MurphyA/hacker-news huggingface dataset:
by pjmlp | 2025-12-20 06:32:51+00:00
Lets see how that holds in five years time.

I am betting it won't.

By the way, there are OS APIs, I am yet to write a CLI driven agent, as part of iPaaS deployments, which are basically SaaS IDEs.

vi and Emacs are certainly not IDEs, they are programmer editors, although with enough effort they may pretend to be one.
by tsazan | 2025-12-20 06:33:38+00:00
Because you don't need to audit every single transaction.

Think of it like a cache. You use the commerce.txt for 99% of your agentic workflows because it’s 30% cheaper in tokens and 95% faster than parsing a 2MB HTML haystack.

You only 'bother' with the HTML for periodic spot-checks or when a high-value transaction requires absolute verification.

Without CommerceTXT, you are forced to pay the 'HTML tax' on every single interaction. With it, you get a high-speed fast lane for context, while keeping the HTML as a decentralized source of truth for when trust needs to be verified. It’s about moving the baseline from 'expensive and fragile' to 'efficient and auditable'.
by zrm | 2025-12-20 06:34:33+00:00
> Then your memory requirements always were potentially 512GB. It may just happen to be even with that amount of allocation you may only need 64GB of actual physical storage; however, there is clearly a path for your application to suddenly require 512GB of storage.

If an allocator unconditionally maps in 512GB at once to minimize expensive reallocations, that doesn't inherently have any relationship to the maximum that could actually be used in the program.

Or suppose a generic library uses buffers that are ten times bigger than the maximum message supported by your application. Your program would deterministically never access 90% of the memory pages the library allocated.

> If your failure strategy is "just let the server fall over under pressure" then this might be fine for you.

The question is, what do you intend to happen when there is memory pressure?

If you start denying allocations, even if your program is designed to deal with that, so many others aren't that your system is likely to crash, or worse, take a trip down rarely-exercised code paths into the land of eldritch bugs.
by yassien | 2025-12-20 06:39:15+00:00
a practical and empirical way, what we really mean when we say a machine learning model “works,” especially as more automation and LLM-driven tooling enters the modelling loop. Rather than leaning on intuition or hype, I wanted to follow a small set of experiments and see where confidence is genuinely earned and where it might quietly become misplaced. The experiments here are not an argument against progress, but for a clearer boundary between assistance and abdication and if machine learning/Data Science and what happens when they are treated purely as an optimisation problem, and how it will eventually optimise the wrong things.
by noobermin | 2025-12-20 06:39:47+00:00
I hate to bring this up, but the conspiracy theories around this are nuts and I'm honestly quite bothered and annoyed by it. While the death is an absolute tragedy, the idea that the CIA killed him because fusion is around the corner and I suppose Loreiro was to usher in the next age of limitless electricity is quite ridiculous.

I will say that there is a non-zero overlap of people pushing this insanity and the posters here, given what I've seen elsewhere on the internet, and I will kindly ask that you stop.
by latentsea | 2025-12-20 06:42:55+00:00
Things like that are only part of it. You can also also up your agents batting average by finding ways to build guardrails and things that inject the right context at the right time.

Like for instance we have a task runner in our project that provides a central point to do all manner of things like linting, building, testing, local deployment etc. The build, lint and test tasks are shared between local development and CI. The test tasks run the tests, take the TRX files and use a library to parse it to produce a report. So the agent can easily get access to the same info as CI is putting out about test failures. The various different test suites output reports under a consistent folder structure, they also write logs to disk under a consistent folder structure too. On failure the test tasks output a message to look at the detailed test reports and cross-reference that with the logs to debug the issue. Where possible the test reports contain correlation IDs inlined into the report.

With the above system when the agent is working through implementing something and the tests don't pass, it naturally winds up inspecting the test reports, cross referencing that with the logs, and solving the problems at a higher rate than compared to just taking a wild guess at how to run the tests and then do something random.

Getting it to write it's own guardrails by creating Roslyn Analyzers to make the build fail when it deviates from the project architecture and conventions has been another big win.

Tonnes of small things like that start to add up.

Next on my list is getting a debug MCP server, so it can set breakpoints and step through code etc.
by hirsin | 2025-12-20 06:43:19+00:00
The apparent information gathering and brutal review process is unbelievable here. If I'm understanding this correctly, the requirement is that eg Epic Game Store must register and upload every single APK for every app they offer, and cannot offer it in their store until Google approves it, which may take a week or more - including every time the app updates.

Meanwhile they get full competitive insight into which apps are being added to Epics store, their download rates apparently, and they even get the APKs to boot, potentially making it easier for those app devs to onboard if they like, and can pressure them to do so by dragging their feet on that review process.

> Provide direct, publicly accessible customer support to end users through readily accessible communication channels.

This is an interesting requirement. I want to see someone provide the same level of support that Google does to see if it draws a ban.
by baobun | 2025-12-20 06:44:30+00:00
This is likely the reason behind the recent push of "Trusted Publishing" from NPM. They are trying to make people consider GitHub (and GitLab) in its own higher tier with regards to supply-chain security by decree.

If you rely on "Trusted Publishing" you are assisting Microsoft in making a moat for their CI platform.

Use cryptographic signatures, not implicit trust in a hosted platform.
by bawolff | 2025-12-20 06:44:52+00:00
Its not that "direct", its just a serialization format that supports a super-set of json types. Json tends to be lowest common denominator, so that describes most serialization formats. Which is why when i initially read the headline i thought it meant the wire format was json compatible, which would be really unusual and extremely impressive, because otherwise why else would anyone mention json compatibility? its like mentioning the format is for use with computers, it goes without saying.

That's not a criticism of anything with lite3, lite3 sounds really cool. The json angle is just an odd part to concentrate on.
by al_borland | 2025-12-20 06:46:15+00:00
Any business that isn’t willing to be as anonymous as Mullvad, I assume has a compromised business model that I don’t really like. Assuming there aren’t obvious reasons for needing the data, like tax filing, or various regulatory requirements.

I don’t understand why any company would want the liability of holding on to any personal data if it wasn’t vital to the operations of the business, considering all the data breaches we’ve seen over the past decade or so. It also means they can avoid all the lawyers writing complicated and confusing privacy policies, or cookie approval pop-ups.
by dpark | 2025-12-20 06:48:30+00:00
How’s Tibet doing? How’s it going in Georgia? Ukraine? How about the southern United States? Remember when they formed a confederacy and how well that worked out?

Taiwan is largely protected by the US. I expect that absent some other interesting developments, Taiwan will indeed eventually be absorbed into China. And I already addressed the population comment. Population alone is not the only factor to power consolidation.

I do wonder where you imagine all these disenfranchised minorities are expected to flee to in order to establish their independent nations or whatever. There’s literally no unclaimed land on the Earth aside from Antarctica. Are they going to flee to extremely undesirable areas of their existing country and hope the originating country just doesn’t care enough to stop them? Are they going to break away and take valuable land with them? It’s pretty rare for part of a nation to successfully cleave itself away. Even more rare without a massive war.
Show HN: One Thing at a Time Please – A Kanban board with one ticket slot
by agsilvio | 2025-12-20 06:48:54+00:00
I built a kanban board that only lets you have one ticket. That's the whole app.

It's for PO's that get a little too excited sometimes.

This is a novelty project, built mostly with Cursor in a couple of hours. The AI wrote the code and the jokes—I just steered and said "no" a lot.

Don't put anything sensitive in there.
by keeganpoppen | 2025-12-20 06:49:52+00:00
could not agree more. this is the "everything has to be communicated via video format" they tell you not to worry about... as it were... all of the interactive and sequential that helps to build up a story, but where every detail is brought into focus exactly when it is relevant, but still forms part of a cohesive, intelligible whole (ie. a document! (who knew that documents were a great way to document things!)). i really have nothing to add to parent other than to second how fantastically presented the content on this page is. really beautiful work.
by raw_anon_1111 | 2025-12-20 06:49:56+00:00
And the business you need to interact with through your phone and government services are not going through in app payments and giving Apple a cut. At most they are accepting Apple Pay and being charged standard credit card fees

Cry me a river for the Epics of the world selling loot boxes and other pay to win crap. It came out in the trial that 90% of App Store revenue is coming from games.

Neither Epic, Google or Apple are on the side of the angels
by NaOH | 2025-12-20 06:50:00+00:00
A valid HTML zip bomb - https://news.ycombinator.com/item?id=44670319 - July 2025 (37 comments)

I use zip bombs to protect my server - https://news.ycombinator.com/item?id=43826798 - April 2025 (452 comments)

How to defend your website with ZIP bombs (2017) - https://news.ycombinator.com/item?id=38937101 - Jan 2024 (75 comments)

The Most Clever 'Zip Bomb' Ever Made Explodes a 46MB File to 4.5 Petabytes - https://news.ycombinator.com/item?id=20410681 - July 2019 (5 comments)

Defending a website with Zip bombs - https://news.ycombinator.com/item?id=14707674 - July 2017 (183 comments)

Zip Bomb - https://news.ycombinator.com/item?id=4616081 - Oct 2012 (108 comments)
by necovek | 2025-12-20 06:50:37+00:00
Since firmware is supposed to be accessible to users worldwide, making it easier to get it is good.

But how is an open, read-only S3 bucket worse than a read-only HTTPS site hosting exactly the same data?

The only thing I can see is that it is much easier to make it writeable by accident (for HTTPS web site or API, you need quite some implementation effort).
by visarga | 2025-12-20 06:52:13+00:00
I don't think it will become well rounded because that is not cost sensitive. Intelligence is sensitive to cost, it is the core constraint shaping it. Any action has a cost - energy, materials, time, opportunity or social. Intelligence is solving the cost equation, if we can't solve it we die. Cost is also why we specialize, in a group we can offload some intelligence to others. LLMs also have their own costs, and are shaped by it into some kind of jagged intelligence, they are no spherical cows either.
by mothballed | 2025-12-20 06:54:33+00:00
So your argument is what, Ukraine should be absorbed because the majority of the Ukraine-Russia say so since the majority of the people in that land mass say they're the same country and the majority also agree that country is Russia?

I don't want to live in your dystopia. Your thesis is that if you just submit to the mob, violence could be less. I don't find life to be an optimization for the least amount of confrontation. I have never asserted my view of the world guarantees no violence. What you have to offer is basically well the same thing could happen to you as happened to a fraction of these other people unless of course you just submit to the mob.

>I do wonder where you imagine all these disenfranchised minorities are expected to flee to in order to establish their independent nations or whatever. There’s literally no unclaimed land on the Earth aside from Antarctica. Are they going to flee to extremely undesirable areas of their existing country and hope the originating country just doesn’t care enough to stop them? Are they going to break away and take valuable land with them? It’s pretty rare for part of a nation to successfully cleave itself away. Even more rare without a massive war.

This applies to any form of human organization. If every country were feudal you could argue democracy was broken because there is no place where it could be practiced. It's not an argument that's able to contrast the two. No matter what form of governance or organization people lived under, their option is either to wait for a vacuum to emerge, to engage in war, to negotiate, or to simply ignore those in power and wait to see what happens -- the same would apply in forming monopolistic democracy where it doesn't exist.
by b112 | 2025-12-20 06:57:20+00:00
I feel dumbfounded. All I've ever heard from rust users, is the equivalent of football fans running up, waving pendants in my face and screaming. So much so, that everything else said seems like the wild fantasies of "our team gonna win".

Then things like this appear:

https://www.phoronix.com/news/First-Linux-Rust-CVE

And I'm all warm and feeling schadenfreude.

To hear "yes, it's safer" and yet not "everyone on the planet not using rust is a moron!!!", is a nice change.

Frankly, the whole cargo side of rust has the same issues that node has, and that's silly beyond comprehension. Memory safe is almost a non-concern, compared to installing random, unvetted stuff. Cargo vet seems barely helpful here.

I'd want any language caring about security and code safety, to have a human audit every single diff, on every single package, and host those specific crates on locked down servers.

No, I don't care about "but that will slow down development and change!". Security needs to be first and front.

And until the Rust community addresses this, and its requirement for 234234 packages, it's a toy.

And yes, it can be done. And no, it doesn't require money. Debian's been doing just this very thing for decades, on a far, far, far larger scale. Debian developers gatekeep. They package. They test and take bug reports on specific packages. This is a solved problem.

Caring about 'memory safe!' is grand, but ignoring the rest of the ecosystem is absurd.
by jiggawatts | 2025-12-20 07:01:13+00:00
You're off by orders of magnitude. A million tokens is about 5 MB of text and costs $0.20 to process in something like Gemini 3 Flash.

Hence, a terabyte of text would cost about $42,000 to run through a pareto-frontier "cheap" model.

The most expensive cloud egress fee I could quickly find is $185 per terabyte (Azure South America Internet egress).

Hence, AI processing is 200x as expensive as bandwidth, or put another way, even a long-distance international egress at "exorbitant cloud retail pricing" is a mere 0.5% of the cost.

Petabytes, exabytes, etc... just adds digits to both the token cost and bandwidth cost in sync and won't significantly shift the ratio. If anything, bandwidth costs will go down and AI costs go up because: output tokens, smarter models, retries, multiple questions for the same data, etc...
by wsh | 2025-12-20 07:01:29+00:00
I liked An Answer for Linda (1961), which shows the work of outward toll operators using mark-sensing call tickets at traditional (3CL) cord switchboards. “Watch Billie closely, as she handles a group of typical calls.”

(I won’t spoil the Answer; you’ll have to watch for yourself.)

https://archive.org/details/GjEpnTcLgq1eTUR90yMhdcJMvFmMuw

https://www.youtube.com/watch?v=vq1zu4fJaO0
by eesmith | 2025-12-20 07:02:37+00:00
As I understand it, it's a US thing. In areas with snow the local military branch had a drill hall as part of the armory, to carry out drills in winter. These were large open interior spaces.

The military moved away from using urban armories. These became repurposed as sports halls, places for events, and so on. For examples, https://fightingillini.com/facilities/ui-armory/5 and https://www.wakefieldma.gov/Facilities/Facility/Details/Dril...
The offline geocoder we wanted
by gipsyjaeger | 2025-12-20 07:03:45+00:00
What is this?

This is an offline reverse geocoder written in Python. Given a latitude–longitude pair, it returns the correct administrative region such as country, state, or district without calling any external APIs. This avoids API costs, rate limits, and network dependency.

Why build another reverse geocoder?

Most offline reverse geocoders rely on nearest-neighbor lookups. While fast, this approach often fails near borders because the closest location is not always the correct administrative region. This project focuses on correctness over proximity by verifying which boundary a coordinate actually falls inside.

How does it work?

A KD-Tree is used to quickly shortlist nearby administrative boundaries. For those candidates, the system performs polygon containment checks to confirm the true region. It supports both single-process execution for small workloads and multiprocessing for large batch processing.

Performance

The system processes 10,000 coordinates in under 2 seconds, with an average polygon validation time below 0.4 milliseconds per coordinate.

Who is this for?

Anyone who needs reverse geocoding, predictable costs, large-scale batch processing.

Implementation notes

This started as a toy implementation to explore boundary-aware reverse geocoding, but it turned out to be reliable enough for real production use. The dataset covers more than 210 countries with over 145,000 administrative boundaries.

Links

Source code: https://github.com/SOORAJTS2001/gazetteer

Documentation: https://gazetteer.readthedocs.io/en/stable

Feedback is welcome, especially around the approach, performance trade-offs, and edge cases.
by Centrino | 2025-12-20 07:04:54+00:00
I like minimalistic tools and designs! But I don't like minimalistic documentation.

You included an example with .md files and a template, but I would like to see what Kew generated from it, without having to run the program.

How exactly does templating work in Kew? Does it fully support the 'rc' templating from Werc, or is it purely Lowdown-based with optional HTML wrappers?

Are the config options as shown in config.go the complete set, or does Kew support more config options like Werc does?
by gherkinnn | 2025-12-20 07:05:24+00:00
There is no winning, is there? Half of HN wants browsers to revert to document readers and the other half wants HTML and CSS to do what JS can. A small minority then insists that we should get rid of HTML and CSS entirely and start from scratch. The louder the ideas the further away the person is from actually using the tech. I personally would not have the patience for community management.

That said, CSS masonry looks solid.
by danielcarter25 | 2025-12-20 07:05:39+00:00
I believe, the future of AI is being shaped by companies that focus on solving everyday challenges with practical, human-centered technology. Rather than chasing hype, these innovators apply AI to create accuracy, efficiency, and better user experiences. Many Brands like MirrorSize are part of this shift, using AI to improve sizing and fit in fashion—helping businesses reduce returns while giving customers more confidence. It’s this kind of purposeful innovation that’s defining the next generation of AI. What do you believe?
by yalok | 2025-12-20 07:06:50+00:00
their Play store review practices are such a joke. Apps review is a completely obscure process, no clear way to see that the app is in review state, if they reject - amount of information why it was rejected is minimal and you have to second-guess; appealing is not trivial; most of the reviews are done by AI which gets triggered in totally random places from time to time (e.g., in my case, some pictures which looked fine for kids for years and went through many previous reviewed, suddenly seem too violent).
by outofdistro | 2025-12-20 07:07:56+00:00
How does Graphite compare with other AI code review tools like Qodo?

My team has been using Qodo for a while now and i've found it to be pretty helpful. EVery once in a while it finds a serious issue, but the most useful part from my experience are the features that are geared towards speeding up my review rather than replacing it. Things like effort labels that are automatically added to the pr and a generated walk through that takes you through all of the changed files.

Would love to see a detailed comparison of the different options. Is there some kind of benchmark for AI code review that compares tools?
by handoflixue | 2025-12-20 07:09:42+00:00
The onus of evidence is generally on the one making the initial claim: what evidence do you have that the modern world is actually getting worse?

But if you want evidence that we're improving, I'd point out that 20 years ago, the mainstream US position was that gay people were evil, 60 years ago they thought black people shouldn't be allowed to vote, and 100 years ago they thought women were also inferior and shouldn't be allowed to vote.

We can keep going back to when people thought "slavery" and "the divine right of kings" were solid ideas.

So... if people were so much smarter in the past, why did they believe all these obviously-dumb ideas?
Show HN: HiFidelity – A native macOS offline audiophile music player
by rathod0045 | 2025-12-20 07:11:16+00:00
- Powered by the BASS (un4seen) audio library for professional-grade audio quality and TagLib for meta-data reading

- Support for 10+ audio formats including lossless and high-resolution files Lossless & Hi-Res: FLAC, OGA, WAV, AIFF, AIF, APE, WV, TTA, DFF, DSF Compressed: MP3, MP2, AAC, OGG, OPUS, M4A, M4B, M4P, MP4, M4V, MPC Specialized: CAF, WEBM, SPX

- Bit-perfect playback with sample rate synchronization and Obtain Exclusive Access of audio device (Hog mode)

- Gapless Playback: Seamless transitions between tracks with no silence or interruption

- Built-in equalizer with customizable presets

- Browse by tracks, albums, artists, or genres

- Smart Recommendations: Auto play functionality, you don't have to think what to play next Lyrics Support:

- Download lyrics directly within the app from lrclib

- Real-time line-by-line lyrics highlighting

- Mini Player: Compact floating window with integrated queue and lyrics panels

- Audio device change option within UI

- Advanced Search: Find tracks instantly across your entire library with FTS5 (Rebuild search index if you not able to see any results: Settings -> Advanced -> Rebuild FTS)

- Playback History: Keep track of what you've listened to

- Favorites: Mark and organize your favorite tracks

- Import playlist with m3u or Import Folder as playlist

- Menu bar controls and Now Playing info
by asdff | 2025-12-20 07:11:29+00:00
Seems this is a possibility with any service. Even stuff like music streaming. I tried to listen to loveless on spotify the other day and apparently it has been removed from the service. It is time to start making rips of physical media I own or rent from the library again. Back to the high seas again too. We traded control for convenience and that comes back to bite us.