MurphyA/hacker-news huggingface dataset:
by jonathanharel | 2025-12-15 07:38:44+00:00
Really interesting read, thank you! I'm currently working for a very traditional SaaS company (let's call us FooBar for the discussion), and I can say that this fear is very real. We talk a lot about the "FooBar killer" which is a theoretical startup company working right now on a better solution than ours. We know that there are a few of those and we even started working on one of our own exactly because of that. If you can't beat the "engineers with a spare Friday afternoon" you might as well join the attempt to replace you.
by MrJohz | 2025-12-15 07:39:26+00:00
The problem with the header file strategy is that TypeScript doesn't have total type inference. That approach works e.g. in OCaml, where you can (optionally) type the boundaries of the function and everything inside the function can always be inferred. But TypeScript works differently and doesn't support that approach. So fundamentally, what you're describing isn't really possible without using a very restrictive subset of TypeScript that can be totally inferred or having very broad type definitions.

So even if TypeScript did check the header file against the implementation, you'd still need additional annotations inside the implementation file. At that point, why not put all the annotations inside the implementation file directly?

Regarding your points:

1. JSDoc does support everything that TypeScript supports (that's the point of this article), although it does not necessarily support it as cleanly, hence why projects like Svelte typically use DTS files to define the project's types, and have those be imported inside JSDoc annotations. It's not perfect, but it gets you a long way.

2. You're right, JSDoc isn't picked up from imported libraries, but if you're publishing a library, you'll have a build script there, and at that point it's typical to generate the DTS files and pack those with the source code. That seems fairly reasonable to me — while developing, you don't need to worry about building files, but then when packaging and releasing you do.

3. You don't need a transpiler with JSDoc, the point behind JSDoc is that it's literally just the pre-existing JS documentation syntax. You can (and should) leave the comments in. Even if you're using TypeScript syntax, you should have JSDoc annotations (although adding the types to those annotations is redundant in that case). You can also just include the DTS files. As long as they're only imported from JSDoc, the runtime won't see them.

Personally, having tried out JSDoc-based TypeScript, I'd rather just use the native type stripping in Node for development, and keep with TS syntax, but there are large projects that have made the opposite choice, most noticeably Svelte. So I don't think it's a given that JSDoc users will inevitably graduate to TypeScript (especially when projects have gone in the opposite direction).
by cy1414569 | 2025-12-15 07:39:42+00:00
During the holiday season, standing out on social media or websites often comes down to creative and engaging visuals. Recently, I came across the Merry Christmas ai video Marker, an AI-powered tool designed to make festive video creation much easier.

Instead of recording videos or learning complex editing software, this tool allows you to turn images and audio into Christmas-themed talking videos. With natural facial expressions and synchronized speech, the generated videos feel lively and personal — perfect for holiday greetings, festive posts, or seasonal campaigns.

What makes it appealing is how accessible it is. You don’t need professional equipment or technical skills. Just upload your content, add your message, and let the AI handle the animation. The results are ready to share across social platforms, landing pages, or digital greetings within minutes.

For creators, marketers, and businesses looking to add a festive and interactive touch to their holiday content, the Merry Christmas ai video Marker offers a creative and time-saving solution worth exploring this Christmas season.
by rendx | 2025-12-15 07:39:45+00:00
> Severe mental illness (schizophrenia, bipolar) is neurodevelopmental in origin

This is a theory, not fact. There are proponents from the medical community that argue otherwise.

Professor Jim van Os at Maastricht University Medical Centre: 'Schizophrenia' does not exist https://www.sciencedaily.com/releases/2016/02/160203090208.h...

Robin M. Murray, Department of Psychosis Studies, Institute of Psychiatry, Psychology and Neuroscience: "In the last 2 decades, it has become obvious that child abuse, urbanization, migration, and adverse life events contribute to the etiology of schizophrenia and other psychoses. […] I expect to see the end of the concept of schizophrenia soon." https://pmc.ncbi.nlm.nih.gov/articles/PMC5605250/

The Role of Childhood Trauma in Psychosis and Schizophrenia: A Systematic Review: "There is a correlation between histories of child maltreatment with several structural changes in the brain." https://pmc.ncbi.nlm.nih.gov/articles/PMC8858420/
by ocdtrekkie | 2025-12-15 07:39:51+00:00
I did some evaluating on this option and there's definitely complexity to bear in mind: Proxmox has worse support for my storage and backup solutions, and if the MSP you are working with has a ton of experience on Hyper-V migrations and limited Proxmox experience, the support you get will lack.

I will say I'd eventually love to have my day job environment on Proxmox but it isn't quite ready to be there today. No shade to anyone who is able to be there by any means, but I think it's fair to say hypervisors aren't something you want to choose on vibes alone.
by bigcloud1299 | 2025-12-15 07:40:49+00:00
Paid Live Video Sessions (Primary Income) • Pros earn per-minute or per-session fees for live video consultations. • Example: • $3–5 per minute • Typical 10–20 minute call → $30–$80 per session • No travel time, no fuel, no tools, no overhead.

Pros log in when available (between jobs, evenings, weekends). • Ideal for: • Independent contractors • Apprentices with experience but limited licensing • Semi-retired pros • Pros during slow seasons

This unlocks underutilized labor.

⸻

4. Lead Conversion (Optional Upside) • If an issue requires in-person work, pros can: • Convert the session into a local job lead • Or refer the job and earn a referral fee
by hnlmorg | 2025-12-15 07:41:36+00:00
> They are. In `~/.aws/cli/cache` and `~/.aws/sso/cache`. AWS doesn't do anything particularly secure with its keys.

Thanks for the correction. That’s disappointing to read. I’d have hoped they’d have done something more secure than that.

> And none of the AWS client libraries are designed for the separation of the key material and the application code.

The client libraries can read from env vars too. Which isn’t perfect either, but on some OSs, can be more secure than reading from the FS.

> If I remember correctly, LastPass (or was it Okta?) was hacked by an attacker spying on the RAM of the process that had credentials.

That was a targeted attack.

But again, I’m not suggesting OIDC solves everything. But it’s still more secure than not using it.

> And if you look at the timeline, the attack took only minutes to do. It clearly was automated.

Automated doesn’t mean it happens the moment the host is compromised. If you look at the timeline, you see that the attack happened over night; hours after the system was compromised.

> They could have just waited a bit. 8 hours does not materially change anything, the credential is still long-lived enough.

Except when you look at the timeline of those specific attack, they probed AWS more than 8 hours after the start of the working day.

A shorter TTL reduces the window of attack. That is a material change for the better. Yes I agree on its own it’s not a complete solution. But saying “it has no material benefit so why bother” is clearly ridiculous. By the same logic, you could argue “why bother rotating keys at all, we might as well keep the same credentials for years”….

Security isn’t a Boolean state. It’s incremental improvements that leave the system, as a whole, more of a challenge.

Yes there will always be ways to circumvent security policies. But the harder you make it, the more you reduce your risk. And having ephemeral access tokens reduces your risk because an attacker then has a shorter window for attack.

> I tried to wargame some scenarios for hardware-based security, but I don't think it's feasible at all. If you (as a developer) have access to some AWS system, then the attacker running code on your behalf can also trivially get it.

The “trivial” part depends entirely on how you access AWS and what security policies are in place.

It can range anywhere from “forced to proxy from the hosts machine from inside their code base while they are actively working” to “has indefinite access from any location at any time of day”.

A sufficiently advanced attack can gain access but that doesn’t mean we shouldn’t be hardening against less sophisticated attacks.

To use an analogy, a burglar can break a window to gain access to your house, but that doesn’t mean there isn’t any benefit in locking your windows and doors.
by alin23 | 2025-12-15 07:43:43+00:00
Author here, to address some of your points:

- most finishes are indeed "food safe after curing", I'm aware of that. How they look on wood, how they perform when being dipped in hot soup or when drinking hot liquids from them, that's harder to assess without buying cans of finish that I have to store forever if I don't like them.

- HDI doesn't smell indeed, I never said it did. In fact two-component hardwax oils would have been perfect if it was easier to mix and apply in small quantities. Unfortunately for the few drops of oil I need on a spoon, it's too messy

- I'm talking about solvents in the definition that most consumers know about them: volatile solvents that usually smell strongly. I used low-VOC solvent-based finishes and they still smell. Organic components aren't the only smelly things in solvents, and I simply can't stand them anymore, that's all. It's not all about the dangers, it's for my own comfort.

If you can point me to a solvent-based hardwax oil that smells of only the oils and waxes inside, I'll buy it in a pinch and forget about melting waxes in my microwave. Google search doesn't help here, I need to hear it from someone with experience
by pvdebbe | 2025-12-15 07:43:57+00:00
Perfect timing. I just started to teach my wife Finnish so that she'll have easier time with real language lessons when she gets her paperwork sorted out to move here. And I've feverishly been looking for a self-hosted SRS system where I can feed new content to the "decks" and she can consume it on her schedule. Making micro decks that she'd import in Anki wouldn't be very convenient. This would seem perfect to me.

I'm happy to hear other suggestions too?
by benzible | 2025-12-15 07:45:57+00:00
I'm CTO at a vertical SaaS company, paired with a product-focused CEO with deep domain expertise. The thesis doesn't match my experience.

For one thing, the threat model assumes customers can build their own tools. Our end users can't. Their current "system" is Excel. The big enterprises that employ them have thousands of devs, but two of them explicitly cloned our product and tried to poach their own users onto it. One gave up. The other's users tell us it's crap. We've lost zero paying subscribers to free internal alternatives.

I believe that agents are a multiplier on existing velocity, not an equalizer. We use agents heavily and ship faster than ever. We get a lot of feedback from users as to what the internal tech teams are shipping and based on this there's little evidence of any increase in velocity from them.

The bottleneck is still knowing what to build, not building. A lot of the value in our product is in decisions users don't even know we made for them. Domain expertise + tight feedback loop with users can't be replicated by an internal developer in an afternoon.
by Freak_NL | 2025-12-15 07:46:45+00:00
This is one of the things I like most about his writing. In the scifi-whodunnit The Barbie Murders the concept of changing your body without too much trouble is used by a cult of people who all look exactly the same — lack of genitalia (i.e., 'Barbie'-like) included.

Varley wrote very much like Heinlein, but with the edgier parts of libertarianism shaved off.

Anyone looking for recommendations for reading Varley would do well to pick up some short story collections like The Persistence of Vision, The Barbie Murders, or Blue Champagne.

For a solid trilogy I can recommend the Gaea Trilogy (Titan, Wizard, and Demon), but that includes a lot of (fun!) cultural references which may be a tad harder on readers under 40.

His Eight Worlds books are great fun to read too. Pick up The Ophiuchi Hotline and see what you think to get a feel for those. These can be read independently of each other.

For young adults and anyone looking to read some scifi not quite as heavy and more reminiscent of Heinlein's juveniles, the Thunder and Lightning four book series is quite entertaining. One prescient social development he predicted there is that for an event you weren't present at to be believable (like something shown in a news broadcast or viral video) you would want a friend or a friend-of-a-friend to confirm it. If nobody was actually there, it was probably fake.
by novoreorx | 2025-12-15 07:47:11+00:00
> Preview workflows are clunky. Draft modes, toolbar toggles, account requirements just to see what your content looks like before it goes live. Having to add data attributes everywhere to connect front ends with backend fields feels unnecessary. Real friction for something that feels it should be simple.

I was happy to read this part at first, because it highlights what I hate most about Headless CMS. Hearing a company in the industry admit to this problem gave me hope that they are now going to fix it or have better solutions. But no, the rest of this article is just rambling about how 'you don't really know about CMS'. I mean, if you know better than us do, then why can't the experience of using Headless CMS be better? You are here to solve the problem, right?
by skybrian | 2025-12-15 07:47:22+00:00
This article doesn’t really explain how the new Arduino stuff works, which makes it harder to judge the impact of these new licenses. I’m used to flashing microcontroller boards over USB, originally from the Arduino IDE, more recently with PlatformIO. I’ve bought boards that have WiFi, but it wasn’t an essential part of the development environment.

I did a bit of searching and found some sketchy documentation that just leaves me with more questions. It sounds like Arduino’s new web editor programs boards wirelessly somehow? Does it assume the board has WiFi? What is this new, networked system? What Internet protocols does it use? How do you pair it with the web editor?
by drysine | 2025-12-15 07:48:16+00:00
So the "experts" tell you that calling Russians and the Ukrainian the same people is genocide, and you think "Hmm, they must be right, they are experts. It's the same as saying that Jews are subhuman".

>To call stealing kids from their parents "evacuating orphans" shows you, too, are supportive of genocide.

It's a stale propaganda trope.

When asked for the list of children, Ukrainian regime managed to produce a list with only 339 names and not too convincing explanation of this hundredfold reduction compared to previous claims.

"When asked why Kyiv didn’t present a more extensive list, given that 339 names are less than 2% of the total number of forcefully taken children, Euronews sources explained it was a decision based on previous experience.

“There is a risk that Moscow would try to buy time claiming it takes longer to check the names, while trying to change the identities of Ukrainian children further, making it impossible to track,” the source said." [0]

[0] https://www.euronews.com/2025/06/04/ukraine-demands-return-o...
by maxbond | 2025-12-15 07:48:33+00:00
I'm not sure how much you should do to stop people who enabled `--dangerously-skip-permissions` from shooting themselves in the foot. They're literally telling us to let them shoot their foot. Ultimately we have to trust that if we make good information and tools available to our users, they will exercise good judgment.

I think it would be better to focus on providing good sandboxing tools and a good UX for those tools so that people don't feel the need to enable footgun mode.
by MrJohz | 2025-12-15 07:48:45+00:00
In this context, the license is for using the Arduino Studio application. This is hosted by Arduino, and therefore needs to take user input, save it and work with it. As I understand it, this puts them in a complex situation: they don't own the code you've written (obviously), but they do need to do things with it like compile it and run it (when you press the button in the IDE). They're also hosting the code and therefore partly legally responsible for it.

At the very least, you need some sort of user agreement to specify the things you can do with their content, otherwise you can't really do it because it's their content and you're not allowed to mess with it by default. (Like you said, code is copyrighted by default.) You also need to specify the things that are necessary by law because you are hosting that code and therefore in part responsible for it. You also don't want to make the user sign a new agreement every other week if you add some new feature that they need to agree to use, because the cost of all those legal documents is prohibitive, and it's also very bad UX.

Added to this the fact that lawyers are naturally very conservative as a profession (generally only doing things that have been proven successful, rather than avoiding things that have been proven unsuccessful), and it's easy to see why these sorts of agreements tend to be more expansive than they perhaps need to be, in order to ensure the company is fully protected.
by matwood | 2025-12-15 07:49:32+00:00
I mostly agree. What it does do is raise the bar for a viable SaaS, and seeing some examples elsewhere in this thread, that’s a good thing.

I’d also add a number of the vibe tools tech adjacent people on my team have made are used and liked by the team. Even engineering likes them because it frees up their time to work on customer facing things.
by Rucadi | 2025-12-15 07:49:39+00:00
auto has a good perk, it prevents uninitialized values (Which is a source of bugs).

For example:

auto a;

will always fail to compile not matter what flags.

int a;

is valid.

Also it prevents implicit type conversions, what you get as type on auto is the type you put at the right.

That's good.
by finaard | 2025-12-15 07:50:08+00:00
> People also do not like the arduino ide because the days of easy setup and run are gone and a real way of debug is needed in most projects.

A surprising amount of embedded SoCs target the Arduino IDE either as the main IDE, or one of the main ones. And for those the setup is still pretty easy for non technical users - "Download IDE, paste this into the boardmanager, compile the sketch, upload". That's the main reason I'm still using the Arduino IDE for stuff I publish and expect less technical people to use.

The problem with the IDE is that it doesn't offer a gradual path to more advanced usage. You're pretty much stuck with a single file main project. You can split off functionality into libraries, but the way library resolving works is way worse compared to "proper" build systems. There are projects to provide makefiles for Arduino projects, but it's a bit of a pain to set up - I use that for CI on some of my stuff, but it clearly is on the other end of difficulty scale.

And of course the editor is horrible - but thanks to file watching and automatic reloads that isn't much of an issue nowadasy.
by squigz | 2025-12-15 07:50:50+00:00
> As for spam problems, require payment to add new contacts above the limit, and disable messaging to non-contacts. Or restrict messaging based on country/city (so that messaging to a different country is paid).

This just a) increases the costs for attackers, which don't actually stop them; and b) means the poor amongst a population will be limited in who they can talk to. Very convenient, that. Don't want your peasants talking to citizens from other countries.
by remslave | 2025-12-15 07:51:32+00:00
Bright text on dark backgrounds is unreadable garbage to me, like a kaleidoscope of strokes and shapes. I think it is because of astygmatism, not sure.

When software doesn't provide a light theme, I can't use it at all. Thankfully websites are easy to fix with browser addons... ffmpeg documentation in particular looks so bad by default in my opinion.

You should always give the user a choice because it's usually very trivial to make a theme and saves everone trouble down the line. Finding the option to switch can still be a pain sometimes which is silly.
by roncesvalles | 2025-12-15 07:52:03+00:00
This is borderline schizophrenia. Firstly, nobody replaces something that works with something that might or might not work.

Secondly, the way this person describes "agents" is not rooted in reality:

>Agents don't leave. And with a well thought through AGENTS.md file, they can explain the codebase to anyone in the future.

>What's going to be difficult to predict is how quickly agents can move up the value chain. I'm assuming that agents can't manage complex database clusters - but I'm not sure that's going to be the case for much longer.

What in the world. And of course he's selling a course. This is the same business as those people sitting in Dubai selling $6000 options trading courses to anyone who believes their bullshit. The grifter economy around AI is in full swing like it was around blockchain/crypto in 2017-2020.
by tomaskafka | 2025-12-15 07:52:46+00:00
The rationale is that an egregore called Apple, inc. is blindly fumbling ahead, unable to see the lives it is trampling.

Note that this has nothing to do with the actual well meaning (mostly - see leadership emails leaks) people forming the egregore.

The purpose of the company structure is isolating it from liabilities, and as the regulation which would force it to recognize the damage it did is mostly missing, thus the outcome.

See also https://www.ribbonfarm.com/2010/07/26/a-big-little-idea-call...
by throwup238 | 2025-12-15 07:53:11+00:00
They just cut them down in segments using a bucket truck to bring down the segments one at a time or use rope rigging and pulleys to lower them by friction hitch device.

“Tree rigging” is the term to search for. It’s generally less annoying to remove a century plant than a tree because there isn’t a huge stump or root system to deal with, and once they die they start to dehydrate and lose weight rapidly. The trick is to do it before they start falling over.