MurphyA/hacker-news huggingface dataset:
by TZubiri | 2025-12-10 07:27:10+00:00
>Security is built out of generic programming concepts, rate limiting, input validation, authorization, encryption, etc.

With the exception of rate limiting, those are indeed security techniques.

The generic programming concepts, like Atomicity and rate limiting are generic because, although maybe relevant to security, they would exist even without malicious actors. Atomicity for example is used on disk and database writes to avoid ilegal states in the case of power outages or crashes. Rate limiting on the other hand would still exist without malicious actors, to distribute limited resources when demand exceeds supply. And it often is used in the context of paid apis with different pricings based on different limits.

So in essence some concepts strictly exist to protect against malicious actors, while others protect against random conditions or good faith actors.

>With more programming experience you’ll understand the mapping of studying crypto smart contract vulnerabilities and applying lessons to a non-blockchain database.

If I'm not mistaken you started learning about programming and security very recently (which is why you can't distinguish between the two) and mostly through chatgpt? Might pay off to be less cocky, or maybe it's a good strategy so that veterans correct you, either way, all the best.
by biorach | 2025-12-10 07:27:12+00:00
There are certain styles of programming and data structure implementations that end up requiring you to fight Rust at almost every step. Things like intrusive data structures, pointer manipulation and so on. Famously there is an entire book online on how to write a performant linked list in idiomatic Rust - something that is considered straightforward in C.

For these cases you could always use Zig instead of C
by brabel | 2025-12-10 07:27:59+00:00
Zig as a language is not worth, but as a build system it's amazing. I wouldn't be surprised if Zig gets in just because of the much better build system than C ever had (you can cross compile not only across OS, but also across architecture and C stlib versions, including musl). And with that comes the testing system and seamless interop with C, which make it really easy to start writing some auxiliary code in Zig... and eventually it may just be accepted for any development.
by butvacuum | 2025-12-10 07:28:03+00:00
From ERCOT's stats- wind is complimentary. But, I can't find any hard data on intraday/hourly power usage for AI it seems reasonable to assume that night time use will be lower though.

And so it doesn't have to be looked up: Wind seems to peak at dawn/dusk when solar is not delivery much power, solar peaks in line with air-conditioning load, and there's a miniscule amount of grid scale battery to hold up the grid during a short gap between solar and wind. The batteries are recharged with solar. At least that was the pattern this summer- I need to check now that it's winter.
by poguemahoney | 2025-12-10 07:28:47+00:00
I think you've left out the ecosystem of semi-scam, without that the decisions look less logical.. If you go and add a private rootCA to all your servers there are risks. You can convince yourself the risks are covered, you can convince a highly qualified security analyst. Can you convince a business intern with a checklist hired by a certification firm that underbid the one with specialists? 30K to engage with no one on the topic starts to look ideal.
by trabant00 | 2025-12-10 07:29:51+00:00
Yawn, another article which hand picks success stories. What about the failures? Where's the graph of flying cars? Humanoid house servant robots? 3D TVs? Crypto decentralized banking for everyone? Etc.

Anybody who tells you they can predict the future is shoveling shit in his mouth then smiling brown teeth at the audience. 10 years from now there's a real possibility of "AI" being remembered as that "stuff that almost got to a single 9 reliability but stopped there".
by mock-possum | 2025-12-10 07:30:12+00:00
What do you mean ‘we’

I don’t identify with anything written here.

> Without that horizon, we could defer everything indefinitely. Why start the difficult journey today when you have infinite tomorrows?

because I want to. Don’t you have things you want to do? Don’t you have desires? I don’t want to do it tomorrow, I want to do it now.

> When everything is possible, and nothing is urgent, with no real consequences for time misspent, what do you even care about?

Same thing I care about now - seeking pleasure. There are so many positive, enjoyable, pleasant, pleasureable, exciting, thrilling, gratifying, enlightening, edifying, joyful, enriching, uplifting experiences - I could spend a lifetime pursuing them and never even come close to enjoying them all. Even if I had a thousand lifetimes, by the time I finally finished off the list I started with, there would be exponentially more that had been added since I started.

In all honesty, reading this, I think something is wrong with the author. He does not love life the way he ought to, and that’s a shame, and I resent that he’d project that weakness, as if it’s somehow insightful or laudable or applicable to me.
by maxloh | 2025-12-10 07:30:25+00:00
The major concern regarding the AGPL is that it only fosters code share when a code change is involved. The license has nothing to do with someone building a competitive service around your project.

If a Big Tech company happened to build a cloud service (SaaS) around your project without any code change, and that service is more competitive than the one you provide, there is not much you can do about it with the AGPL.

The AGPL is published by the FSF, with mainly community-led projects in mind. The profit and sustainability of a corporation is not their primary concern. (A minor correction: The most recent version is v3; any newer version would be v4, not v2.)
by createaccount99 | 2025-12-10 07:30:30+00:00
MinIO made their source AGPL, but then cloud providers hosted the service "as is" and make money off it, with MinIO team getting zip. That still complies with AGPL but is not monetarily beneficial to the MinIO team.

At least that's my understanding. They closed source completely, but a source-available license wouldn't have run into this issue.
OkayWebHost– A simple, India-based managed hosting
by okaywebhost_com | 2025-12-10 07:31:10+00:00
Hi HN,

I’m working on a small project called OkayWebHost, a managed hosting service I built because a lot of people around me (local businesses, doctors, friends building side-projects) needed fast, reliable hosting but didn’t have the technical capacity to manage VPS servers, set up CloudPanel, configure caching, manage backups, or secure their WordPress installations.

Most mainstream hosting providers in India either oversell shared plans or make managed hosting extremely expensive. I kept meeting people who wanted the benefits of a VPS—speed, control, stability—but not the overhead of actually maintaining one. So I created a lightweight, opinionated managed hosting service around CloudPanel.

Here’s what I’ve built so far:

• CloudPanel-based stack (Nginx + PHP-FPM, Redis, MariaDB) Pre-configured for performance out of the box. Users get the benefits without ever touching the panel unless they want to.

• Personal onboarding Every site is configured manually by me (for now). No “click and pray” dashboards. Proper DNS setup, server tuning, SSL, caching, rate limits, and security hardening.

• Isolated environments Each project gets its own VPS environment. I avoid the shared-hosting “noisy neighbor” issue completely.

• WordPress-first experience Automatic object caching, image optimization recommendations, and plugins/theme restrictions to keep performance and security tight.

• Simple pricing I want this to remain accessible to freelancers, agencies, doctors, SMEs—in India especially.

I’m not trying to compete with giants like Kinsta, SiteGround, or Cloudways. This started because I helped a few people speed up their horribly slow WordPress sites, and that led to more requests, which eventually pulled me into building a proper service around it.

At the moment, I’m doing everything myself: provisioning servers, automating deployments, writing the dashboard, handling support. It’s been a fascinating learning curve.

I’d love feedback from the HN community on:

1. Where should I focus next to make this genuinely useful? Developer tools? APIs? Git deploys? Better onboarding? A self-serve control panel?

2. What pain points do you see in the hosting space that small providers can still solve?

3. If you were using a managed host, what’s the one thing you’d want done exceptionally well?

If anyone is curious, here’s the site: https://okaywebhost.com

I’m happy to answer anything—technical decisions, stack, deployment process, CloudPanel quirks, pricing choices, scaling limits, or even the messy parts of trying to bootstrap a hosting service as a solo founder.

Thanks for reading, and grateful for any insights you share.

— Jayant
by jillesvangurp | 2025-12-10 07:31:15+00:00
Why not:

- The C-compiler. AI tools work better if their automated feedback loop via tools includes feedback on correctness, safety, etc. The C compiler is not great at that. It requires a lot of discipline from the programmer. There mostly isn't a compile time safety net.

- Macros add to this mess. C's macros are glorified string replacements.

- Automated tests are another tool that helps improving quality of vibe coded code. While you can of course write tests for C code, the test frameworks are a bit immature and it's hard to write testable code in C due to the lack of abstractions.

- Small mistakes can have catastrophic consequences (crashes, memory overflows)

- A lot of libraries (including the standard library) contain tools with very sharp edges.

- Manual memory management adds a lot of complexity to code bases and the need for more discipline.

- Weak/ambiguous semantics mean that it's harder to reason about code.

There are counter arguments to each of those things. Compilers have flags. There are static code analyzers. And with some discipline, it gets better. You could express that discipline in additional instructions for your agent. And of course people do test C code. There just are a lot of projects where none of that stuff is actively used. Vibe coding on those projects would probably be a lot harder than on a project that uses more structured languages and tools.

All these things make it harder to work with C code for humans; and for AIs. But not impossible of course. AI coding models are getting quite good at coding. Including coding in C.

But it makes it a poor default language for AI coding. The ideal vibe coding language for an AI would be simple, expressive, have great tools and compilers, fast feedback loops, etc. It means the AI has less work to do: shorter/faster feedback loops, less iterations and reasoning to do, less complex problems to solve, less ambiguity, entire categories of bugs that are avoided, etc. Same reasons as to why it is a poor choice for most human programmers to default to.
by blargey | 2025-12-10 07:31:46+00:00
The headline argument hinges on the size of infinities to assert that you'll run out of goals to live for eventually, and thus will eventually become vacuous and despondent over an infinite timeline. But this reliance on infinities is also why they cannot propose a concrete age limit for the Logan's Run Law their gut so desires. May that remain the case for infinity.

Some counter-shower-thoughts:

Are children's lives vacuous and despondent? They have no sense of mortality, no sense of limits, no comprehension even of the fleeting nature of their childhood, and honestly they aren't really striving for a goal the way an Everest climber, or even the average salaried worker, is. Maybe there's more to the meaning of life than striving towards a lofty-yet-grounded-and-pinpoint goal?

Are dogs and cats given longer legal lifespans than humans because they seem happy enough without this vaunted sense of mortality and strife?

Why are Everest summiters or retirees left without goals to strive for, when they've only achieved one or less? That's tangential to Williams' proposition! Is it not because they have too little time left before their "dead"line to forge and pursue a new one, particularly given the toll of aging on mind and body? That seems like the opposite of the point the author's trying to prove.
by frankest | 2025-12-10 07:32:12+00:00
Envy is worth talking about. It seems to pull a lot of people, like one of the strings in string theory. They want to be envied so they live an exhibitionist life, or they were surpassed by someone they thought was their equal and now they hate the gap. Is it possible people who feel envy then decide to be more exhibitionist, so they can be envied in the future?

I wonder what value envy provided to evolution? Did it motivate primates to do more than they are already doing? Is it a by-product of social status behaviors?
by avhception | 2025-12-10 07:32:23+00:00
Your comment comes across disingenuous to me. Writing it in, for example, Java would have limited it to situations where you have the JVM available, which is a minuscule subset of the situations that curl is used in today, especially if we're not talking "curl, the CLI tool" but libcurl. I have a feeling you know that already and mostly want to troll people. And Golang is only 16 years old according to Wikipedia, by the way.
by rmrfchik | 2025-12-10 07:32:27+00:00
Suspend/Resume simply nvidia bug: https://forums.developer.nvidia.com/t/cant-resume-from-suspe...

Dozen of packages, official packages, you need bunch of, like, 590.44.01-1 packages installed: https://developer.download.nvidia.com/compute/cuda/repos/deb...

Lags: sorry, I have no more nvidia and can't record video.

(edit: formatting)
by Welten01 | 2025-12-10 07:33:29+00:00
BookHunt is the Product Hunt for books - a book recommendation community dedicated to helping authors launch their books and readers discover their next favorite read. We believe that great books deserve to be discovered, and that the best way to find them is through the recommendations of fellow book lovers in a thriving community.

We focus on community-driven discovery, transparent upvoting, and connecting authors directly with readers who love their genre.
by bluefirebrand | 2025-12-10 07:34:12+00:00
> My boss doesn't at a large corporation, and I'm pretty sure his boss and his boss don't either.

Don't have is pretty different from could not possibly afford though

Unless your company is extremely weird, I doubt that many layers of management could not afford a yacht if they wanted one

Then again, the bar for that is actually pretty low.

Source: My dad is a tool salesman, and also was the president of the local yacht club a couple of years ago. Actually thinking about it, that yacht club is surprisingly blue collar

I wouldn't ve surprised if white collar people hold off buying yachts unless they can also afford staff to pilot and manage them
by schaum | 2025-12-10 07:35:04+00:00
Every few years I stumble across the same java or mongodb issue. I google for it, find it on stackoverflow, and figure that it was me who wrote that very answer. Always have a good laugh when it happens.

Usually my memory regarding such things is quite well, but this one I keep forgetting, so much so that I don't remember what the issue is actually about xD
by Aachen | 2025-12-10 07:35:06+00:00
I tried to place an order on amazon for the first time last week. After creating an account and going through all the steps including paying with a non-refundable payment method (iDeal, similar to bank transfer), I went to bed, only to notice later that it was immediately cancelled "to protect the their systems and their customer" (they thought I was somehow defrauding them by giving them money for a product being offered)

I was welcome to go through human verification, send my passport to some third party, wait three working days, and then they'd review the case... it would never arrive in time for the person's birthday anymore

Human review sounds good but if this is the sort of hoops you have to jump through, you're still screwed if the algorithms hates you because they're everywhere: from trying to use paypal to paying for a translator with stripe to trying to rescue food with "too good to go" using credit cards. Blocked, blocked, blocked. Not that I could get a credit card because the algorithm at the bank didn't like me, but a shared card (where the other person is also responsible for any debt) was okay, so now I need to continuously pay my partner 50% of what I buy with it for myself. You'd think I'm not creditworthy but I never had debts or needed any loan. I don't know why algorithms keep blocking me trying to give other people money

Requiring that any fraud algorithm is fair and transparent would probably go a much longer way than codifying a right to appeal. Appeal processes will either just consist of a human clicking confirm on the algorithm's choice, or have a bunch of extra hoops to jump through. If the algorithm were required to be fair to begin with, you could have them fix the root cause instead by demonstrating that it blocks you for no discernable reason and they need to figure out on their end how to make that not happen
by goku12 | 2025-12-10 07:36:06+00:00
> Memory safety applies to all memory. Not just heap allocated memory.

> Anyway, Rust has benefits beyond memory safety.

I want to elaborate on this a little bit. Rust uses some basic patterns to ensure memory safety. They are 1. RAII, 2. the move semantics, and 3. the borrow validation semantics.

This combination however, is useful for compile-time-verified management of any 'resource', not just heap memory. Think of 'resources' as something unique and useful, that you acquire when you need it and release/free it when you're done.

For regular applications, it can be heap memory allocations, file handles, sockets, resource locks, remote session objects, TCP connections, etc. For OS and embedded systems, that could be a device buffer, bus ownership, config objects, etc.

> > Nearly all of the relevant code is unsafe. There aren't many real benefits.

Yes. This part is a bit weird. The fundamental idea of 'unsafe' is to limit the scope of unsafe operations to as few lines as possible (The same concept can be expressed in different ways. So don't get offended if it doesn't match what you've heard earlier exactly.) Parts that go inside these unsafe blocks are surprisingly small in practice. An entire kernel isn't all unsafe by any measure.
by flowerthoughts | 2025-12-10 07:38:24+00:00
Thanks for the reply. That's still a theoretical reasoning. "Based on our current _models_, it must follow that c=c'." I can accept that. I guess part of a wider theoretical answer is that a photon is just an interaction in quantum fields, and that indicates there's nothing special about a photon that could limit its speed (as you imply.) What you're saying makes me think I should be looking for impediments for attaining speed, and it seems only (inertial) mass is that thing.

My question is if this part of the model has been validated experimentally somehow.

BTW, it seems odd calling a photon a zero-energy object.
by vasco | 2025-12-10 07:38:27+00:00
When ever in the history of the world were humans not exploited by other humans, in much worse ways than now? I'd rather be google's data source for ads than be someones actual slave for example.

Also I don't really like these luddite sentiments, usually shared between the two extremes, old ladies that never used the internet so they don't understand what they are missing, and IT guys that are too jaded to see the benefits and are at the stage of "wanna become goat farmer". Outside addiction the internet is great.
by Saline9515 | 2025-12-10 07:39:35+00:00
10? Why not 20? 100? I gave you enough examples of settler violence. Louis Theroux's last documentary on settlers is a good representation, as it shows how settlers and NGOs have a clear agenda of displacing Palestinians, and commonly harass them.

Lol, Regavim. The far-right settler organisation that defends land stealers. The fact that it calls left-wing activists "anarchists" is a good indicator of the bias of the report. Their Ukrainian founder just said that new settlements will "bury the idea of a Palestinian State", after positive remarks on the idea of a "Greater Israel" and that his family was "real Palestinians", since "Palestinians are an invented people". And he is the current foreign affairs minister.

Kind of interesting also that the Israeli government puts pressure on Haaretz that is the last non-far right press outlet in the country. Are they just watching videos on Tik Tok, too?

https://wan-ifra.org/2024/11/worlds-press-condemns-israeli-g...
by debugnik | 2025-12-10 07:41:01+00:00
> most existing Rust developers are not "blank slate Rust developers"

Not most, but the pool of software devs has been doubling every five years, and Rust matches C# on "Learning to Code" voters at Stack Overflow's last survey, which is crazy considering how many people learn C# just to use Unity. I think you underestimate how many developers are Rust blank slates.

Anecdotically, I've recently come across comments from people who've taught themselves Rust but not C or C++.
by Xylakant | 2025-12-10 07:41:57+00:00
Did I miss something or does the article not even say how much gas they need as an input to generate the 42MW? I see they deride conventional turbines for needing cooling, but the reason they do is to increase the temp differential between hot and cold end of the turbine because some clever fellow named Carnot figured out that the amount of energy you can extract depends on this. Instead it seems that they just full-tilt run a supersonic turbine and blow the hot exhaust with all its energy into the air. So what’s the efficiency of this?
by augment_me | 2025-12-10 07:42:52+00:00
Your "research" is a vibe-coded mess that subtly cheats eval cleverly multiple times to inflate your results.

The HellaSwag dataset is a dataset with 4 options for each question, with 3 being wrong and 1 being right: https://huggingface.co/datasets/Rowan/hellaswag.

Your vibe-coded eval has cheated this to collapse it into a binary selection on row 46 in https://github.com/Anima-Core/an1-core/blob/main/experiments..., making the problem baseline 50% on random choice instead of 25%, making the problem much easier. HellaSwag is specifically constructed with adversarial examples that could be plausible. By not including them, the eval is much easier.

---

Then, in extract_fields_from_model, you have another cheating going on. The extraction logic (h[:, -1, :]) fails to account for padding in batches, likely extracting EOS/Pad tokens instead of the intended content tokens. This suggests the probe is relying on global sentence summaries (standard embeddings in causal structures) rather than the novel 'meaning fields' claimed in the paper.

---

I dont have time to look at more of this and I just looked at how the eval is made, but please dont waste peoples times when you dont even know what you are evaluating.
by wseqyrku | 2025-12-10 07:43:41+00:00
> parents would find a way to get their children off social media.

They wouldn't have a clue. Hell, I personally had this addiction for a long time and it just takes too long to see what a horrible experience it is in the long term. You can argue you should be able to do whatever you want at any age, I'm not the person to say anything about that.

But I totally agree that, as other comments point out, they use it as a justification for all sort of surveillance, I don't really think it is necessary to go that hard because whoever want to get access, they will. It's the internet after all.