MurphyA/hacker-news huggingface dataset:
by Xylakant | 2025-12-10 13:43:36+00:00
It's great that the Google Android team has been tracking data to answer that question for years now and their conclusion is:

-------

The primary security concern regarding Rust generally centers on the approximately 4% of code written within unsafe{} blocks. This subset of Rust has fueled significant speculation, misconceptions, and even theories that unsafe Rust might be more buggy than C. Empirical evidence shows this to be quite wrong.

Our data indicates that even a more conservative assumption, that a line of unsafe Rust is as likely to have a bug as a line of C or C++, significantly overestimates the risk of unsafe Rust. We don’t know for sure why this is the case, but there are likely several contributing factors:

unsafe{} doesn't actually disable all or even most of Rust’s safety checks (a common misconception). The practice of encapsulation enables local reasoning about safety invariants. The additional scrutiny that unsafe{} blocks receive.

-----

From https://security.googleblog.com/2025/11/rust-in-android-move...
by RicardoRei | 2025-12-10 13:44:01+00:00
Hi HN - I’m the Head of AI Research at Sword Health and one of the authors of this benchmark (posting from my personal account).

We built MindEval because existing benchmarks don’t capture real therapy dynamics or common clinical failure modes. The framework simulates multi-turn patient–clinician interactions and scores the full conversation using evaluation criteria designed with licensed clinical psychologists.

We validated both patient realism and the automated judge against human clinicians, then benchmarked 12 frontier models (including GPT-5, Claude 4.5, and Gemini 2.5). Across all models, average clinical performance stayed below 4 on a 1–6 scale. Performance degraded further in severe symptom scenarios and in longer conversations (40 turns vs 20). We also found that larger or reasoning-heavy models did not reliably outperform smaller ones in therapeutic quality.

We open-sourced all prompts, code, scoring logic, and human validation data because we believe clinical AI evaluation shouldn’t be proprietary.

Happy to answer technical questions on methodology, validation, known limitations, or the failure modes we observed.
by afzal_ali | 2025-12-10 13:44:06+00:00
Location: Lahore, Pakistan Remote: Yes

Willing to relocate: Yes

Technologies: Ruby on Rails | React js | Next Js | Typescript | PHP Laravel | MySQL | Psql | AWS | AI Integrations

Résumé/CV: https://drive.google.com/file/d/1Q6IQrVH3llpEqX0CRt_YzN08_Jf...

Email: afzalali2728@gmail.com
by bananalychee | 2025-12-10 13:44:18+00:00
I suspect that much of the hysteria surrounding the tightening of border controls is a result of selective reporting. We weren't bombarded with articles about people being sent to secondary inspection or denied entry prior to this year. I travel internationally a fair bit and was also nervous traveling into the US this year, but having gone through multiple times now, I haven't seen any change in the process aside from the supporting documentation for my (rather uncommon) visa being looked at more systematically than before. That said, this change in entry requirements sounds like a substantial step up.
by BLKNSLVR | 2025-12-10 13:44:28+00:00
How could this be weaponised against someone you don't like?

How easy is it to set up a <any social network> account under someone else's name, post a bunch of inflammatory opinions, AI some photos of them at a Free Palestine rally, and then sit back and await the inevitable border crossing horror story?

Mental note: Research yourself (and your traveling companions) thoroughly before visiting the US.
by trymas | 2025-12-10 13:44:45+00:00
Maybe we are talking about the same thing, but my intent was to say that original quote was in the theme of "kids these days...".

Not all progress is desirable, of course, and smartphones have their own problems, but same was told about younger generations and internet, TV, newspapers, etc. But those generations grew up out of it and personally I'd argue that smartphone addiction is not only young people problem.
by vidarh | 2025-12-10 13:45:13+00:00
I've quoted Marx on HN on more than one occasion. I'm not sure they'd like my social media profile, despite having also been consistent in arguing for liberal freedoms that the US used to like to claim to favour.

I've visited the US many times, but I have no intention of going back under the current regime.

I transited through China earlier this year, and I frankly felt less concerned doing that - despite having criticised the Chinese government online many times over the years - than I would feel about entering the US at this point.
by bayindirh | 2025-12-10 13:45:14+00:00
What will prevent the GPU from disabling itself when it can't reach to the servers for attestation? NVIDIA's GPUs have encrypted firmware, signing keys baked into the silicon and a RISC-V processor on-board. It can ask the driver to attest, and can stop working when the attestation time outs.

Also, remember, the driver's kernel module is gutted and moved to the card itself. Hence while GL drivers and other parts are also closed source, driver core is on the card and sitting there encrypted. Also, this feature uses the secure enclave on the card, dubbed confidential computing capability.

NVIDIA's cards are computers inside computers now, and they'll not stop just because their packets are dropped by a pesky iptables rule.
by acdha | 2025-12-10 13:45:54+00:00
It’s an interesting list from the perspective of what kind of project Linux is. Things like PA-RISC and Alpha were dead even in the 90s (thanks to the successful Itanium marketing push convincing executives not to invest in their own architectures), and SuperH was only relevant in the 90s due to the Dreamcast pushing volume. That creates an interesting dynamic where Linux as a hobbyist OS has people who want to support those architectures, but Linux as the dominant server and mobile OS doesn’t want to hold back 99.999999+% of the running kernels in the world.
by qsort | 2025-12-10 13:46:04+00:00
Yeah, I think this is one of the (few, rare) cases where the "official" academic way of teaching the subject is actually baggage and not really aligned with what's practically useful.

Compiler courses are structured like that because parsing really was the most important part, but I'd say in the "modern" world once you have a clear idea of how parsing actually works, it's more important to understand how compilers implement language features.

Even if you want to implement a compiler yourself, "Claude, please generate a recursive descent parser for this grammar" is close to working one-shot.
by ActivePattern | 2025-12-10 13:46:28+00:00
I've never heard the caveat that it can't be attributable to misinformation in the pre-training corpus. For frontier models, we don't even have access to the enormous training corpus, so we would have no way of verifying whether or not it is regurgitating some misinformation that it had seen there or whether it is inventing something out of whole cloth.
by fidotron | 2025-12-10 13:46:32+00:00
Risc PCs were obscure machines, even then and compared to the original Archimedes (which itself was an oddity), so lacking support isn't surprising. A 710 model not upgraded to a StrongArm would have come from well outside the enthusiast sphere which is where all the dev work was happening. (So probably a school model from a time when schools were heavily moving to PCs).

Back in 1995/6 or so it seemed like half the Acorn employees at Acorn World had their Risc PCs running NetBSD. By 1995 if you were doing software dev on Risc OS your environment and tools were absolutely terrible compared to what existed on Mac/PC/Unix, which was a factor that contributed to people interested in programming abandoning Acorn hardware entirely.
by MisterTea | 2025-12-10 13:46:32+00:00
> As quoted in Futurism, she said the production process took "seven weeks" where the team "hardly slept" and created "thousands of takes - then shaped them in the edit just as we would on any high-craft production".

How else are you going to justify what I assume is a 5-6 figure invoice for essentially doing nothing.

> "This wasn't an AI trick," she said. "It was a film."

Unfortunately you can't trick us with this nonsense. I am pretty sure no editing software was used beyond hammering on a prompt for a weekend.
by parrellel | 2025-12-10 13:46:36+00:00
That's part of what I mean, actually. You go downtown here on the last big weekend they organized, and its 10 blocks of shouting people in a small/mid sized city, media representation at the local level was good - there is still a newspaper here - on the evening news it was a 10 second clip, and outside of that - "personalities" talking about the whole event nationally and a 30 second spot on Seattle and New York?

Like, compare some pictures of these protests to the 4 guys with a sign locally during Iraq?

The signal attenuates fast.
by Cthulhu_ | 2025-12-10 13:46:39+00:00
How many 1995 games have active subreddits though? There was a 2024 remaster, and I believe that the game remained playable throughout.

Besides, the Warcraft franchise moved to WoW, which is still highly popular. Sure, I miss the RTS games, and the remaster of the 3rd bombed hard because it was low-effort, but it's not dead.
by coldtea | 2025-12-10 13:46:45+00:00
>The word "merely" is doing all of the heavy lifting here"

That's not some new claim that I made. My answer accepts the premise already asserted by the parent that LLM is "equivalent to printing out a Stackoverflow answer and manually typing it into your computer instead of copy-and-pasting".

My point: if that's true, and LLM is "merely that", then that's already valuable.

>Having human intelligence in the loop providing and evaluating answers is what made it valuable. Without that intelligence you just have a machine that mimics the process yet produces garbage.*

Well, what we actually have is a machine that even without AGI, it does have more practical intelligence than to merely produce garbage.

A machine which programmers than run circles around you and me still use, and find it produces acceptable code, fit for the purpose, and possible to get it to fix any potential initial issues in a first iteration it gives, too.

If it merely produced garbage or was no better than random chance we wouldn't have this discussion.
by hoony_han | 2025-12-10 13:47:34+00:00
Haven't you ever thought about this?

Wouldn't it be great if we could assign the role of a team leader to one AI and the role of a developer to another AI, and have them proceed with the work on their own? Wouldn't it be good if we just said, "Find and fix bugs on your own," the team leader would create a bug list, and the developer AI would develop accordingly?

So, we made it. claude-orchestrator.
by theshrike79 | 2025-12-10 13:47:42+00:00
It would, but the point of MCP is that it's discoverable by an AI. You can just go change it and it'll know how to use it immediately

If you go and change the parameters of a REST API, you need to modify every client that connects to it or they'll just plain not work. (Or you'll have a mess of legacy endpoints in your API)

Not a fan, I like the "give an LLM a virtual environment and let it code stuff" approach, but MCP is here to stay as far as I can see.
by cess11 | 2025-12-10 13:47:45+00:00
It's the other way around, the US wants Israel as an asset and is currently fighting to keep it one despite having been implicated in the accelerated genocide in Palestine, crime of aggression and so on. This is an extremely unpopular policy, and will only become more so over time as current young generations mature with the trauma of having spent years constantly exposed to graphic material from rather heinous atrocities and proud celebrations from the perpetrators. One of the few solutions to this problem that relevant US elites consider viable is to extend control over mass and social media, recently and infamously voiced by Hillary Clinton who says it outright at staged events.

In this context it is important to keep in mind that the bulk of members of the zionist movement are christians from modern denominations. The unnamed "they" you mention are these people, and not to be conflated with the israeli jews or jewish zionists in general, who are a minority influence in the movement.

I'm also fairly certain that the shaky old people chasing this control over communications actually believe that younger generations are more or less brainwashed by what they presumably see on screens, which is likely to be quite the psychological projection.
by aynyc | 2025-12-10 13:47:52+00:00
I've been using Django on and off at work for the past few years. I really like it. That being said, I still find its ORM difficult. I understand it now that since it's an opinionated framework, I need to follow Django way of thinking. The main issue is that at work, I have multiple databases from different business units. So I constantly have to figure out a way to deal with multiple databases and their idiosyncrasies. I ended up doing a lot of hand holding by turning off managed, inspectdb and then manually delete tables I don't want to show via website or other reasons. For green webapps we have, django is as good as it gets.
Show HN: Gedcom-SVG-tree – client-side GEDCOM → SVG genealogy tree visualizer
by ameros | 2025-12-10 13:48:39+00:00
I built a fully client-side tool that converts standard GEDCOM genealogy files into clean SVG family trees that you can view, zoom, style, and embed anywhere.

No backend, no build system – runs entirely in the browser Supports FAMS / FAMC / CHIL, OCCU, TITL, BURI, WWW, SOUR Handles large dynasties (Piasts, Jagiellons, Habsburgs, Rurikids, Romanovs…) Output is scalable SVG that prints beautifully Works directly from GitHub Pages Example: Jagiellon dynasty tree https://ameros.github.io/gedcom-svg-tree/?lang=pl&ged=jagiel...
by arein3 | 2025-12-10 13:48:47+00:00
And it is tested with inputs that would go trough all the code branches right?

Does it have an upper limit for the longest run, or all branches have to have the same duration? I'm asking because I am curious if the function execution time being a constant is part of the program working correctly (scheduling). Somewhat related to how early programs worked correctly for 4.77 MHz and faster clock on CPU would break the program https://en.wikipedia.org/wiki/Turbo_button

I am working in free time on code for a controller that has to do time sensitive operations (actuate a solenoid/injector for a couple milliseconds) and I am thinking on how to correctly trigger the code so that the timing is accurate.
by dns_snek | 2025-12-10 13:49:18+00:00
> My router _shouldn't_ have a globally recognized certificate, because it's not on a publicly visible host.

If you're not encrypting local network traffic then any rogue device on that network can decide to intercept it and steal your admin password. That's one of the biggest reasons why we adopted HTTPS in the first place - whether a host is public or not isn't relevant.

It doesn't need a "globally" recognized certificate signed by a public CA, self-signed ones are fine. At home I manage mine with XCA. I have a root CA that's installed on all of my devices, with name constrains set to ".internal", ensuring it can't be used to sign certificates for any other domains.
1…765432100 – Unix Time Sequence Holiday on December 11
by sampaio96 | 2025-12-10 13:49:25+00:00
It's a Unix Time Sequence holiday! On December 11, at 05:48:20 am (00:48:20 am EST), the Unix Timestamp will be a beautiful sequence.

1765432100

Past sequences: 1234567890 Friday, February 13, 2009 11:31:30 PM

Next sequences: 1876543210 Tuesday, June 19, 2029 6:00:10 AM

1987654321 Sunday, December 26, 2032 6:12:01 AM

Other holidays: 1000000000 Sunday, September 9, 2001 1:46:40 AM

2000000000 Wednesday, May 18, 2033 3:33:20 AM
by estearum | 2025-12-10 13:49:26+00:00
We don't disagree that that's my (as someone on the anti-Trump side) only reasonable option.

Where we disagree is your assertion that that is the necessary and sufficient solution.

Those are entirely distinct claims.

People have won elections for a long long time without pragmatic solutions to real problems (case in point: 2024). You have basically zero evidence this is even a relevant point in elections whatsoever.

The actual necessary solution is entirely on the GOP's side. So long as they're in the throes of a cult of personality, then a sufficiently large part of the electorate will be immune to logic.

And yes: this is very bad. It is a deeply inconvenient fact, but the inconvenience of it does not render it less factual.
Ask HN: When is the last time you wished the docs were in a single file?
by tonyaldon | 2025-12-10 13:49:29+00:00
For me, it was today. Not the first time I've felt this.

I'm convinced dev docs for most projects should live in a single text file.

Everyone can open it in their preferred IDE and find or replace what they need. Search on docs websites is often broken. But not in my editor, and not in yours either.

Copy-pasting snippets is easy, with no context switching. You can pass the file as context to your preferred AI assistant. No need for extra tools to gather every tiny piece scattered across many files.

It's so simple that I don't understand why this isn't the norm.

What about you?
by viraptor | 2025-12-10 13:49:33+00:00
The amount of unsafe is pretty small and limited to where the interfacing with io or relevant stuff is actually happening. For example (random selection) https://lkml.org/lkml/2023/3/7/764 has a few unsafes, but either: a) trivial structure access, or b) documented regarding why it's valid. The rest of the code still benefits.

But that's not the only reason Rust is useful - see the end of the write-up from the module author https://asahilinux.org/2022/11/tales-of-the-m1-gpu/ ("Rust is magical!" section)
by chrilleweb | 2025-12-10 13:50:12+00:00
Hi HN,

I recently released an open-source tool that solves a real problem I kept running into, and now I’m wondering how other developers get visibility for their projects.

I'm not trying to “promote” anything here — I’m genuinely curious about the process. I’ve posted on GitHub Discussions and Reddit, but it’s still hard to get people to notice a new repo unless it randomly hits the right place at the right time.

Do i need to do anything else on my repo?
by Cthulhu_ | 2025-12-10 13:50:36+00:00
> it seems like too much time is spent on eye candy, monetization and dark patterns and too few times on things people actually like to see

Not necessarily, but you need to look at the indie (PC) game space instead of AAA and mobile.

Top level game development in the 90's is comparable to indie games today, although granted, in the 90's they made huge technological leaps and the developers needed a lot more in-depth knowledge. But I can guarantee that someone can build Warcraft 2 today within a year. Hell, you can get the basics set up in a weekend I'm sure.

That said, even indie games suffer a bit from scope creep, and few developers actually limit themselves by saying "we release within a year and that's it". If a game is successful, continued development is beneficial. And with Kickstarter they can get money upfront (like what a publisher would pay initially), and with early access they can start making revenue to fund continued development. Which is a self-reinforcing cycle - as long as they publish updates and new features, people will keep playing and buying the game. Some games (like Factorio) end up in early access and continuous development for 10 years.
by xnorswap | 2025-12-10 13:50:40+00:00
Those "trial balloons" happened years ago, this is only news because it was pulled and because it was a pretty bad advert anyway. Coca-cola had some backlash for its use of AI in adverts ages ago and carried on anyway.

There's tons of gen-AI in adverts and most of it isn't newsworthy. The frog is stewed.
by bigfishrunning | 2025-12-10 13:51:24+00:00
You should learn some, you might change your opinion! At the end of the day, having some pressure to select for kernel developers that are open minded and willing to learn new things might not be a bad thing. And at any rate, C will be a big part of kernel development forever, so those unwilling to learn new tools or techniques can still contribute in a meaningful way if they want to.
by JumpCrisscross | 2025-12-10 13:51:38+00:00
> if AI can do all dev work, there's no reason it can't do all office work to replace every human in front of a keyboard

There are plenty of reasons.

Radiologists aren’t being replaced by AI because of liability. Same for e.g. civil engineers. Coders don’t have liability for shipping shit code. That makes switching to an AI that’s equally blameless easier.

Also, data: the web is first and foremost a lot of code. AI is getting good at coding first for good reason.

Finally, as OP says, the hard work in engineering is actually scoping requirements and then executing and iterating on that. Some of that is technical know-how. A lot is also political and social skills. Again, customers are okay with a vibe-coded website in a way most people are not with even support chatbots.
by TrackerFF | 2025-12-10 13:52:09+00:00
AI models, likely. My prediction:

You'll sign a waiver / consent form agreeing that they can scan and copy the contents of your phone, and gain access to your social media profiles. Then they'll feed all that content into some AI system which looks for "suspicious" activity, which I'm guessing means:

- Pro Palestine or Anti-Israel content.

- Support for any declared terrorist organizations.

- Content related to drugs and drug paraphernalia.

- Content critical to USA, in any shape or form.

I further assume that if the models detect such things, you'll be brought into questioning - and depending on how severe the issues are, you'll either get to enter the country, or be deported back.

People tend to forget that the CBP officers have pretty much supreme control, and the last word on who gets to enter and who don't. They can deny you entry on pretty much any suspicion and hunch.
by dogemaster2028 | 2025-12-10 13:52:41+00:00
- Jon Richelieu-Booth for posting a picture of himself with a gun in the US

- Jordan Parlour for Facebook posts that were deemed ‘hateful.’

- Bernadette Spofforth for a post with a “mild inaccuracy”

- Maxie Allen and Rosalind Levine, after raising concerns in a private parents’ WhatsApp group about the hiring process of their daughter’s school

- Lucy Connolly, for a post calling for mass deportation and to set fire to hotels housing immigrants

- Norbert Gyurcsik, for having “extreme right wing music”

Germany, you too.
by theshrike79 | 2025-12-10 13:53:55+00:00
Yes, let's have the stohastic parrot guessing machine run executables on the project manager's computer - that can only end well, right? =)

But you're right, Skills and hosted scripting environments are the future for agents.

Instead of Claude first getting everything from system A and then system B and then filtering them to feed into system C it can do all that with a script inside a "virtual machine", which optimises the calls so that it doesn't need to waste context and bandwidth shoveling around unnecessary data.
by rncode | 2025-12-10 13:53:56+00:00
We just dropped a new open source project: CUDA to cuTile transpiler for NVIDIA's CUDA 13.1

We built a transpiler that converts your CUDA kernels to cuTile automatically. It figures out what your kernel does (flash attention, matrix multiplication, RoPE) and writes the cuTile version

Zero AI involved! It's pure pattern matching and code analysis

Currently supports 18 kernel patterns: - Core: GEMM, Reduction, Scan, Stencil, Elementwise, FFT - ML/DL: Convolution (1D/2D/3D), Pooling, Normalization - LLM: Flash Attention, RoPE, KV Cache, Quantization (INT8/FP8) - Specialized: Sparse matrices, Histogram, Sorting

Contributions we need:More kernel pattern templates