MurphyA/hacker-news huggingface dataset:
by CuriouslyC | 2025-12-22 15:57:21+00:00
You can export all agent traces to otel, either directly or via output logging. Then just dump it in clickhouse with metadata such as repo, git user, cwd, etc.

You can do evals and give agents long term memory with the exact same infrastructure a lot of people already have to manage ops. No need to retool, just use what's available properly.
by the_mitsuhiko | 2025-12-22 15:57:34+00:00
> Maybe the balance of spending time with machines vs. fellow primates is out of whack.

It's not that simple. Proportionally I spend more time with humans, but if the machine behaves like a human and has the ability to recall, it becomes a human like interaction. From my experience what makes the system "scary" is the ability to recall. I have an agent that recalls conversations that you had with it before, and as a result it changes how you interact with it, and I can see that triggering behaviors in humans that are unhealthy.

But our inability to name these things properly don't help. I think pretending it to be a machine, on the same level as a coffee maker does help setting the right boundaries.
by heuermh | 2025-12-22 15:57:44+00:00
I mostly use it for learning things. How does this guitar pedal effect work? Why does this Eurorack module sound so good? How can I drive this MIDI instrument from this OSC controller? etc.

Ideally there would be an easy path from ChucK to implementing all of these things in hardware but I haven't quite got there yet.

https://github.com/heuermh/lick
by RAPIDEN | 2025-12-22 15:57:52+00:00
Hi HN,

I'm a systems architect and security researcher by trade (normally breaking things in crypto/infra), but I've spent the last year applying a software engineering approach to the Dark Matter problem.

Instead of adding new particles, I built a simulation based on a 5D Holographic scalar field. The math is dense, so I wrote a verification pipeline in Python to check the results against real galaxy data.

The crazy part? It fits the 175 SPARC galaxies better than Newton (R^2 ~ 0.9) without needing Dark Matter particles.
The verifiable part: The model predicts a specific "hum" in atomic clocks at 2.159 mHz (a bulk breathing mode). If we don't find that signal, my code is wrong. If we do, it's a huge deal.

About this repo:

This isn't the full heavy solver (which is a mess of stiff ODE integration), but the Reproducibility Pack. It allows you to run the stats and generate the charts from the raw public data yourself to verify I didn't cherry-pick the results.

I’m releasing this via Zenodo/GitHub because the academic peer-review process takes forever, and I want the "hacker" community to tear it apart (or verify it) first.

Feedback on the SPARC_VERIFICATION logic is welcome.
by wolrah | 2025-12-22 15:58:11+00:00
The "No IT Department" part of your marketing immediately turns me off because that's actively encouraging "shadow IT".

We all get that sometimes companies have IT policies which are outdated and get in the way, but that's a problem for someone up the chain to solve. A team or department deciding to just start doing their own thing with something like this which isn't managed by or even known about by the official company IT is at best a path to future problems if not an immediate compliance problem.
by ImPleadThe5th | 2025-12-22 15:58:22+00:00
Can anyone explain to me (someone not so network security savvy) if there are any privacy or security concerns using a wire guard provider like this?

As I understand it, with traditional VPNs, you basically have to trust third-party audits to verify the VPN isn't logging all traffic and selling it. Does the WireGuard protocol address theses issues? Or is there still the same risk as a more traditional VPN provider?
by Aurornis | 2025-12-22 15:59:13+00:00
> To the point where good salesmen make a “career” and become your bosses without any correlation to their work abilities or even management skills.

The few times I've seen this actually happen at a company, it was not the kind of company I wanted to work for long-term anyway.

If the company is so broken that the wrong people are being promoted while the right people are being ignored constantly, there will be bigger problems than you simply missing a promotion.

The one startup I worked for that had this problem chronically (combined with some nepotism) did a bee-line run straight for insolvency and then collapsed. Everyone on the ground floor saw it coming. Some people still tried to race for promotions and upward career trajectory there, but the smart ones invested their effort in getting out.

That said, I've also worked at some companies where the right people were getting promoted but there were groups of people with sour grapes he were always upset it wasn't them. It's never something everyone agrees on.
by mattmaroon | 2025-12-22 15:59:36+00:00
“ The cost merely to visit their parks is now too high for most Americans.”

I always wonder why people say things like this. It’s as if we’re just regurgitating stuff that feels right. Humans and LLMs behave the same sometimes.

Disneyworld alone gets 50 million visits a year. Magic Kingdom tickets are like $150. That’s approximately the average American’s monthly cell phone bill.
by mr_mitm | 2025-12-22 16:00:06+00:00
> I've done kerberoasting and aseproasting a handful of times only, but from what I recall, RC4 can be cracked within reasonable time regardless of your password complexity

That's not quite right. If the password is sufficiently strong, you won't crack it even when RC4 is used. The password space is infinite.

You might be thinking of the LM hash, where you are guaranteed to find the password within minutes, because the password space is limited to 7 character passwords.

> Rotating the KDC/krbtgt credential is also still a nightmare.

I also disagree there. Just change it exactly once every two weeks or so. Just don't do it more than once within 10 hours. See: https://adsecurity.org/?p=4597

What I wonder is why Windows isn't changing it itself every 30 days or so, just like every computer account password.

> why doesn't Microsoft alert directory administrators (and security teams) when someone is dumping tickets for kerberoasting by default?

Good question. Probably because they want you to license some Defender product which does this.
by ako | 2025-12-22 16:00:34+00:00
Sure, for something big code needs more review and validation. But this is just a small command line tool that allows you to ask an LLM to generate a DSL to play a backing track: https://raw.githubusercontent.com/ako/backing-tracks/refs/he...

Not a big commitment from a user, and nothing lost if it doesn´t work as hoped.

I'm just positively surprised how quickly you can create a prototype for these sorts of ideas with Claude Code. This is literally just a few hours of vibe-coding.
by yowlingcat | 2025-12-22 16:01:32+00:00
Very cool! Found this note interesting:

```

Limitations

I haven't, yet, found a good way to implement filters (low-pass, high-pass, band-pass, etc.). It does not have Fourier transform, and we cannot operate on the frequency domain. However, the moving average can suffice as a simple filter.

```

I wonder if there's a way to implement the FFT using subqueries and OVER/partitioning? That would create a lot of room for some interesting stuff to happen, specifically making it easy/possible to implement filters, compression, reverberation, and other kinds of effects.

Two other primitives that would be valuable to figure out:
1. How to implement FM/phase distortion. You can basically implement a whole universe of physical modeling if you get basic 6 op sine wave primitives right with FM + envelopes.
2. Sampling/resampling - given clickhouse should do quite well with storing raw sample data, being able to sample/resample opens up a whole world of wavetable synthesis algorithms, as well as vocal editing, etc.

Honestly, although the repo's approach is basic, I think the overall approach is wonderful and have wanted to be able to use SQL to write music for a while. I've spent a lot of time writing music in trackers, and being able to use SQL feels like it would be one of the few things that could spiritually be a successor to it. I've looked at other live coding languages, many of which are well built and have been used by talented people to make good music (such as Tidal, Strudel, etc). But all of it seems like a step down in language from SQL. I'd rather have their capabilities accessible from SQL than have to use another language and its limitations just to get those capabilities.

Food for thought -- thanks for the interesting and thoughtful work!
by Hizonner | 2025-12-22 16:01:58+00:00
You wanna prevent gift card fraud? Stop selling gift cards.

Gift cards are a huge fraud vehicle by their nature. Home Depot is just noticing because it fraud against them, rather than the more usual money laundering for scams. Retailers turn a bit of a blind eye, since they make so much money from gift cards that never get used or end up with leftover balances. But really gift cards are an attractive nuisance, and add no value for the (non-sucker) consumer.

And the cameras will have small effectiveness after the first few arrests anyway. "Don't let the LPR catch your car" just becomes part of the tradecraft for these organized operations. Whereas sporadic, opportunistic, individualized ripoffs won't create much of a signature in the LPR stream.
by rekireki | 2025-12-22 16:02:18+00:00
One of the reasons for me personally is a rich selection of packages from crates.io. For example if you are writing a server in Rust, and use something like https://crates.io/crates/reqwest for http requests, then you can reuse it in your mobile app. Also there's serde. You don't need to write the schema for your data if you have Rust on both server and client. Just make a shared crate and use serde to encode/decode the data. It really saves a lot of time if you don't have to use swagger or similar tools. And there's a documentation out of the box with `cargo doc`
by embedding-shape | 2025-12-22 16:02:33+00:00
Please do ask for login/signup up front instead of tricking people into filling out forms, and then be met with a login/signup form right before actual submission. I know it's a known dark UX trick to increase user signups, but it feels incredible hostile.

Not only do I feel like you wasted my time, but you probably still kept the data, and then just didn't make it visible to the user who filled it out, since there was some async step in the middle somewhere. Sadly, this is the only thing I could focus on after hitting it, rather than giving you feedback on the project/product itself. But I'm not feeling very helpful anymore.
by Johanx64 | 2025-12-22 16:02:41+00:00
We've quite shifted the goalpost.

>I don't care about the man's personality or whatever qualities he has.

The only thing I'm addressing is the so called "luxuries" you alluded to, and the alleged "luxuries" he has is directly a result of his personality and his qualities.

The only reason you don't have those so called "luxuries" is because you're not even in the same ballpark as good. It really is as simple as that.

> By providing a result in a way that will be superior to the current status quo.

But he's done exactly that.

> I look at what he does, and so far, he spent 10 years making a game that you yourself admit won't be even that good.

I'm not saying that the game won't be good necessarily, I'm saying the game probably might not sell very well (atleast not to justify the amount of money spent from purely business perspective, etc)

There's a difference.
by andrewmcwatters | 2025-12-22 16:02:42+00:00
Interesting, it looks like you can use ´global myvar’ now, as compared to ´myvar’ implicit globals, say from back in 5.1, or ´local myvar’.

It’s worth noting that global is a reserved keyword now, so environments that had a ´global()´ function for escaping environments will now need to rename their helper function.
by george_____t | 2025-12-22 16:03:08+00:00
Just to add some context, Strudel is TidalCycles ported from Haskell to JS. IMO, Haskell is a much nicer language for this stuff. Hopefully, now that GHC can output WebAssembly, someone can build a web-based music programming environment around the original TidalCycles instead.
Show HN: I built a linter for landing page conversion
by nikhonit | 2025-12-22 16:03:17+00:00
Hey HN,

I'm Nik and I've worked 8 years working in Marketing at High Growth Startups. I’ve spent years fixing landing pages for my campaigns, and I realized most bad conversion rates come from structural errors, not just bad copy. (Still copy remains the major part of conversions)

I built Landkit Audit to act as a Linter for conversion.

How it works:

Ingestion: It fetches your site and converts the DOM into a high-fidelity semantic map. This strips away the design noise to reveal the actual information hierarchy your user is navigating.

The Linting Rules: It runs this structure against 50+ heuristics derived from direct response frameworks (Cialdini, Fogg, LIFT).

Heuristic Analysis: It flags specific 'violations' like:

Visual Hierarchy: H1s that fail to pass the 5-second test (inferred).

Friction: Forms that ask for high-commitment data before establishing value.

Anxiety: Missing trust signals near payment triggers.

The Stack:

Frontend: React + Framer Motion (for the Terminal visualization).

Backend: Supabase Edge Functions.

Analysis: Gemini Pro 2.5 (great at logical reasoning/inference).

The hardest part was tuning the prompt to be critical rather than nice. Most LLMs default to being supportive; I had to prompt engineer a persona that acts more like a brutal senior editor.

Try it here: https://landkit.pro/audit

It’s free to run the audit. I’d love to know if the Linting errors it finds on your projects feel accurate.
by stuffn | 2025-12-22 16:03:23+00:00
The software I use for hobbies is locked in to windows. A lot of extremely good software in the DIY world is locked to windows.

Coincidentally I can run it all on a 10 year old PC. I see no reason I need to upgrade. I’d happily pay a small yearly fee for patches.

But that’s not why Microsoft did all of this. Their goal is to Hoover all your data into their cloud and lock your PC down so you can’t do anything but use their stuff. Their profit numbers are insane despite losing marketshare. It’s working because the current CEO is a ruthless non-tech moron.

People want to hate on Microsoft. Rightfully so. Apple has done the same thing. Once you’re locked into the Apple ecosystem it’s hard to switch. They push iCloud and Siri on you at every turn. They just made a “one OS” choice so it doesn’t feel as bad.

Anyone who says Linux solves all the problems has not tried to make something like solidworks and masterCAM run on it. I love Linux, I use it on servers, but it has 3% marketshare for a reason.
by reactordev | 2025-12-22 16:03:32+00:00
Yeah go has embedded structs. It’s ugly and allows one to address the fields on the parent and it exposes the struct (with the same fields) so it’s kind of a head scratcher.

To be honest, it’s been 3 years since I looked at rust and I might try again. I still prefer inheritance because some things just are-a thing. I also love ECS and components and see traits as that. I just wish I could store local state in those.
by thesuitonym | 2025-12-22 16:03:37+00:00
I suppose it makes sense if your channel doesn't have a lot of new or live programming to just send a tape instead of setting up a feed.

I always wondered about these types of channels back then, that had absolutely no original programming, and very few if any commercials. What was the plan with them? Were they just trying to keep brand familiarity? Was it so difficult to get a channel spot that they didn't want to lose it? But if so, why go through all the hassle to get the spot with no income stream?
by CuriouslyC | 2025-12-22 16:04:48+00:00
I understand the parasocial bit. I actively dislike the idea of gooning, ERP and AI therapists/companions, but I still notice I'm lonelier and more distant on the days when I'm mostly writing/editing content rather than chatting with my agents to build something. It feels enough like interacting with a human to keep me grounded in a strange way.
by Telaneo | 2025-12-22 16:05:08+00:00
Things are better, but it's a case of two steps forward, one step back. We got a new task manager that was actually good, and lost the photo viewer that was good. We got good taskbar search, right in the start menu, and then lost it again. We got DX12, but also got more telemetry than ever. We got an actually decent Windows update (it even grabs drivers for you and is pretty good at getting it right!), and we lose the ability to disable them (without really getting in there). We apparently lost tiles again, even though some people might still want them, and we also lost the ability to left-align our start menu, until the noise got so loud that even Microsoft couldn't ignore it.

Things may be better, but saying that Windows has gotten better, without a comma and a but, or an asterisk, is disingenuous. Much better is a matter of opinion, and one I don't share. Where things have gotten much better is Linux.
by kace91 | 2025-12-22 16:05:27+00:00
>I don’t think it’s unreasonable to take what job you can get or stay in a job you don’t care for until the trade winds return.

Having a goal does not seem at all at odds with weathering a storm. Your choices can then be what you learn in your free time, or what horizontal moves you make at that job, or which people you get closer to, for example.
Show HN: Free and Simple QR Code Generator
by ljinkai | 2025-12-22 16:05:44+00:00
QR codes are one of the easiest ways to share information quickly. With just one scan, users can open a website, read text, or access digital content instantly.

If you are looking for a free and simple QR code generator, this tool helps you create QR codes in seconds — no login, no setup, and no unnecessary features.
by thrownaway561 | 2025-12-22 16:06:00+00:00
I hate to be the one that says it, but there is only one way to handle scammers like this. They need to be hunted down and put down. All of them and anyone who is involved.

Truth be told that scamming is becoming easier and easier. The problem is that most countries not only allow it, it is part of their GDP. Look at the number of scammers that originate in India. Everyone there knows who they are, there are numerous YouTube channels souly dedicated to exposing them and reporting them to the authorities, yet they still remain active.

Until a more brutal and direct response is used, these organizations and countries will continue to operate. If the attacks Trump has used on drug boats has taught us anything is that a direct response is the best response when dealing with the underworld.
by hnbad | 2025-12-22 16:06:02+00:00
> They want the data just as bad as everybody else.

Sure. Let's look at the main site: https://european-union.europa.eu/index_en

Big cookie banner. Wait. What's that. It's not a modal? And a big "Accept only essential cookies" button with the same visual weight as the "Accept all cookies" button? Surely everybody does it this way because it's literally what EU law requires - surely nobody would try to trick people into clicking "accept all" by hiding the alternative behind multiple layers of opaque options and checkboxes.

So let's look at what data they are harvesting: https://european-union.europa.eu/cookies_en

Technical cookies... functional cookies... boring - most of these are just for handling logins and preferences. Ooh, analytics! But what's Europa Analytics? Let's check: https://european-union.europa.eu/europa-analytics_en

Oh, they are not only opt-in, they even respect DNT headers. And they're masking the IP addresses before processing them further. Damn, they must really want that data just as bad as "everybody else".
by BurningFrog | 2025-12-22 16:06:15+00:00
Pre technology, the sky was very central to life. Sunlight, rain and snow dictated much of your life (and death), and you probably considered the sun, moon and five planets as gods.

You and I personally may not have kept track, but our local religious leader did, and maybe the even staged a ceremony at the winter solstice to ask the sun to make the days longer.
by moobuilds | 2025-12-22 16:06:15+00:00
I was spending hours hunting prompts across X, Reddit, Discord, and TikTok trying to figure out what to create with Nano Banana Pro. So I collected every prompt that worked and organized them all in one searchable vault.
12,000+ battle-tested prompts. Organized by category. With reference images. All free.
Instead of scrolling five platforms, you just open it and find exactly what you need in seconds.
Built as a side project to solve my own problem. Now helping other creators, designers, and dropshippers stop hunting and start creating.
Feedback welcome.
https://www.picsprompts.com/explore
by Imustaskforhelp | 2025-12-22 16:06:18+00:00
I was really confused too so I had assumed it was related to something written in the article as I had just opened up the comments

Now that I know CTA means Call to action, its okay but lets be honest that they could have atleast said either CTA (call to action) or just skip the abbreviation itself since I assume a very significant proportion of people were confused so what's exactly the point of an abbreviation like CTA is certainly up to debate and people are definitely debating it so I am waiting for what the overall consensus on the whole thing is :)
by phil21 | 2025-12-22 16:06:22+00:00
I certainly get it. But I also am very frustrated with the snails-pace development of closed loop glucose pump system. The tech has existed for quite some time to implement them in theory. Body hackers have already done so a decade ago.

I often wonder if we have created the correct balance here. How many quality of life years have been lost due to the decades lost by being conservative? And how much of the conservative pace is done for the “right” reasons vs personal or corporate CYA?
by gruez | 2025-12-22 16:06:52+00:00
>The problem here is the usage of "no-fault". It can be interpreted differently by everyone.

No, it's a legal term. From wikipedia:

>No-fault divorce is the dissolution of a marriage that does not require a showing of wrongdoing by either party.[1][2] Laws providing for no-fault divorce allow a family court to grant a divorce in response to a petition by either party of the marriage without requiring the petitioner to provide evidence that the defendant has committed a breach of the marital contract.

It quite literally means that people can request divorce for any reason.
by bluGill | 2025-12-22 16:07:03+00:00
As the other replies note, there are things. Many were destroyed though and so there is nothing to preserve. However much of North America lacks ready access to building materials that will last and so many of the natives built with organic goods that rotted away in a few decades and so there isn't much to find. You can find many flint arrowheads - but that only tells us when (about) it was made and since there are millions of them there isn't much to learn anymore.

Don't take the above as a sign that the natives were uninteresting or stupid. Just that they didn't leave much for us to learn from, both because they couldn't and because what they did was destroyed.
by WorldMaker | 2025-12-22 16:07:51+00:00
Depending on your organization, it can sometimes help to point the right compliance person to the latest NIST guidelines, specifically:

https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver

> Verifiers and CSPs SHALL NOT require subscribers to change passwords periodically. However, verifiers SHALL force a change if there is evidence that the authenticator has been compromised.

One of the nice cases where it can be helpful that standards themselves, which you can point to, have said to stop doing that.