MurphyA/hacker-news huggingface dataset:
by GarantSnus | 2025-12-15 14:44:54+00:00
Garant Snus is a premium manufacturer of nicotine pouches that has been on the market since May 2020, at the very early stage of this product category’s emergence. We work exclusively with wholesale clients and use only high-quality, expensive European ingredients to ensure one of the best products in the industry. Each can contains 27 pouches—more than the typical 20–22 offered by competitors—highlighting our commitment to value and customer-centric standards. Known for fast communication, quick order dispatch, and a personalized approach, Garant Snus delivers not only a premium product but also a reliable, high-level service experience for long-term partners.
by lm28469 | 2025-12-15 14:45:13+00:00
Same for drones, and you know why? Because all of these civilian technologies can be easily leveraged for military... so a) they get the good stuff first because they're leading the sector and b) western countries buy their shit instead of making their own, which means we don't develop the tech and we effectively subsidise theirs

Can't blame them really, they mastered the rules of the game we forced them to play.
by asix66 | 2025-12-15 14:45:15+00:00
Yes. Macrumors here says “don’t buy” [0], but only because they tend to recommend only if tech is “new”. I have this ATv gen and it’s not perfect, but is really the best streaming box, having used roku and nvidia shield. PS: get the version with wired ethernet if you can…wifi works, but no surprise that wired is more solid.

[0] https://www.macrumors.com/roundup/apple-tv/
by dwa3592 | 2025-12-15 14:46:01+00:00
That's what I thought and hence I bought the eufy model with a lidar; I also thought maybe the technology in 2025 is more mature but it wasn't the case. It would complain about obstacles even thought there was nothing on the ground. Maybe I was unlucky both the times but I am just way more satisfied when I clean the house with my $100 hand held vaccum haha.
by lapcat | 2025-12-15 14:46:10+00:00
> society has been caught with its pants down by the speed of innovation.

Or rather by the slowness of regulation and enforcement in the face of blatant copyright violation.

We've seen this before, for example with YouTube, which became the go-to place for videos by allowing copyrighted material to be uploaded and hosted en masse, and then a company that was already a search engine monopoly was somehow allowed to acquire YouTube, thereby extending and reinforcing Google's monopolization of the web.
Show HN: DomainOptic – scanned 20 HN sites for secrets and exposed endpoints
by renbuilds | 2025-12-15 14:46:31+00:00
I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints.

https://domainoptic.com/audit

Unlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths.

Tested it on 20 sites from Hacker News over the last two days. All indie projects, side hustles, Show HN launches.

Results:

- 1 site had 6 actual secrets (1 cloud credential, 5 API keys)

- 5 sites (25%) had exposed API documentation (/swagger, /graphql, /api-docs)

- 2 sites had critical-level endpoint exposure

- 100% scan consistency on re-tests

The site with secrets wasn't some abandoned project. It launched recently. The founders probably don't know.

What the scanner checks:

1. Secret Scanner - patterns matching AWS, Stripe, Firebase, generic API keys in your compiled JS

2. Ghost API Hunter - probes for /swagger, /api-docs, /graphql, debug routes

To be clear: not every pattern is a real secret. Firebase client configs are public by design. The tool flags patterns worth investigating.

If you want to see it work before scanning your own site, try wirier.com it's a demo site I built with intentionally planted secrets.

Free. No signup. one click scanning.

Curious what others find on their own sites.
by baggachipz | 2025-12-15 14:46:36+00:00
Totally agree on those points too, but I think you're giving US companies too much credit when you say:

> playing the long game while we're playing the "whose dick I have to suck to get a better position in the next 5 years"

5 years is generous. I'd say a year at most. Just keep delivering gold statues to the White House in order curry favor for a little while longer; meanwhile, keep chasing the profits at the expense of longevity, as required by law for public companies.
by jqpabc123 | 2025-12-15 14:46:41+00:00
It’s no different from the whole search for Bigfoot, Sasquatch, Yeti, that whole thing.

Well, actually it is.

In the case of Bigfoot, Sasquatch and Yeti; you don't have multiple, simultaneous, highly trained observers with both visuals and instrumentation reporting something that shouldn't exist.

It's not physical evidence but it isn't exactly hearsay either.
by cube00 | 2025-12-15 14:46:58+00:00
> But I'll have to improve code quality first.

Don't fall into this trap, strike while the HN iron is hot, all these people +1'ing will never come back when you're eventually happy the code quality is "improved"

If it's truly that bad you'll benefit from the feedback since it's an internet exposed service, although considering you're a professional freelancer, I'm sure it's fine.
by the__alchemist | 2025-12-15 14:46:59+00:00
I feel like Arduino has lost its unique place in all but mindshare 5+ years ago. What I would recommend as a default:

- Wi-Fi: Esp Risc-V (C3 etc) - BLE without Wi-Fi (Or ANTD): Nordic. Also a good choice in general for simple devices - General-purpose, including high-performance, low-power, and high I/O: Stm32

Use whichever IDE is suitable for the language you're programming in. (Jetbrains, Zed, VsCode etc). Use the specialty IDEs like Cube for viewing pinouts and configuring hardware as a reference.

If using rust, probe-rs + cargo is a "just works" CLI workflow to compile, flash, and debug.
by yuriks | 2025-12-15 14:47:23+00:00
Needs a (2020) in the title. I don't think anything major is outdated, but in particular in section 10, one of the desired syntaxes is now supported as an unstable feature but there wasn't any mention of that:

#![feature(closure_lifetime_binder)] fn main() { let identity = for<'a> |x: &'a i32| -> &'a i32 { x }; }
by bhouston | 2025-12-15 14:47:24+00:00
> Personally, I have a Roomba I bought in Jan 2019 that's still doing just fine (So 7 years now).

BTW I just found on a bunch of robotic vacuum websites that 4-6 years is the quoted expected lifespan with maintenance:

https://us.narwal.com/blogs/product/how-long-robot-vacuums-l...

https://ca.dreametech.com/blogs/blog/how-long-do-robot-vacuu...

https://au.roborock.com/blogs/roborock-au/how-long-do-robot-...

I think that likely means without maintenance it is a little less.
by evilduck | 2025-12-15 14:48:47+00:00
You commented in context of digital education. The point is that your argument of Chromebooks comparing better to iPads doesn't apply in this situation. In fact they're often worse because schools deploy the cheapest, lowest common denominator Chromebooks with slow CPUs, horrible screen resolutions, inadequate RAM and terrible battery life. Kids hate them. The fact that good and uncrippled Chromebooks exists doesn't help them at all. A 5 year old iPad is likely a better experience and a more capable OS and device than a new Chromebook issued to students this fall, but the warranty and repair costs for schools dealing with careless kids don't add up to less so they get the cheaper option.
by mothballed | 2025-12-15 14:48:56+00:00
Mr. Lai has often been lauded as one of the strongest defenders of free thought in Hong Kong, publishing under the Apple Daily even as the Chinese government took back control.

Lai was one of the richest men in Hong Kong, starting out as a child laborer in the textile industry and self made working his way up to owning the clothing brand Giordano. He founded a publishing enterprise after finding his fortune in the textile business. He was first arrested in 2020 as the Chinese government started to grip power in HK.
by sdscpp | 2025-12-15 14:50:07+00:00
The Production Problem You’re pushing 500K messages per second between processes and your sys CPU time is through the roof. Your profiler shows mq_send() and mq_receive() dominating the flame graph. Each message is tiny—maybe 64 bytes—but you’re burning 40% CPU just on IPC overhead.

This isn’t a hypothetical. LinkedIn’s Kafka producers hit exactly this wall. Message queue syscalls were killing throughput. They switched to shared memory ring buffers and saw context switches drop from 100K/sec to near-zero. The difference? Every message queue operation is a syscall with user→kernel→user memory copies. Shared memory lets you write directly to memory the other process can read. No syscall after setup, no context switch, no copy.

The performance cliff sneaks up on you. At low rates, message queues work fine—the kernel handles synchronization and you get clean blocking semantics. But scale up and suddenly you’re paying 60-100ns per syscall, plus the cost of copying data twice and context switching when queues block. Shared memory with lock-free algorithms can hit sub-microsecond latencies, but you’re now responsible for synchronization, cache coherency, and cleanup if a process crashes mid-operation.
Show HN: I built an AI portfolio manager and entrusted it with $50k
by regnull | 2025-12-15 14:50:13+00:00
My investing performance so far was, quite honestly, mediocre. It’s not like I’m making terrible investment decisions, it’s more about not being able to consistently manage my portfolio. I’m getting distracted by other projects, leaving my portfolio in free float, which, ultimately, doesn’t work great.

So, the idea was to create a reasonable portfolio manager that watches your portfolio, and alerts you (relatively infrequently) when the action is needed. I’m not looking to YOLO to the moon, I’m looking for some reasonable, middle-of-the-road advice and consistent monitoring. This is why I built my portfolio manager, https://portfoliogenius.ai

In the spirit of putting my money where my mouth is, I have $50k to manage since July this year. Currently, it’s about 7.5% up, which is consistent with the goal I gave it - moderate risk portfolio, with some crypto exposure. Yes, S&P was up 12%, but it is expected given that I aimed for lower risk, and a large portion of the portfolio is bonds and treasury ETFs. The performance was hurt by the recent BTC slide, but thankfully it insisted on keeping the crypto sleeve small, about 5% of the whole portfolio.

There were a few things that surprised me. Some investment choices are conventional, but some are quite interesting. For example, it recommended buying ICLN back in July (global clean energy ETF), which was strange given the political climate. But I resolved to do everything it recommends, so I did. ICLN is up 25% since.

I also had plenty of fun running portfolios managed by different models to compare performance. So far, Gemini 3 Pro seems to be the best, but it may very well change in the longer run.

For the tech stack, I use LangChain with a bunch of tools - Tiingo for stock/crypto prices, Brave for news/web search, and my custom news processing service which summarizes daily news and generates macro economic snapshots. I also have some custom tools to help with the tasks such as portfolio design and trade recommendations.

The platform is free for now, and I intend to keep it free for the early adopters (give away premium subscriptions when it is introduced).

I would be grateful for any feedback, specifically if you feel that such a tool can be useful for you, and what functionality would you like to see.
by 7thaccount | 2025-12-15 14:51:02+00:00
https://8th-dev.com/words.html

https://8th-dev.com/manual.html

Not sure if that is the best example, but go to the "network" section and you can see plenty of examples of connection stuff. Also cool things in the map, graph, console, hardware, DB (database), and nuklear (GUI) sections.

It is commercial though (albeit with a free tier iirc), so that may or may not be attractive for you if you wanted to see all source. For me, I just wanted to spend time playing around with a well polished ~forth that had all these things builtin, so fine for my more limited use cases. Coming from Python as my daily driver, I found it really easy to pickup the tooling and have fun building some super simple toy apps. The most default data structure is basically JSON, which is a pretty unconventional forth approach, but just clicked with me as I'm used to Python dictionaries. You might also be able to do all that with gForth, but not sure (referring to the ease of use from high level data structures).

There was also a forth-like language written in C# that was open source I think and pretty cool. It might have been retroforth which is available in various formats and has been talked about on here many times. I think the source comes with the zip file, but haven't looked in years. I assume it has some utility libraries for doing normal things.
by zdware | 2025-12-15 14:51:15+00:00
Right, there's always room for the "exception" in startup land. But majority will fail right? For me personally, it just wasn't worth the risk to jump, especially given this surge of AI right now. Also, already working at a fintech company has shown me that margins can be razor thin/tiny at times, depending on the product. For Mesa, I am guessing they relied upon interchange fees, partnership/commissions, and interest income.
by binary132 | 2025-12-15 14:51:21+00:00
It’s extremely convenient for certain things. For example, let’s say I’m referring to an enum constant field of a deeply-nested type. This can easily be expressed as “auto k = a.b.c.d.kind” instead of “Alpha::Bet::Charlie::Delta::Kinds k = a.b.c.d.kind”. It should be used sparingly in local contexts where the meaning cannot be confusing.
by dboreham | 2025-12-15 14:51:22+00:00
Present day AI is a box that has these properties: a human has to create its inputs; a human has to verify its outputs; a human has to create the next input based on the last output. Extremely useful for sure, but this is not the kind of box you can use to scale a service delivered directly to end users who can't perform the activities labeled "human" in the sentence above.
by tracker1 | 2025-12-15 14:51:26+00:00
It's a pretty big deal as without an actual JSON data type queries are really parsing against strings for every action, which is much much slower in practice.

Most of the JSON functions added in iirc MS-SQL 2016 really performed poorly and is a significant reason why denormalized JSON data was used very sparingly... with actual JSON data types (assuming a binary deserialized form of storage), then queries and operations against that underlying data structure can run significantly faster.

I've been pretty critical of it since I tried using it for a few things a few years ago... it still worked well enough for the needs of what it was doing, but I'm glad that it's doing better.

For reference, what it was being used for was to semi-normalize most stored procedures to receive 2 argumenst and return 2. All JSON... the first argument would be the claims portion of the JWT for the service, the second would be a serialized typed request object representing the request to the service and the two results are the natural results to the sproc as well as an error result if an error occurred. This allowed for a very simplified API surface (basically 4 utility methods being used for all API calls), in the project in question it was a requirement for data logic to be inside the database, of which I'm not a fan, but it did work out pretty well for what it was. Other isseus not withstanding.
by vlugovsky | 2025-12-15 14:52:02+00:00
I'm building a vibe-coding platform that helps with building internal apps and dashboards, and this is exactly what I have seen with some of our clients.

A couple of them mentioned that they plan to cancel subscriptions totaling more than $100k/year for the apps they will replace with that SaaS. According to them, they have many subscriptions they keep only because of one feature. Another issue is that their workflows become a real mess when they need to copy and paste data into multiple tabs. Custom-built internal tools seem like an obvious solution. Those who migrate to custom-built tools, however, will face the challenge of orchestrating their lifecycle and creating a consistent deployment workflow, but this is one of the challenges we are trying to solve at UI Bakery.

In my understanding, SaaS products that provide customers access to proprietary data are in a much better position than other SaaS platforms. HubSpot’s acquisition of Clearbit a couple of years ago now makes even more sense because it will help them retain some of their clients.
by mytailorisrich | 2025-12-15 14:52:27+00:00
Germany benefited a lot from China. It used to be that most cars in China were German brands, for instance.

I think Germany has overly thought itself "superior" so to speak: perhaps Germany thought that China was a market to exploit forever because German products were, obviously, superior and China was, obviously, not able to produce many or to compete.

It seems to me that this "symbiotic partnership" is an euphemism for knowing your place...
by gempir | 2025-12-15 14:52:39+00:00
Installing Valetudo stops any firmeware updates forever from the OEM. [1]

I wouldn't consider it a hack. It's an alternative way to run your vacuum, with yes potentially less features if the OEM makes a lot of future updates, but Valetudo also comes with their own set of updates.

[1] https://valetudo.cloud/pages/usage/firmware-updates.html
by schoen | 2025-12-15 14:52:49+00:00
I was just thinking about this earlier today when washing my hands in the sink.

When you first turn on the hot water tap in most homes, the water that comes out is cold. After some period of time, hotter water starts to come out. My mom used to describe this as "waiting for the water to warm up".

For decades, I didn't consider the mechanism behind this. That is that there is water in the pipes between the home water heater and the tap. That water can't retain its heat without any further heat input, and gradually loses heat and comes into near-equilibrium with the temperature of the rest of the house. The hot water inside the water heater tank, on the other hand, is constantly being reheated as necessary by a heating element.

When you turn on the tap, after not having used it for some time, you're waiting for cold water from the pipes to be flushed out through the tap and be replaced with freshly heated water from the tank. Once this happens, the water coming out of the tap will be hot because it's been heated recently enough.

I probably didn't realize this until I was about 30 years old, and then I thought of Feynman's anecdote of his students not connecting their theoretical knowledge to understand the mechanism of a real physical situation. It seems I wasn't curious enough as a child to apply my own knowledge to the mechanism of the hot water tap!
by linsomniac | 2025-12-15 14:52:51+00:00
>.e. LLMs gave you a 10x boost. I would expect it to be less than that though, like maybe a 2x boost

I'm not a frontend guy, I'm an operations guy that sometimes does some backends. So it's likely a solid 2.5 days for me to build the pair of these, probably more I haven't touched Javascript in over a decade.
by krackout | 2025-12-15 14:52:51+00:00
I got incredibly accurate output on my terminal emulator using a nerd font (st with Iosevka Nerd Font, tmux, links2 browser).

Out of curiosity I checked with lsof, apparently other fonts are used as fallback:

/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf

/usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf

/usr/local/share/fonts/MS/segmdl2.ttf

/usr/local/share/fonts/MS/seguisym.ttf

/usr/local/share/fonts/nerd/Iosevka/IosevkaNerdFont-Regular.ttf

/usr/local/share/fonts/nerd/JetBrainsMono/JetBrainsMonoNerdFontMono-Regular.ttf

At least the result is perfect!
by barnas2 | 2025-12-15 14:52:56+00:00
>On a vaguely related note, driving 3000 kilometers through Europe in an electric car was surprisingly nice.

I did 2 cross country road trips here in the US (~5000mi/8000km total) and had a similar experience. The nav's automatic charger routing did a great job, and we had 0 issues with charging.
by crazygringo | 2025-12-15 14:53:09+00:00
> The thing is, those robots really don't solve a real problem as vacuuming and mopping are the easiest and quickest job when it comes to cleaning the house.

Hard disagree, because vacuuming is something you often need to do daily. Spending 10 min/day becomes over an hour a week. That's a significant chunk. If you have smooth floors, running a Roomba kind of becomes a no-brainer.

On the other hand, I only need to dust once a week, and that takes all of 10 minutes. Cleaning the bathroom is similarly once a week (assuming you wipe/brush the sink and toilet bowl as necessary after use).

Reducing vacuuming time, to me, is the #1 thing you can do to save cleaning time, if you live in a Roomba-compatible space.
by dpedu | 2025-12-15 14:53:58+00:00
I used to have a similar dumb one (Roomba 860 if memory serves) and it would take the same path over and over again in certain corners of my house, which meant my carpet ended up with unsightly wheel tracks on it from the repetition. I don't think it did a very good job vacuuming either, no matter how much it ran, a normal vacuum would always pull a boatload more crud up.

It's an interesting idea but it just didn't work for me and I wouldn't consider buying another.
by agentultra | 2025-12-15 14:54:00+00:00
This seems to assume that these non-technical people have the expertise to evaluate LLM/agent generated solutions.

The problem of this tooling is that it cannot deploy code on its own. It needs a human to take the fall when it generates errors that lose people money, break laws, cause harm, etc. Humans are supposed to be reviewing all of the code before it goes out but you’re assumption is that people without the skills to read code let alone deploy and run it are going to do it with agents without a human in the loop.

All those non-technical users have to do is approve that app, manage to deploy and run it themselves somehow, and wait for the security breach to lose their jobs.
by severino | 2025-12-15 14:54:04+00:00
> How would you feel if Roomba devices were controlled by North Korea, for example?

Depends on where you live. If you are living in North Korea and somehow you got to own a Roomba, it would be surely a bad thing.

But living in a western country, I would hands down prefer giving all my secrets to the North Korean government instead of my own one.
by carlosjobim | 2025-12-15 14:54:26+00:00
Have you ever done anything together with a group of other people? That is a company. That's why they are called companies. They are a group of people doing things.

That has existed for millions of years already. First as hunting companies, then as raiding companies. It exists in other species as well. It will never go away. It has existed in every human society, no matter what political or economical ideology.

The real question is how companies should be organized and owned.
by pjc50 | 2025-12-15 14:54:40+00:00
Both of those are extremely recyclable and have more manageable separation problems. There's not much of a solar recycling industry because the panels generally have longer lifetimes than the minimum advertised - they last until weather damage.

(the thin film ones are a separate category, some of which contain more poisonous materials, but fortunately they were never really economic)