to the CEO having a tummy ache one morning. Many of my new co-workers were explicitly interested in the company _because_ there was a union.

It's very imperfect but such is life. It's all new to me but here's what I've seen so far:

a) Employees have a voice. That doesn't mean that management is forced to do anything, but at least it's possible to be vocally opposed to eating a shit sandwich.

b) We are protected by a contract. If you are called into a police station, you ask for a lawyer for protection according to the law. If an employee finds themselves in an adverse meeting/situation with management, they can call in a steward to protect them according to the contract.

c) The union is us, the workers. We self-organize. It simply gives us a structural framework to work within. An entity for my employer to recognize. It's not ran by an authoritarian who waves a magic wand to make things happen.

That's it. There seems to be this weird idea that I can screw around for 40 hours a week and have the union protect my job. The union told us that we very much still have to do our jobs (duh).

---

To go on a little side tangent. Some countries, such as Finland or Norway, have no minimum wage because unions are (a) everywhere and (b) (allowed to be) powerful enough to protect workers. Honestly it's the best of both worlds. Less government intervention but at the same time workers hugely benefit from collectivization. They don't need to beg their politicians to raise wages - they do it themselves because they are given the power to do so. In the US, we instead rely on the lizards in DC to protect our wages because unions have been so stripped of power.
by morshu9001 | 2025-12-02 18:13:39+00:00
I'm still confused how these ISO 2022 strings even work, and the ASN1 docs discourage using the UniversalString and GraphicString types. All these different string types are intimidating if I just want unicode/ascii, and even if I were using an obscure encoding, I'd use generic bytes instead of wanting asn1 to care about it.
by calepayson | 2025-12-02 18:14:14+00:00
Im a student right now and have a background in a non-CS field so struggle with the impostor-syndrome/fundamentals double whammy. The advice I’ve found most valuable is to basically cosplay as someone who’s a complete pro. What would that person read for news? How do they practice their craft? What books do they read on their free time?

Cosplay that role long enough and you become it. I’m still learning but it has been a great signpost for me over the last couple years.

Cheers and keep crushing it!