MurphyA/hacker-news huggingface dataset:
by eek2121 | 2025-12-18 00:51:22+00:00
I think the big issue is that there is no 'next-gen API'. Microsoft has largely abandoned DirectX, Vulkan is restrictive as anything, Metal isn't changing much beyond matching DX/Vk, and NVIDIA/AMD/Apple/Qualcomm aren't interested in (re)-inventing the wheel.

There are some interesting GPU improvements coming down the pipeline, like a possible OoO part from AMD (if certain credible leaks are valid), however, crickets from Microsoft, and NVIDIA just wants vendor lock-in.

Yes, we need a vastly simpler API. I'd argue even simpler than the one proposed.

One of my biggest hopes for RT is that it will standardize like 80% of stuff to the point where it can be abstracted to libraries. It probably won't happen, but one can wish...
by rickydroll | 2025-12-18 00:51:36+00:00
I suspect the claim of community benefit from stores, such as a bookstore or a coffee shop, is highly overstated. There's a drugstore within walking distance from my thousand-person neighborhood. It closed recently. Granted, it was a Walgreens, but the number of clients was so low the Muzak was crickets.

I think the only viable businesses left in the neighborhood are a sub shop and a liquor store. Even the gas station is pretty low traffic.

There's a lovely little coffee shop within a couple of miles away, close to the city center. It has nice events in the evening, such as trivia nights, contest nights, etc. Plenty of parking. But do I really want to go to where almost everybody is on their phone when I can stay at home and pet my cats? I think that's one of the major competitors' stores have, especially small, targeted-audience stores. Home is much more comfortable and rewarding than going out, especially if you have a cat or a dog.
by lapcat | 2025-12-18 00:52:42+00:00
> At minimum, a credential manager distributed for wide use should encrypt exported/copied keys with a user selected secret or user generated key.

It feels like this stated minimum is not your actual minimum.

Consider for example a macOS user keychain. The keychain is encrypted on disk with a user-selected password. But once you unlock the keychain with the password, you can copy and paste passwords in clear text. The keychain is not a black hole where nothing ever escapes. And I have no objection to this setup; in fact it's my current setup.

So when you say copy and paste of passkeys in clear text is not a good idea, there's nothing inherent to encrypting credentials with a user key that prevents such copy and paste. There would have to be some additional restriction.
by mangonese | 2025-12-18 00:53:01+00:00
Hi everyone, I'm a high school student who got tired of manually calculating my rebalancing trades every quarter, so I built a free tool to automate it. What it does:

Calculates exact buy/sell amounts to hit your target allocation Add-only mode for tax-efficient rebalancing (only buys, no selling) Sell-only and contribution modes for different scenarios Auto-detects 60+ common tickers (VTI, VXUS, BND, etc.) and groups by asset class Shows portfolio health score based on concentration and drift Compares your allocation to common models (3-fund, 60/40, etc.) Generates PDF reports

Why I built it: Portfolio Visualizer is amazing for backtesting, but I wanted something simpler that just tells me "buy $X of VTI, sell $Y of BND" without all the extra steps. Also wanted add-only mode since I'm trying to avoid triggering capital gains. No catches:

Completely free, no signup required Runs in your browser, nothing saved to my servers No ads, no data collection

I'd love feedback from this community since you all know way more about portfolio management than I do. What features would make this more useful? What am I missing? Thanks!
by piccirello | 2025-12-18 00:53:20+00:00
Here's the PR[0] that resolved the SSRF issue. This fix was shipped within 24 hours of receiving the initial report.

It's worth noting that at the time of this report, this only affected PostHog's single tenant hobby deployment (i.e. our self hosted version). Our Cloud deployment used our Rust service for sending webhooks, which has had SSRF protection since May 2024[1].

Since this report we've evolved our Cloud architecture significantly, and we have similar IP-based filtering throughout our backend services.

[0] https://github.com/PostHog/posthog/pull/25398

[1] https://github.com/PostHog/posthog/commit/281af615b4874da1b8...
by andrekandre | 2025-12-18 00:53:28+00:00
> Metal takes Direct3D's object-oriented approach one step further by combining it with the more "verbal" API design common in Objective-C and Swift in an attempt to provide a more intuitive and easier API for app developers to use (and not just game developers) and to further motivate those to integrate more 3D and general GPU functionality into their apps.

slightly off-topic perhaps, but i find it amazing that an os-level 3d graphics api can be built in such a dynamic language as objective-c; i think it really goes to show how much optimization put in `objc_msgSend()`... it does a lot of heavy lifting in the whole os.
by ArkhamMirror | 2025-12-18 00:54:24+00:00
It doesn't have an online mode yet - although there's a lot of stuff in the works. However, since docker and LM Studio are already included in the setup, you can turn on MCP Toolkit in Docker and add the Docker MCP to LM Studio. With Docker Toolkit on, you get access to over 300 different MCPs for your local LLM including web search via DuckDuckGo or Brave Search, automation tools like n8n, web manipulation stuff with playwright, and all sorts of potentially useful stuff. (not a sponsor :P) Then your "local" LLM can suddenly do all sorts of agential stuff. This isn't out-of-the box capability, since I'm only building offline, local, privacy-focused features at the moment, but turning it on isn't a huge undertaking. If you are up for messing with some prompts in the files, you could even specify to the LLM what tool you want it to use for which task if it's not automatically using them when the need arises.
by eek2121 | 2025-12-18 00:56:08+00:00
Mobile is getting RT, fyi. Apple already has it (for a few generations, at least), I think Qualcomm does as well (I'm less familiar with their stuff, because they've been behind the game forever, however the last I've read, their latest stuff has it), and things are rapidly improving.

Vulkan is the actual barrier. On Windows, DirectX does an average job at supporting it. Microsoft doesn't really innovate these days, so NVIDIA largely drives the market, and sometimes AMD pitches in.
by cubefox | 2025-12-18 00:56:08+00:00
It is more likely that machine learning models will be used by the game artists for asset generation, but not for rendering those assets at the client side, which would be extremely expensive.

But another upcoming use case of ML on the client side is neural texture compression, which somehow needs not just less storage but also less RAM. Though it comes at a computational (frame time) cost on the client side, though not as bad as generative AI.

Neural mesh compression could be another potential thing we get in the future. (All lossy compression seems to go in the ML direction: currently there is a lot of work going on with next generation neural audio and video codecs. E.g. https://arxiv.org/abs/2502.20762)
by gus_ | 2025-12-18 00:56:12+00:00
it doesn't matter what netfilter frontend you use if you allow outbound connections from any binary.

In order to stop these attacks, restrict outbound connections from unknown / not allowed binaries.

This kind of malware in particular requires outbound connections to the mining pools. Others downloads scripts or binaries from remote servers, or try to communicate with their c2c servers.

On the other hand, removing exec permissions to /tmp, /var/tmp and /dev/shm is also useful.
by simonw | 2025-12-18 00:56:22+00:00
It's a per MONTH number! https://news.ycombinator.com/item?id=46301886#46305425

7,839 / 30 = 261 lines of code per day.

(Given that mistake, I'm slightly amused at the number of replies my post here drew defending that incorrect 40-per-day number. AI-haters-gonna-hate.)
by GSimon | 2025-12-18 00:57:01+00:00
You need to install a 3rd party software Blackhole to even get desktop audio for screen recording with QuickTime. After about an hour of troubleshooting settings I gave up and used OBS, esp since I was in a public space at the time and the Blackhole config disabled my headphones and for a moment you could hear a loud YouTube tutorial playing through my Mac speakers. Also the shortcut to stop screen recording on QuickTime sucks, it’s like CMD+CTRL+ESC and you need to have it memorized because there’s no “Stop Recording” button option
by PaulHoule | 2025-12-18 00:57:05+00:00
e.g. "tensors" are like "vectors" in they transform in a specific way when the coordinate system changes; what felt so magic about vectors as an undergrad was that they embody "the shape of space" and thus simplify calculations.

If you didn't have vectors, Maxwell's equations would spill all over the place. Tensors on the other hand are used in places like continuum mechanics and general relativity where something more than vectors are called for but you're living in the same space(/time) with the same symmetries.
by vkou | 2025-12-18 00:58:01+00:00
You're conveniently ignoring all the wild shadow docket decisions in Trump's favor with no provided justification. None of that sets a precedent.

There's also a giant bloody spectrum between 'policy that had a bad outcome for someone (hint: That's every policy)' and 'blatant pay-to-play corruption and criminality and treason' when it comes to that immunity. The court, of course, went all in on enabling the latter, instead of finding any kind of rational ground, because any rational ground would have put Trump in prison.

By failing to give any qualification of what the fuck an official act is, they've given him blanket immunity. And blanket immunity for an executive means that the constitution is as good as a piece of toilet paper. There are no consequences to him violating your rights.
by rayiner | 2025-12-18 00:58:25+00:00
The approach of the Catholic church is internally consistent, because it is premised on the existence of divine law which the church as an institution is specially entrusted with conveying to the laity.

That approach makes no sense in a secular democracy. There is no divine law to interpret, and there is no body like the Catholic church charged with mediating between divine law and the laity. The only source of authority is the consent of the governed. The constitution and amendments reflects the consent of a supermajority that can bind subsequent majorities. But any intermediate majority can be overruled by a subsequent majority. In that framework, the only sources of authority that can overrule the present majority are the edicts previously sanctioned by supermajorities. And the only relevant meaning of those edicts is what they would have meant to the people who consented to them.

If you dispense with the idea that the intent of the framers matters, then you’re dispensing with the authority of the supermajority that consented to what the framers wrote. That leaves only the present majority as the only source of authority.
by marc_abonce | 2025-12-18 00:58:30+00:00
> The TH3 test harness is a set of proprietary tests [...]

> The dbsqlfuzz engine is a proprietary fuzz tester.

It's interesting that an open-source (actually public domain) software uses some proprietary tests. It never occurred to me that this was a possibility, though in retrospective it's obviously possible as long as the tests are not part of the release.

Could this be an alternative business model for "almost-open-source" projects? Similar to open-core, but in this case the project would easy to copy (open features), hard to modify (closed tests).
by throwaway17_17 | 2025-12-18 00:59:58+00:00
I just wanted to drop a quick comment to clear up your first question. The term ad-hoc polymorphism to describe both Haskell and Rust’s typeclasses/traits is taken directly from Wadler and Blott’s paper which introduces the idea/concepts of type classes to Haskell. The name of that paper is ‘How to make Ad-Hoc Polymorphism less Ad-hoc’. This paper laid the groundwork for the implementation Rust uses and it is a mechanism for restraining ad-hoc polymorphism. But I think the term still applies to both Haskell and Rust’s typeclasses. Ad-hoc polymorphism is not a derisive term (when used as a term of art in discussions of implementations of programming languages), it is merely the PLT way of saying function name overloading. Rust and Haskell use very similar system to impose restrictions and semantic guiderails on ad-hoc polymorphism, but both languages still have it. To sum, I certainly do not mean any negative connotation with the term, I feel I am using it appropriately and as intended in this domain of discourse.

PS. I intend to write a more substantive reply to your comment, but didn’t think I should leave this unsaid.
by MarkLowenstein | 2025-12-18 01:00:19+00:00
The dream never dies, possibly because people remember when class time was supplanted by a movie. Anyone remember "I Am Joe's Heart"? Those movies showed that you could just sit and watch passively like TV, and you'd learn quite a bit, with professional diagrams and animations to help.

Yet your comment is true. Perhaps the difference is that science is inherently interesting because nature is confined to things that are consistent and make sense, while the latest security model for version 3.0 of this-or-that web service protocol, vs. version 2.0, is basically arbitrary and resists effective visual diagramming. Learning software (not computer science) is an exercise in memorizing things that aren't inherently interesting.
by eek2121 | 2025-12-18 01:00:20+00:00
I definitely disagree here. What matters for mobile is power consumption. Capabilities can be pretty easily implemented...if you disagree, ask Apple. They have seemingly nailed it (with a few unrelated limitations).

Mobile vendors insisting on using closed, proprietary drivers that they refuse to constantly update/stay on top of is the actual issue. If you have a GPU capable of cutting edge graphics, you have to have a top notch driver stack. Nobody gets this right except AMD and NVIDIA (and both have their flaws). Apple doesn't even come close, and they are ahead of everyone else except AMD/NVIDIA. AMD seems to do it the best, NVIDIA, a distant second, Apple 3rd, and everyone else 10th.
by epistasis | 2025-12-18 01:00:27+00:00
As the parallel comment said, this is probably inheritance, and the low tax basis can be passed to children and grandchildren.

This was recently modified, due to Prop 19, so that only the first million of property value can escape fair taxation. Since it was passed, there have been two attempts to bring back the landed gentry aspect of Prop 13, and there is a third attempt under way:

https://www.mercurynews.com/2025/11/30/third-attempt-to-repe...

The example house used in the story was taxed at $1,300/year before inheritance, on a $2M home value. After inheritance, it's an annual $18,000 bill, discounted from something like $30k-$40k.
by golly_ned | 2025-12-18 01:00:28+00:00
> Instead of spending three hours figuring out which API to use, they spend twenty minutes evaluating options the AI surfaced

This really isn't the case from what I've seen. It's that they use Cursor or other code generation tools integrated into their development environment to generate code, and if it's functional and looks from a fuzzy distance like 'good' code (in the 'code in the small' sense), they send an oversized PR, and it's up to the reviewer to actually do the thinking.
by newspaper1 | 2025-12-18 01:00:33+00:00
If you have a college degree, you might be able to work from home and not take your life in your hands twice a day on a freeway of death. If you don't have a college degree, you probably have to commute. If you live in a rural area you probably have to commute long distances, with low lighting on potentially icy and twisty single lane roads with oncoming traffic. In all the discussions of RTO vs WFH you almost never see safety mentioned, but it's an incredible upside to not having to drive to and from work every day.
by fragmede | 2025-12-18 01:01:12+00:00
> Unless you have the government artificially constraining the housing supply, in which case you need to fix that. And the same thing for medicine and education.

That is the meat of it. Zoning laws are why every city doesn't look like Hong Kong, even if it cost $1 to make a sky scraper. There are artificial limits on supply of doctors, and we don't pay teachers enough which is a whole other topic. If that's what we have to fix in order to make progress, I'm suddenly doubtful of how much progress will really be made in the face of the singularity.
by 9rx | 2025-12-18 01:01:27+00:00
The job is never to develop software. The job is always to solve problems for customers. Developing software is just a tool in the toolbox. As is, increasingly, using AI. As such, it is valuable to have those who are experienced in using AI on staff.

Which is nothing new. It has always been understood that it is valuable to have experienced people on board. The "cut the juniors" talk has never been about letting those who offer value go. Trying to frame it as being about those who offer experiential value — just not in the places you've arbitrary chosen — is absurd.
by aleks5678 | 2025-12-18 01:01:42+00:00
Back with another domain tool — this time for finding two-word domain names. I wanted to build an improved version of leandomainsearch whch adversied .blog domain which I never need to buy.

You know the format: DropBox, YouTube, SnapChat, SideKick... two simple words = memorable brand.

How it works: Enter your keyword → we combine it with 2,600+ curated prefixes & suffixes → you get instant suggestions like getcloud, cloudify, mycloud, etc. 8 TLDs: .com, .ai, .io, .co, .net, .org, .app, .dev... Real-time availability checks via official registries Flags premium domains so you don't get sticker shock

Built this because I wanted something faster than manually checking "get + keyword", "my + keyword", "keyword + hub", "keyword + ly" one by one. Check Product Hunt. It's there too, today only. Tell me what you think
by reactordev | 2025-12-18 01:01:45+00:00
As my guitar teacher used to say, “Slow is fast”. Mastering the techniques slowly and increasing speed until you’re “at speed” is the way to go.

Like riding a bike, you start slow with training wheels (or a helicopter parent) and work your way up to Yolo no-hander off that kicker ramp at 40 kph.
by wakawaka28 | 2025-12-18 01:01:47+00:00
That is all very good information. I don't often get into the standards and discussions about the stuff. Maybe ChatGPT or something can help me find interesting topics like this one but it hasn't come up so much for me yet.

>I'm a bit worried I'm misunderstanding you here? It's true that C++ as it is now requires you to instantiate templates to test anything, but what I was trying to say is that changing the language to avoid that requirement runs into migration/backwards compatibility concerns.

I see now. I could imagine a world where templates are compiled separately and there is essentially duck typing built into the runtime. For example, if the template parameter type is a concept, your type could be automatically hooked up as if it was just a normal class and you inherited from it. If we had reflection, I think this could also be worked out at compile time somehow. But I'm not very up to speed with what has been tried in this space. I'm guessing that concept definitions can be very extensive and also depend on complex expressions. That sounds hairy compared to what could be done without concepts, for example with an abstract class.
by throwaway2037 | 2025-12-18 01:02:00+00:00
> I met this somebody in Japan. If I remember correctly, he spend a summer "doing" RTK, then took 1 semester Japanese at his home university, went on exchange to Japan for two semesters, and after finishing his first semester abroad he passed JLPT 2 (not N2 - this was before they added the N)

While I certainly believe your story, I hope that you know he is an extreme outlier with super-human level of memorization and recall. Tiny question: Do you know if his uni with in the countryside or a big city? The people whom I have met that gained fluency the fastest (normies here, no superhumans, please!) all had significant time lived in the countryside, so they had an immersive language learning experience.
by fowl2 | 2025-12-18 01:03:50+00:00
> When you run Get-Mailbox -Identity <MailboxIdentity> | Format-List AuditEnabled, the AuditEnabled property always displays as True. This hardcoded display value doesn't reflect the actual mailbox-level audit configuration.

> To verify the actual mailbox audit status, use the Filter parameter in the following command: PowerShell

> Get-Mailbox -Identity <MailboxIdentity> -Filter "AuditEnabled -eq 'True'"| Format-List

> If the command returns the mailbox object, mailbox-level auditing is enabled. If the command returns an error stating the object couldn't be found, mailbox-level auditing is disabled.

https://learn.microsoft.com/en-us/purview/audit-mailboxes?so...
by coldtea | 2025-12-18 01:04:03+00:00
>are you critically thinking about what what you have in your life and whether or not it was a good use of your time any money? Money itself is possibility. A couch is just a couch. But despite this being true, that doesn't mean the couch wasn't worth it.

Generally speaking, sure. In real life though, it's not just that people get a couch, or some things they need, or ocassional splurge into buying some things as an indulgence.

It's that for shitloads of people (and the whole culture) are getting centered around consumption, constant consumption of things and even content (doomscrolling), mere consumption replacing other life aspirations, experiences, and relations.
by braingravy | 2025-12-18 01:04:27+00:00
Yeah it seems silly.

Why is college the primary group factor…? Is there some sort of health effect of sitting college classrooms for 5 years? Seems unlikely.

College education is highly associated and predicted by income/access to wealth.

Wealth inequality seems like a more likely explanation. Not seeing how they controlled for that across college vs non-college groups.
by anon-3988 | 2025-12-18 01:07:03+00:00
> No, it will just kill the browser. The fact he thinks otherwise tells me how out of touch he is.

Believe me when I say this but 99.99999% of the human population does not give a shit what is Firefox, Chrome, Edge, Brave, whatever.

Their survival is completely detached from how "good" it is. As long as it runs, opens a page, opens picture, plays video.

We all live in the tech bubble, to them its an "app" that is "annoying me with ads". And that if they know its an ad, not just part of the page. That is if they even know its a page, not just something my son told me to click if I want to go to "Facebook".
by AnimalMuppet | 2025-12-18 01:07:18+00:00
I've seen in here a couple people saying that Land Tax is the answer. But...

Let's say I have a building that's sitting vacant. Under the current system, I pay property tax, which is based on the land plus the improvements (the building). So it costs me to hold the building vacant.

If we switch to a land tax, then that would be taxed on the value of the land only (though presumably at a higher rate). But if moving to a land tax is revenue neutral, then the tax on vacant land would be higher than it was before, and the tax on improved land would be lower.

The net effect of a land tax, then, would be to lower the tax on this unoccupied building. How is that supposed to fix the situation?