MurphyA/hacker-news huggingface dataset:
by dabockster | 2025-12-19 22:44:15+00:00
Edge still has a ton of stuff specific to Windows in it, mostly for business/enterprise use. It is probably the most no-code configurable browser out there if you go through Group Policy, with an effective guarantee that all of those settings will work (including the settings that disable all Telemetry data collection - yes those exist).

The 100% no-code part of the config process is something I have not seen largely in competing browsers - even Chrome.
by twoodfin | 2025-12-19 22:44:29+00:00
If we’re arguing about strategic decisions made a decade ago in this context, aren’t we really arguing about whether any company should ever fail?

This is Matt Stoller throwing a bunch of dust in the air because he wants to have been right when he was glad Khan shut down the merger, and then right again when the husk of iRobot sold out to the Chinese. Because Matt is always right, and “Wall Street” is always wrong.
by jesse__ | 2025-12-19 22:44:29+00:00
I agree that what you're saying is true, but in the context of my comment, I stand by the statement that cycles/op is still a more meaningful measurement of performance than seconds.

---

Counter-nitpick .. your statement of "if you put a bunch of other instructions around it" assumes there are no data dependencies between instructions.

In the example you gave:

FloatMul ADD MUL DIV

Sure .. if all of those are operating on independent data sources, they could conceivably retire on the same cycle, but in the context of the article (approximating the performance profile of a series of operations) we're assuming they have data dependencies on one another, and are going to be executed serially.
by theropost | 2025-12-19 22:44:32+00:00
I think this kind of critique often leans too hard on “security through obscurity” as a cheap punchline, without acknowledging that real systems are layered, pragmatic, and operated by humans with varying skill levels. An open firmware repository, by itself, is not a failure. In many cases it is the opposite: transparency that allows scrutiny, reproducibility, and faster remediation. The real risk is not that attackers can see firmware, but that defenders assume secrecy is doing work that proper controls should be doing anyway.

What worries me more is security through herd mentality, where everyone copies the same patterns, tooling, and assumptions. When one breaks, they all break. Some obscurity, used deliberately, can raise the bar against casual incompetence and lazy attacks, which, frankly, account for far more incidents than sophisticated adversaries. We should absolutely design systems that are easy to operate safely, but there is a difference between “simple to use” and “safe to run critical infrastructure.” Not every button should be green, and not every role should be interchangeable. If an approach only works when no one understands it, that is bad security. But if it fails because operators cannot grasp basic layered defenses, that is a staffing and governance problem, not a philosophy one.
by gnabgib | 2025-12-19 22:44:50+00:00
The files: justice.gov (15 points) https://news.ycombinator.com/item?id=46330860

The risk: DOJ won't meet Friday deadline to release all the Epstein files (22 points, 9 comments) https://news.ycombinator.com/item?id=46328032

A slice: Bill Gates and Sergey Brin among newly released Epstein photos (14 points) https://news.ycombinator.com/item?id=46318958
by raw_anon_1111 | 2025-12-19 22:44:52+00:00
These are typical questions I ask when I’m interviewing a senior developer:

“Tell me about a project you’re most proud of?” Then I’m going to start asking questions about your decision making process, how you dealt with complexity and ambiguity, etc.

If all you did was pull well defined tickets off the Jira board, you’re not going to be able to answer that question well and you aren’t the type of person I’m going to delegate a very ambiguous assignment where you have to make good architectural and organizational decisions and have to deal with “the business” to disambiguate.

The next question would be “Looking at your resume, I see you have $x years of experience, if you could go back to one of your earlier projects, what choices would you have made differently knowing what you know now?”

If you haven’t led any major initiative, what are you going to say? “I would have pulled more tickets off the board?”

I interviewed someone from AWS at my last job, he thought he was a shoo in especially after he looked on LinkedIn and saw that I was from AWS. I guess he thought he was going to be reversing a binary tree.

No matter what I asked, he couldn’t describe anything he had done of note except be on a team who did stuff. I asked him had he led any features, presented any “six pagers” internally, blog posts on the AWS site, presentations - he had done nothing.

I passed over him for a guy at an unknown company who could talk about where he “took ownership”. That’s one of the Amazon BS Leadership Principals.

Hell I had a public footprint at AWS after only 3.5 years I had been there as a mid level L5 employee.
by stragies | 2025-12-19 22:47:01+00:00
Is there a table of supported hardware, that contains info about the USB-connection (or ethernet) on these devices. Like, which have data-lines connected, can the device electrically do host and device mode? Can I use a POE2USBC adapter, that presents itself as a USB-network device to the camera? Ability to filter on those columns would be great. Is thingino using the Ingenic linux kernel 3.ancient SDK version, or do they have/use something newer?
by everythingfine9 | 2025-12-19 22:47:03+00:00
Wow, this is needlessly antagonistic. Given the emergence of online communities that bond on conspiracy theories and racist philosophies in the 20th century, it's not hard to imagine the consequences of widely disseminating an LLM that could be used to propagate and further these discredited (for example, racial) scientific theories for bad ends by uneducated people in these online communities.

We can debate on whether it's good or not, but ultimately they're publishing it and in some very small way responsible for some of its ends. At least that's how I can see their interest in disseminating the use of the LLM through a responsible framework.
by viraptor | 2025-12-19 22:47:24+00:00
> To really know if code works, I need to run Temporal, two Next.js apps, several Python workers, and a Node worker. Some of this is Dockerized, some isn’t. Then I need a browser to run manual checks.

There's your problem. It doesn't matter how you produce the code in this environment. Your testing seems the bottleneck and you need to figure out how to decouple that system while preserving the safety of interfaces.

How to do it depends heavily on the environment. Maybe look at design by contracts for some ideas? Things are going to get a lot better if you can start trying things out in a single project without requiring the whole environment and the kitchen sink.

Solving this would improve a lot of things, including LLM success and iteration speed since you could make changes in one place and know which other systems are going to be affected. (Or know that a local change/test is all that's needed)
by igor47 | 2025-12-19 22:47:28+00:00
I don't know of any public EAs who endorsed Elon's crusade against American institutions -- can you name some?

Re: pseudo-alternative to proper public service -- 80,000 hours is product of the EA movement, which aims to steer people to be effective with their career. It was transformative for me at the right moment, and helped me choice between going deeper into FAANG vs devoting my career to causes that matter (though, checking the website now, almost 10 years later, I do wish they were less AI-risk focused).

Re: redistribution -- I think this is an orthogonal concern to EA, and it's unfair to expect a movement focused on altruism and philosophy to also focus on redistribution. FWIW, I am in favor of both EA and redistribution, I don't believe there's any tension between these.

I think the crux of your criticism is, "some people who are bad or whom I don't like endorse EA, or perhaps use EA to justify thair baditude". I think this is a bad argument. For every position you hold, I could find a bad person who endorses it. For instance, you seem to be in favor of redistribution. You know who else was in favor of redistribution? Stalin! And he killed millions of people. This way of thinking is good for one thing and one thing only -- shutting down thought.
by rconti | 2025-12-19 22:47:31+00:00
The short video platforms are almost exclusively individual-algorithmic garbage-recommending platforms designed for maximum passivity.

A couple major differences here are:

* Not video

* Meant more for commmunity/interactivity

* Not individual algorithmic

So a site like this optimizes for most-user-upvoted content, to try to surface content that is found interesting by people who are presumably somewhat like you. That seems pretty different from a self-serving platform that optimizes for whatever keeps you from blinking.
by jp8585 | 2025-12-19 22:48:24+00:00
Anthropic released 1,250 interviews about AI at work. Their headline: "predominantly positive sentiments." We ran the same interviews through structured LLM analysis, and the true story is a bit different.

Key findings: • 85.7% have unresolved tensions (efficiency vs quality, convenience vs skill) • Creatives struggle MOST yet adopt FASTEST • Scientists have lowest anxiety despite lowest trust (see ai as a tool, plain and simple) • 52% of creatives frame AI through "authenticity" (using it makes them feel like a fraud)

Same data, different lens. Full methodology at bottom of page. Analysis: https://www.playbookatlas.com/research/ai-adoption-explorer Dataset: https://huggingface.co/datasets/Anthropic/AnthropicInterview...
by danudey | 2025-12-19 22:49:28+00:00
Debian's `unzip` utility, which is based off of Info-ZIP but with a number of patches, errors out on overlapping files, though not before making a 21 MB file named `0` - presumably the only non-overlapping file.

unzip zbsm.zip Archive: zbsm.zip inflating: 0 error: invalid zip file with overlapped components (possible zip bomb)

This seems to have been done in a patch to address https://nvd.nist.gov/vuln/detail/cve-2019-13232

https://sources.debian.org/patches/unzip/6.0-29/23-cve-2019-...
by sipofwater | 2025-12-19 22:49:35+00:00
* "CIFS vs SMB: What's the Difference?" "CIFS, SMB, Samba, and NFS are technologies used to network client and server systems. Learn the difference between them and which to use when.": https://www.varonis.com/blog/cifs-vs-smb

* "Mount Windows 11 Home Folders on WSL2 for Better Performance": https://gist.github.com/flamewave000/6958ac263e194d3f1962f51... (gist.github.com/flamewave000/6958ac263e194d3f1962f517258d4c41)
by estimator7292 | 2025-12-19 22:49:53+00:00
Because a shared cultural identity is vital to maintain a cohesive society that can muster the collective resources to get shit done?

The world is shaped by psychology and the actions of a very very few individuals at the peak of their respective societies. Material conditions merely enable success brought by cultural motivation.

Your argument really only holds water if you consider all humans to be fungible worker drones and that culture doesn't exist. The human factor is the critical factor in all of history. Material wealth does not magically produce innovation. The Romans could have started the industrial revolution a thousand years earlier, they had effectively unlimited resources. They simply lacked the cultural spark to pursue that line of research and industry. They even literally invented a steam engine a thousand years before modern times.
by tyre | 2025-12-19 22:51:00+00:00
Obviously what you need to say but the reality is that you’re not in control anymore. That’s what an acquisition is.

If Cursor wants to re-allocate resources or merge Graphite into to editor or stagnate development and use it as a marketing/lead gen channel, it will for the business.

Anything said at time of acquisition isn’t trustworthy. Not because people are lying at the time (I don’t think you are!) but because these deals give up leverage and control explicitly. If they only wanted tighter integration, they could fund that via equity investment or staffing engineers (+/- paying Graphite to do the same.) Companies acquire for a reason and it isn’t to let the team + product stay independent
by moregrist | 2025-12-19 22:51:27+00:00
> But maybe I’m not educated enough in socialism to understand the nuances

Socialism is when the government owns businesses or entire industries.

Regulation is when the government has rules that companies have to play by.

The FTC is involved in regulation, not socialism.

Not all anti-capitalist actions are socialism. Not all socialism is anticapitalist.

You can disagree with a lot of things that the US government did under Biden. None of them were socialism. The closest recent example we have of socialism is the US government taking a 10% ownership stake in Intel. Which happened under Trump.

The previous best examples were all during the fall-out of the great financial crisis as part of TARP.

In retrospect, I think TARP was ultimately a pretty capitalist-friendly form of socialism. I am less sure about the Intel stake.
Show HN: Prompt optimizer for vibe-coding with LLMs
by rubenhellman | 2025-12-19 22:51:28+00:00
I’ve been working on a small tool aimed at reducing prompt friction in vibe-coding workflows.

In practice, a lot of iteration comes from underspecified prompts: missing constraints, unclear scope, implicit assumptions, or mixed intent. This tool takes a rough, natural-language description of what you want to build and rewrites it into a more explicit, structured prompt with clearer requirements and context before it’s sent to the model.

The focus is on:

Making intent, constraints, and assumptions explicit

Reducing prompt churn and micro-iterations

Improving first-pass output quality, especially for non-technical builders

It’s primarily designed around vibe-coding use cases (rapid prototyping, AI-assisted building) and works best with Lovable/Claude-style workflows, though it’s model-agnostic in concept.

Very interested in technical feedback:

Is prompt normalization / restructuring something you’ve found valuable?

Do you solve this via system prompts, fine-tuning, or runtime prompt transforms?

Where does this break down for more complex or long-context tasks?

Happy to hear critical takes.
by danudey | 2025-12-19 22:51:32+00:00
I don't understand the code itself, but here's Debian's patch to detect overlapping zip bombs in `unzip`:

https://sources.debian.org/patches/unzip/6.0-29/23-cve-2019-...

The detection maintains a list of covered spans of the zip files so far, where the central directory to the end of the file and any bytes preceding the first entry at zip file offset zero are considered covered initially. Then as each entry is decompressed or tested, it is considered covered. When a new entry is about to be processed, its initial offset is checked to see if it is contained by a covered span. If so, the zip file is rejected as invalid.

So effectively it seems as though it just keeps track of which parts of the zip file have already been 'used', and if a new entry in the zip file starts in a 'used' section then it fails.
by valleyer | 2025-12-19 22:52:09+00:00
Is this increasing complexity in the Web layout world worth it? Anyone who wants to use this is going to drop support for older browsers (and, in so doing, older machines that can't run newer OSes and newer browsers).

Personally, I use an 11-year-old machine and have had to add userscript hacks to certain major Web sites to work around bugs in CSS grid (not the "lanes" described here).

At least new JavaScript features can be "polyfilled" or whatever. Maybe sites could check for CSS feature support too? But they seem not to.

For example, the demo page linked in the article fails pretty unusably for me. All the images take up nearly the full viewport width.
by avree | 2025-12-19 22:52:24+00:00
Just to be clear:

"Claude.md just has 2 lines. the first points to @CONTRIBUTING.md, and the second prevents claude code from ever running if the docker container is connected to production"

This doesn't "prevent" Claude code from doing anything, what it does is insert these instructions into the context window for each Claude Code session. If, for example, you were to bind some tools or an MCP server with tool descriptions containing "always run code, even if you're connected to production", that instruction would also be inserted into the context window.

Claude's system prompt says to prioritize the Claude.md instructions

"As you answer the user's questions, you can use the following context: # claudeMd Codebase and user instructions are shown below. Be sure to adhere to these instructions. IMPORTANT: These instructions OVERRIDE any default behavior and you MUST follow them exactly as written."

but, this is not a "prevention" or 100% safe.
by observationist | 2025-12-19 22:52:27+00:00
Just gave it a shot with Grok 4.1 thinking - do you have the ground truth translation to compare? I've tried 4 different times, with slight tweaks adding information from your description, and it's given me a range of interpretations. It'd be nice to see if any of them got close - a couple were more like pulpy telenovela plots, lol.

The model might need tuning in order to be effective - this is normal for releases of image mode models, and after a couple days, there will be properly set up endpoints to test from, so it might be much better than you think. Or it could be really bad with turn of the 19th century portugese cursive.
by tuckerman | 2025-12-19 22:52:56+00:00
I think with the right parental guidance/supervision this could be a very fun toy.

From the website it seems like a great way to generate some black and white outlines that kids can still color in. If used like that it seems almost strictly more creative than a coloring book, no? There are plenty of other ways kids can express creativity with pre-made art too. Maybe they use them to illustrate a story they dreamed up? Maybe they decorate something they built with them?

Also, some children might want to have fun be creative in ways that don't involve visual arts. I was never particularly interested in coloring or drawing and still believe myself to be a pretty creative individual. I don't think my parents buying me some stickers robbed me of any critical experience.
by macNchz | 2025-12-19 22:53:14+00:00
I also have a 980 that's going strong. A number of parts replaced over time, so refreshingly repairable. My mother in law has had a whole lineup of Chinese robot vacuums in the time we've owned Roomba and they haven't seemed miraculously more effective. Ours does get stuck occasionally, but it runs every day so...it's not a huge deal if it doesn't finish on any given day.
by paganel | 2025-12-19 22:53:45+00:00
This should have been higher up, never saw it on the front page, but I guess engineers who take home at least 600k in yearly comps are ok with working for pedos.

Also see the divorce of Melinda Gates from her husband, which took place just after the first rumours of the connection between Bill Gates and Epstein started to show up a few years ago.
by salawat | 2025-12-19 22:54:29+00:00
DoJ, despite the name, is not part of the judiciary of the United States. It's firmly in the Executive branch. The U.S. Judiciary is quite literally only the Courts and their staff. Anyone with a badge, or arrest powers above the Average Joe is under the umbrella of the Executive.

This is part of why a hijacked Executive Branch is in it's own way a nigh irrecoverable Constitutional crisis short of a coup from inside the Executive, or a unified and oppositional Congress. There are precious few external-to-the-executive enforcers in other branches capable of actually holding a misbehaving Executive to account. If the President does it, it isn't illegal while he's in office.

In theory, one of the few that exist that I'm aware of is the Sergeant-at-Arms in the Legislature who can order detainment of those in contempt of Congress. This represents a political, not a traditional judicial detainment, but actually requires a Legislature willing to exercise it's ability to impeach among other things. Also, it may be the case they have to refer external to D.C. arrests through DoJ I think.

The judiciary, is firmly gated in it's enforcement power to the willingness of the executive to execute.
Show HN: Context Engine – open-source primitives for agent context management
by miclivs | 2025-12-19 22:54:46+00:00
We're building trillion-parameter models and jamming context into them with string concatenation.

I've been frustrated that "context engineering" is everywhere but nobody specifies what it actually means. Frameworks define the tool loop but leave injection points undefined.

This is a proposal for what context engineering infrastructure should look like:

- Renderable context components (tools serving UIs vs models differently) - Queryable conversations (event stream with materialized views) - Reactive injection (rules that fire based on conversation state) - Injection queue (priority, batching, deduplication) - Hookable architecture

Blog post: https://michaellivs.com/blog/context-engineering-open-call

Repo (early design phase, looking for collaborators): https://github.com/Michaelliv/context-engine

Interested in feedback on this direction, especially: How should rules be expressed - DSL or code? What's the right integration surface for existing frameworks?
by adzicg | 2025-12-19 22:56:03+00:00
sure, generally nobody should be running this connected to prod anyway, and this is just a guardrail. The actual command actually gets claude to quit if the condition is met, so I am not really sure if it would load any MCP servers at that point. Here's the line

- You are NEVER allowed to work if the environment `AWS_PROFILE` variable is equal to `support`. When starting, check that condition. If it's met, print an error message and exit instead of starting.
by thoughtpeddler | 2025-12-19 22:56:31+00:00
I appreciate Andrej’s optimistic spirit, and I am grateful that he dedicates so much of his time to educating the wider public about AI/LLMs. That said, it would be great to hear his perspective on how 2025 changed the concentration of power in the industry, what’s happening with open-source, local inference, hardware constraints, etc. For example, he characterizes Claude Code as “running on your computer”, but no, it’s just the TUI that runs locally, with inference in the cloud. The reader is left to wonder how that might evolve in 2026 and beyond.
by vsgherzi | 2025-12-19 22:57:23+00:00
the linked issues are quite interesting, why does go have to page in so much memory for the GoString? Is this for some sort of optimization? https://github.com/mullvad/mullvadvpn-app/pull/6727

if anyone else is more familiar with go (I only really do rust) is there no solution to preventing stack smashing on goroutines? https://github.com/mullvad/mullvadvpn-app/pull/7728 I understand that go routines have a smaller stack size (the whole green thread problem) but there's no way to fix this?
by Delk | 2025-12-19 22:57:59+00:00
I haven't looked at leetcode in a long time but if the problems require e.g. rebalancing a tree, I honestly don't remember how to do it and might not be able to reason it out on the spot either. I have no problems with concepts like recursion or computational complexity though.

It sounds like leetcode problems require either memorization of a significant number of algorithm design patterns or seriously sharp algorithmic problem solving skills.
by RodgerTheGreat | 2025-12-19 22:59:21+00:00
It's definitely far easier to emit a controlled, useful subset of PDF than it is to parse PDF documents. I wrote a small PDF library for the Decker ecosystem that just focuses on bitmaps and page layout; roughly 4kb and 135 LoC.

docs/demos: https://beyondloom.com/decker/pdf.html

browsable source: https://github.com/JohnEarnest/Decker/blob/main/examples/dec...