MurphyA/hacker-news huggingface dataset:
by abricq | 2025-12-20 11:16:08+00:00
> * Programmers resistance to AI assisted programming has lowered considerably. Even if LLMs make mistakes, the ability of LLMs to deliver useful code and hints improved to the point most skeptics started to use LLMs anyway: now the return on the investment is acceptable for many more folks.

Could not agree more. I myself started 2025 being very skeptical, and finished it very convinced about the usefulness of LLMs for programming. I have also seen multiple colleagues and friends go through the same change of appreciation.

I noticed that for certain task, our productivity can be multiplied by 2 to 4. So hence comes my doubts: are we going to be too many developers / software engineers ? What will happen for the rests of us ?

I assume that other fields (other than software-related) should also benefits from the same productivity boosts. I wonder if our society is ready to accept that people should work less. I think the more likely continuation is that companies will either hire less, or fire more, instead of accepting to pay the same for less hours of human-work.
by bojangleslover | 2025-12-20 11:16:34+00:00
We have no egress fees but you're right about Hetzner. They're cheap. We aim to offer more value-added software to make up for it. Also that machine is in Europe, Americans don't like the latency (at least I don't), they have been known to shut people down (within reason).

Also I'm seeing that the most they can go RAM-wise for a dedicated US location is 192G. We go to 512 and will soon go beyond. I'm sure they'll get there soon but that's a consideration as well.
by barnabee | 2025-12-20 11:19:27+00:00
I don’t think this is quite true.

I’ve seen them do fine on tasks that are clearly not in the training data, and it seems to me that they struggle when some particular type of task or solution or approach might be something they haven’t been exposed to, rather than the exact task.

In the context of the paragraph you quoted, that’s an important distinction.

It seems quite clear to me that they are getting at the meaning of the prompt and are able, at least somewhat, to generalise and connect aspects of their training to “plan” and output a meaningful response.

This certainly doesn’t seem all that deep (at times frustratingly shallow) and I can see how at first glance it might look like everything was just regurgitated training data, but my repeated experience (especially over the last ~6-9 months) is that there’s something more than that happening, which feels like whet Antirez was getting at.
by doomerhunter | 2025-12-20 11:19:40+00:00
I am a Burp guy, but lately Caido[1] has been trending, pretty lightweight and can be ran in headless mode. It's still very security-oriented (as Burp Suite is), but might be worth your time, notably as you can run it on a VPS/container to proxy all your traffic through it (which is by-design, contrary to my beloved burp/zap)

[1] https://caido.io/
by woadwarrior01 | 2025-12-20 11:20:29+00:00
> Opus 4.5 is absolutely a state of the art model.

> See: https://artificialanalysis.ai

The field moves fast. Per artificialanalysis, Opus 4.5 is currently behind GPT-5.2 (x-high) and Gemini 3 Pro. Even Google's cheaper Gemini 3 Flash model seems to be slightly ahead of Opus 4.5.
by guessmyname | 2025-12-20 11:22:12+00:00
My spouse and I grew up in Japan and then moved to America. We have never stopped hating the non-illustrated menus that virtually every restaurant offers. There’s no way to know what you’re really getting. The ingredients don’t really tell you much about the dish you’re going to eat, aside from simple things like steak and similar. Sometimes, restaurants also want to be original and write some mambo jumbo in the menu as if I was interested.

→ https://en.wikipedia.org/wiki/Food_model

I miss Japan so much.
by xorcist | 2025-12-20 11:22:21+00:00
It is also important to realize that an atomic clock will only give you a steady pulse. It will count seconds for you, and do so very accurately, but that is not the same as knowing what time it is.

If you get a rubidium clock for your garage, you can sync it up with GPS to get an accurate-enough clock for your hobby NTP project, but large research institutions and their expensive contraptions are more elaborate to set up.
by Imustaskforhelp | 2025-12-20 11:23:46+00:00
Ooh very interesting! Thank you for your response but I have some questions

My family (sort of) has some relations with internet providers in the area so if I actually do follow this, its not something that I am exactly fearing about.

Now regarding the fact that you ran it out of your house, I suppose you had a completely different firewall/fibre to prevent your devices to get any sort of (malware?) since the servers would be running untrusted code

I am more so interested in these two aspects:

Were you worried about the fact that your public ip was available or anything similar? Like I had this fear that it was equal to effectively ddosing myself even though my ip of the current router only gets geolocated to a place 150 kms away from me, I (still?) have that fear

I am not thaat familiar with networking but did you have your own ip ranges or did you provide ipv4 ranges to your customers?

Also how were you managing the fact that maybe your house could've been swatted (I am not sure about the security of north carolina) but I have this deep (irrational?) fear that anyone might do nefarious things since effectively I think that we are only as strong as our weakest link and I am curious if something like this happened with you or did you have any such thoughts?
by tricker5453 | 2025-12-20 11:23:49+00:00
Just noticed this post making the rounds in Hacker News. I've worked with these tools for tens of years so figured I'd chime in, although I haven't commented here before. Lately I've been super happy with the Proxygen app and wanted to add it to the discussion because I really want to see that app thrive. Included the URL as the names are easy to confuse.
by LargoLasskhyfv | 2025-12-20 11:24:17+00:00
Not if it's really high direct current, like https://en.wikipedia.org/wiki/High-voltage_direct_current

Problem is they need these https://en.wikipedia.org/wiki/HVDC_converter , for these https://en.wikipedia.org/wiki/HVDC_converter_station which are expensive. So it depends on circumstances, how and when its economically feasible to use HVDC, or not.
by Smaug123 | 2025-12-20 11:25:14+00:00
This is one of the easiest questions in the world to answer. My first try on the smallest and fastest model it was convenient to access, GPT-5.2 Instant: https://chatgpt.com/share/69468764-01cc-8008-b734-0fb55fd7ef...

> What did I have for breakfast this morning?

> I don’t know what you had for breakfast this morning…
by reese_john | 2025-12-20 11:27:19+00:00
Most cloud providers have a similar offering to AWS Lambda, plus it is not that hard to convert your code from the event handling pattern impose by AWS Lambda to a long running container running in K8s or VMs like you are doing yourself

IMO the lock-in fear is overblown as the top cloud offerings (S3, Lambdas, K8s as a service etc) are already commoditized among the top providers, the exception being specialized databases like DynamoDB, Spanner, Cosmos …

Not saying there wouldn’t be some major work to switch your operations from eg AWS to GCP, but it is also not a hard lock-in
by netsharc | 2025-12-20 11:27:21+00:00
(Not GP poster.) I don't really have a problem with masonry layouts, but a newspaper is limited by the paper size and they have incentive to squeeze everything in there (to maximize the spread of "information"). The screen is theoretically infinite (although not for kiosks).

I do have a website with a lot of images, and at the moment everything is in a 3-across grid layout...
by jijijijij | 2025-12-20 11:28:59+00:00
In an ideal world, these bugs, especially low-hanging fruits, shouldn't be discoverable by some random kids. These billion dollar companies should have their own security researchers constantly monitoring their stack. But those costs are cut, because the law de facto doesn't hold them liable for getting hacked. It's a very good deal for companies to pay bug bounties, but they mostly cheap out on that, too.

It's like a finders reward elsewhere in life. If you lost your wallet, your immaterial and material loss is quite high, but apart from cash the contents are of way less value for a finder/thief. These type of rewards are meant to manipulate emotions and motivation. Twitter paid these kids each between $1 and $20. That's insulting. As I said elsewhere, bug bounties are PR. And it's bad PR in this case. Black market pricing is the absolute low end for valuation (it's basically the cash value in the wallet example).
by jhart99 | 2025-12-20 11:29:57+00:00
NIST maintains several time standards. Gaithersburg MD is still up and I assume Hawaii is as well. Other than potential damage to equipment from loss of power (turbo molecular vacuum pumps and oil diffusion pumps might end up failing in interesting ways if not shut down properly) it will just take some time for the clocks to be recalibrated against the other NIST standards.
by zeristor | 2025-12-20 11:31:11+00:00
Fascinating technology, whilst great to watch, it would be good to have some numbers; or are they just in the early stages of the process.

I wonder how quick their iteration process is, I’ve wondered about surface finish for 3D printed parts, surely it’s going to induce turbulence, most areas aren’t accessible. But then some turbulence is good for heat transfer.
by jacquesm | 2025-12-20 11:31:36+00:00
And not just Airbus. Very quietly there is a lot of stuff being moved out of the US and away from MS, AWS, Google etc. Trump has absolutely no idea what he's doing and comes across as the proverbial bull in a China shop.

History books a hundred years hence will have some choice things to say about how we all stood by and let this happen.
by christkv | 2025-12-20 11:31:36+00:00
Looking forward the physical media will disappear (with maybe the exception being Nintendo). Next gen playstation will probably be more expensive than the ps5 pro which is already 800 EUR in Europe so there will be little difference in pricing I think.

You are right about f2p though but you also don't need an insane PC to play most of the popular ones. Even a mini pc does that these days pretty decently and Integrated Graphics will keep on improving.
by sph | 2025-12-20 11:31:47+00:00
You mean for work? Because on my spare time this month I've been working on a RISC-V emulator, an hand-rolled green thread implementation and now a microkernel, and I'm having the time of my life.

I'd take a 50% pay cut to work so close to the hardware in my day job, if there was any demand whatsoever.
by sdrmill | 2025-12-20 11:33:33+00:00
Most high-availability networks use pool.ntp.org or vendor-specific pools (e.g., time.cloudflare.com, time.google.com, time.windows.com). These systems would automatically switch to a surviving peer in the pool.

Many data centers and telecom hubs use local GPS/GNSS-disciplined oscillators or atomic clocks and wouldn’t be affected.

Most laptops, smartphones, tablets, etc. would be accurate enough for days before drift affected things for the most part.

Kerberos requires clocks to be typically within 5 minutes to prevent replay attacks, so they’d probably be ok.

Sysadmins would need to update hardcoded NTP configurations to point to secondary servers.

If timestamps were REALLY off, TLS certificates might fail, but that’s highly unlikely.

Databases could be corrupted due to failure of transaction ordering.

Financial exchanges are often legally required to use time traceable to a national standard like UTC(NIST). A total failure of the NIST distribution layer could potentially trigger a suspension of electronic trading to maintain audit trail integrity.

Modern power grids use Synchrophasors that require microsecond-level precision for frequency monitoring. Losing the NIST reference would degrade the grid's ability to respond to load fluctuations, increasing the risk of cascading outages.
by faidit | 2025-12-20 11:34:55+00:00
The author clarifies a couple sentences later that the contempt they feel is "the cold, hard anger you hold for a collaborator" - "collaborator" apparently meaning something like the very bad WWII kind of collaborator, rather than the benign artistic co-author kind. So, despite the implicit acknowledgement that there are multiple types of contempt, this particular contempt does sound fairly close to hatred.
by atoav | 2025-12-20 11:35:27+00:00
Well not all content is meant to be read in order. A layout like this is good for content where you want to incentivise users to read in whichever order you like. So if the order is confusing you, chances are there wasn't meant to be any order at all. E.g. if you search google images google guesses some relevant order for you, but it is layed out in a dense way so you can scan with your eyes and decide which thing is most relevant for you. Whether you scan the screen left-right, top-down, randomly, bottom up, or ehatever is totally your choice.

Using such a layout for a novel or something like this would be really bad UX. But using it for an image gallery? Or a series of random articles that aren't priorized? Why not?
by 10000truths | 2025-12-20 11:35:39+00:00
> In practice one of the things that happens very often is that you compress a file filled with null bytes. Such files compress extremely well, and would trigger your A/B threshold.

Sure, if you expect to decompress files with high compression ratios, then you'll want to adjust your knobs accordingly.

> On the other hand, zip bomb described in this blog post relies on decompressing the same data multiple times - so it wouldn't trigger your A/B heuristics necessarily.

If you decompress the same data multiple times, then you increment A multiple times. The accounting still works regardless of whether the data is same or different. Perhaps a better description of A and B in my post would be {number of decompressed bytes written} and {number of compressed bytes read}, respectively.

> Finally, A just means "you can't compress more than X bytes with my file format", right? Not a desirable property to have. If deflate authors had this idea when they designed the algorithm, I bet files larger than "unreasonable" 16MB would be forbidden.

The limitation is imposed by the application, not by the codec itself. The application doing the decompression is supposed to process the input incrementally (in the case of DEFLATE, reading one block at a time and inflating it), updating A and B on each iteration, and aborting if a threshold is violated.
by bobbyschmidd | 2025-12-20 11:36:20+00:00
it's 2025. chances are you had peeps in class/uni who are now in the Stasi networks of informants and/or in some more or less obscure agency or more or less related private company so your anonymity only works from birth and even then only if you are lucky or your family "gets it" and has resources and brains beyond.

some people believe supply chain attacks are rare and hard to pull off and expensive and only valuable in extreme cases but if you ever worked at a local delivery service or pharmacy or something other where people and the necessary machines are being aggregated in some basements or even backrooms for all use cases from all times for wholesale forgery and fiddling with people, you know that the situation is ugly, not bad. throw in the many coders, network engineers and hardware specialists with ties to above entities and bombaclat, Jahmunkey, we fucked!

#TheEconomicsOfPunchedDrugs #Automation #DataAnalysis #SituationalAssessment #HeyIsThatATurdNuggetAtTheTopOfThatPyramid
by saubeidl | 2025-12-20 11:36:28+00:00
Is the castle made in the US? Why cut it off at precisely that point?

Where was binary logic invented? Where was boolean algebra invented? Where was the turing machine invented?

Hell, we can go back even further. Where would any of this be without Aristotle?

Of course, this castle has been built by many many stones. But I think it's fair to say most stones came from Europe.
by ianopolous | 2025-12-20 11:36:40+00:00
@lxpz It would be great to do a follow up to this blog post with the latest Peergos. All the issues with baseline bandwidth and requests have gone away, even with federation on. The baseline is now 0, and even many locally initiated requests will be served directly from a Peergos cache without touching S3.

https://garagehq.deuxfleurs.fr/blog/2022-ipfs/

Let's talk!
by codethief | 2025-12-20 11:37:54+00:00
To anyone who says "I have nothing to hide" I respond with "Unfortunately, you are not the one who gets to decide whether what you have is worth hiding."

(I think I first might have come across this beautifully succinct and unfortunately very true counter in a Reddit AMA with Edward Snowden way back when, but I might be misremembering.)
by Anamon | 2025-12-20 11:38:04+00:00
You are also not the target of these ads. My parents, on the other hand? My mum doesn't have a lot of experience with this stuff, and my dad's eyesight deteriorated. They could definitely fall for lookalike apps in an app store.

This seems like something in need of some laws and regulation. It fosters a kind of phishing-light ecosystem. Apple and Google are laughing to the bank while pretending they're helpless against fraudulent apps. They're not, they're creating a marketplace that makes them viable in the first place.
by g-mork | 2025-12-20 11:39:04+00:00
do you really suppose replicating the technical requirements of a security-sensitive company of this size in-house would be so easy? I've been doing infrastructure for 25 years and wouldn't want anywhere near this project. but what you will no doubt find is a pool of overconfident volunteers creating exactly the kind of risk outsourcing the problem allowed them to avoid in the first place
by Bostonian | 2025-12-20 11:41:32+00:00
'The latest generation of wearables delivers clinical-grade insights. By providing continuous, noninvasive biometric readings, the Oura ring can act as a “check-engine light,” bridging the gap between doctor visits and daily health decisions. One user’s notifications about changes in her vitals led her to seek medical attention, uncovering early signs of Hodgkin lymphoma. In a more everyday scenario, a busy executive might receive a “symptom radar” notification while traveling, prompting him to rest so he doesn’t become sick.

But federal policy hasn’t caught up with technological advances. Wearables sit in a regulatory gray zone. The FDA categorizes them and their associated software in two categories: general wellness products and medical devices. The former have minimal oversight and no standards. The latter—products intended to diagnose, treat or prevent disease—must meet requirements for design, labeling and manufacturing.

Wearables with sophisticated sensing capabilities don’t fit within this binary framework. Their sensors are used for both purposes, so there’s often a mismatch between the actual risk and the imposed regulatory burden. Manufacturers are faced with a choice: tailor their features to the wellness category, sacrificing functionality, or accept slower product development and market entry.

With a reformed regulatory structure, Oura customers could already be benefiting from a range of advanced features, including screening for high blood pressure. Hypertension is one of the most significant risk factors for heart disease and stroke, while high blood pressure in pregnancy can signal pre-eclampsia, a complication that endangers mother and baby. Another primed capability, sleep-apnea detection, would give users an early-warning tool for a condition that often goes undiagnosed and can lead to serious complications.

Under current regulations, however, a ring with these features would need to be submitted for FDA clearance as a medical device. That’s why we’re calling for a new device classification called “digital health screeners”—software features that can warn users of trouble but stop short of diagnosis. This modernized regulatory path would offer clear guidelines, including straightforward labeling with explicit disclaimers indicating nondiagnostic intent, as well as performance standards with defined accuracy and reliability benchmarks. It would also ensure quality management and a simpler market-entry process than for higher-risk medical devices.'
by palata | 2025-12-20 11:44:25+00:00
I always find it crazy how much bullshitting can go around processes. Whether it's bullshitting about doing agile "right", or adapting to AIgile and do it "right" again.

The truth is that when you have a group of people building something together, they need to communicate. The larger the group, the harder it becomes. Processes are here to formalise that communication. "You have to declare X" is a result of "in the past, some of the people involved were not informed of X and it was causing issues big enough that we added a rule".

The problem with methodologies is that those who need them are those who lack experience (because experienced people will know how to build their own processes), and by definition those who lack experience will tend to "cargo cult" (they cannot know, they haven't experienced it yet).

And there is apparently a big market in selling bullshit consulting to inexperienced people.

AI is a tool that may make developers more productives, but it won't remain the fact that software is built by a group of people (from software devs to sales through product and testing) who need to communicate, period.
by alan-crowe | 2025-12-20 11:44:59+00:00
My "importance of privacy" story:

I get my gas and electricity from Scottish Power. Recently a rival company, Ovo Energy made a clerical error and sent me a bill, leading to a dispute. The front line of defence against this kind of dispute is that the bills give the serial numbers of the meters. The bill from Scottish Power gives the same meter serial numbers that are embossed on the front of my meters, and is therefore valid. The bill from Ovo Energy gives different serial numbers and is therefore in error.

Picture though the internal processes in Ovo Energy. A second clerk is tasked with attending to the problem. He has a choice. He can change the address to agree with the meter serial numbers, correcting the error. Or he can change the meter serial numbers to those for my address, compounding the error.

Since the meter serial numbers are confidential, to me and Scottish Power, Ovo Energy does not have the second option; they do not know the serial numbers (which are long, like a credit card number, not just 1,2,3,...). Thus the clerical error gets corrected, or just left, but not compounded.

My guess is that confidential information, (such as meter serial numbers, credit card numbers, and account numbers), are the front like of defence against both clerical error and fraud based on impersonation. It is a rather weak defence, but it is light weight, and seems to how much of billing and billing disputes work.

We all have lots to hide: the confidential information that the system needs us to keep confidential to stop clerical errors from compounding.
by nephihaha | 2025-12-20 11:45:36+00:00
"In total, the £1 billion London Power Tunnels 2 (LPT2) project, which began in 2019, spans 32.5km across seven South London boroughs from Wimbledon to Hurst."

In spite of devolution and the so called "levelling up" programme for other parts of the UK, London obviously continues to be heavily subsidised by the rest of the UK.