MurphyA/hacker-news huggingface dataset:
by jeffbee | 2025-12-19 00:54:08+00:00
This makes sense to me. I also don't think that data centers or anyone else should draw down fossil aquifers that never recharge[1]. But that wasn't what I asked. In data center country, the eastern Nebraska / western Iowa area that is thick with major data centers, the aquifers are alluvial. They are above the Ogallala, and they are tied to the Missouri River. They are a renewable resource and I see no problem with utilizing their water for human purposes.

1: A good book about this is "Running Out: In Search of Water on the High Plains"
by agotterer | 2025-12-19 00:54:09+00:00
My partner and I divide and conquer. He focuses on front of house and I handle the backoffice.

The process starts ~3 months before the event. We start by picking a theme or region. Then contact some restaurants that fit the criteria and pitch them the event. That kicks off the back and forth on cost and menu.

Around 4 weeks before the event we send a save the date + previous event recap email. We summarize the last event and tease the next event, without giving away the actual resturant or type of food.

Over the next week we prep the invite email and payment forms. This requires putting the dishes on our menu template, research and writing about the history of the dishes, the region, and the resturant. Some of this content also goes onto our website.

Three weeks out we send the invite, which is a lottery system. Members have 5 days to request a seat and place a credit card hold. 5 days later we run the lottery (I wrote some basic software to randomize assignment, conver the card auth to capture and release any cards that didn't get assigned a ticket). Then we send an email to everyone who got in with which night they recieved and another email to anyone who was waitlisted. Everyone is added to a spreadsheet to track.

1 week before the event we send a reminder email and a last chance to cancel before the ticket is non refundable.

At the event we play host and check each guest in and say hi to everyone. Then we give a prepared ~5 min intro about the food, restaurant, celebrate any milestone members, and make any general house keeping accounments. Our 20 club members get a branded apron.

At the event we take video and pictures. Over the course of the next 4 weeks we post dish pictures with descriptions and history of the dish on our instagram. We also make a 1-2 min recap video of the event which also goes on our instagram and website.

Separate from the actual event related work we have to manage the books, handle members emails, and review membership requests. More recently we started selling shirts, so there's a little work in managing that as well.
by wtallis | 2025-12-19 00:54:29+00:00
That switch appears to have 2x 400G ports, 2x 200G ports, 8x 50G ports, and a pair of 10G ports. So unless it allows bonding together the 50G ports (which the switch silicon probably supports at some level), it's not going to get you more than four machines connected at 200+ Gbps.
by hn_acc1 | 2025-12-19 00:54:44+00:00
This. When I moved from Ontario, Canada (where they charge a yearly fee for them), to CA, I was all excited to get a vanity plate - until I saw they also charge a yearly fee..

In the most ironic twist of all - Ontario did away with license plate renewals a few years ago, and now, I would actually consider a vanity plate..

I've always wondered if a regular plate was better for avoiding speeding tickets - a vanity plate is much easier to validate, IMHO.
by Neywiny | 2025-12-19 00:55:26+00:00
This vaguely reminds me of years ago when a friend got hit at an intersection and went to court to fight that he wasn't at fault. I ran the numbers a bit and found that whoever hit him would've been moving at a very high though not outlandish (think maybe 60mph in a 30mph or something) speed. But they never showed up and he won by default
by UniverseHacker | 2025-12-19 00:56:07+00:00
Too little torque for what? I grew up driving full sized trucks and vans that had only half the power of an eGolf in a much larger heavier vehicle yet can still keep up with modern freeway traffic.

Model 3 isn’t even in the same league for build quality, driving experience, or overall design and engineering. It has a more powerful drivetrain and larger battery because it came out years later, but the Golf is all around a great car in all of its forms, and the model 3 is just not. It’s not a crazy powerful car but its no dog- it has twice the power most people will ever want or need for regular driving.
by BeetleB | 2025-12-19 00:56:33+00:00
> Anything that makes it easy to accidentally send local data elsewhere is a privacy issue.

How is it "easy" if nothing is sent unless you configure the AI?

What I'm asking is: If I do a brand new profile, default configuration, how can any AI related feature send anything that is of privacy concern? If you don't set up an LLM provider, it has nowhere to send to.

I may be wrong, which is why I'm asking in the thread. So far, no one has shown what the problem is.
by MangoToupe | 2025-12-19 00:57:01+00:00
Ok, I don't see a comparison happening. Israel seems to kill americans on a regular basis. Saudi arabia doesn't seem to be much friendlier either, not to mention refusing to align with our proclaimed values.

You gotta do more to convince me that iran is any worse than either

Half the things you linked barely have anything to do with iran; certainly much less connection than saudi arabia had with 9/11. Do better!
by tom_ | 2025-12-19 00:57:06+00:00
A couple of the comments to the article suggest using 64-bit numbers, which is exactly the right solution. 2^64 nanoseconds=584.55 years - overflow is implausible for any realistic use case. Even pathological cases will struggle to induce wraparound at a human timescale.

(People will probably moan at the idea of restarting the process periodically rather than fixing the issue properly, but when the period would be something like 50 years I don't think it's actually a problem.)
by CamperBob2 | 2025-12-19 00:57:07+00:00
No, I'm not "fully converted." I reject the notion that you have to join one cult or the other when it comes to this stuff.

I think we've all seen plenty of hallucinated sources, no argument there. Source hallucination wasn't a problem 2-3 years ago simply because LLMs couldn't cite their sources at all. It was a massive problem 1-2 years ago because it happened all the freaking time. It is a much smaller problem today. It still happens too often, especially with the weaker models.

I'm personally pretty annoyed that no local model (at least that I can run on my own hardware) is anywhere near as hallucination-resistant as the major non-free, non-local frontier models.

In my example, no, I didn't bother confirming the Russell sources in detail, other than to check that they (a) existed and (b) weren't completely irrelevant. I had other stuff to do and don't actually care that much. The comment just struck me as weird, and now I'm better informed thanks to Firefox's AI feature. My takeaway wasn't "Russell wanted to nuke the Russians," but rather "Russell's positions on pacifism and aggression were more nuanced than I thought. Remember to look into this further when/if it comes up again." Where's the harm in that?

Can you share what you asked, and what model you were using? I like to collect benchmark questions that show where progress is and is not happening. If your question actually elicited such a crappy response from a leading-edge reasoning model, it sounds like a good one. But if you really did just issue a throwaway prompt to a free/instant model, then trust me, you got a very wrong impression of where the state of the art really is. The free ChatGPT is inexcusably bad. It was still miscounting the r's in "Strawberry" as late as 5.1.
by stantonius | 2025-12-19 00:57:52+00:00
This is so relatable it's painful: many many hours of work, overly ambitious project, now feeling discouraged (but hopefully not willing to give up). It's some small consolation to me to know others have found themselves in this boat.

Maybe we were just 6 months too early to start?

Best of luck finishing it up. You can do it.
by xyzzy_plugh | 2025-12-19 00:57:52+00:00
> I believe that process was better than me just fully validating it myself

Why?

> and part of the process toward encouraging them to use LLM as a tool for their work.

Did you look at it from their perspective? You set the exact opposite example and serve as a perfect example for TFA: you did not deliver code you have proven to work. I imagine some would find this demoralizing.

I've worked with a lot of director-level software folk and many would just do the work. If they're not going to do the work, then they should probably assign someone to do it.

What if it didn't work? What if you just wasted a bunch of engineering time reviewing slop? I don't comprehend this mindset. If you're supposedly a leader, then lead.
by lovich | 2025-12-19 00:58:07+00:00
I interpreted their comment more along the lines of

“Don’t critique ycombinator companies or go against their interests, otherwise you’re fine”

YC companies and their founders have special privileges on here and there is an opaque moderation system. There is no data you could provide beyond full transparency into your entire organization(obviously not happening) that would convince anyone that there isn’t influence that they have over communication here
by tonymet | 2025-12-19 00:58:27+00:00
I would like to see what their process for safety alignment and guardrails is with that model. They give some spicy examples on github, but the responses are tepid and a lot more diplomatic than I would expect.

Moreover, the prose sounds too modern. It seems the base model was trained on a contemporary corpus. Like 30% something modern, 70% Victorian content.

Even with half a dozen samples it doesn't seem distinct enough to represent the era they claim.
by makeitdouble | 2025-12-19 00:58:38+00:00
The "Manhattan Project" part is that the research lab was confidential...which doesn't seem that unusual for a high profile research lab, but that aside.

Comparing China's public efforts to build a computer chips industry to the US effort to nuke Japan is kinda wild. Outside of the bait part, the piece coming from Japan Times makes it that much spicier.
by sinatra | 2025-12-19 00:59:17+00:00
Piggybacking on this post. Codex is not only finding much higher quality issues, it’s also writing code that usually doesn’t leave quality issues behind. Claude is much faster but it definitely leaves serious quality issues behind.

So much so that now I rely completely on Codex for code reviews and actual coding. I will pick higher quality over speed every day. Please don’t change it, OpenAI team!
by Sohcahtoa82 | 2025-12-19 00:59:18+00:00
The attacker can do anything using your session.

The "Hello world" examples always show using it to steal your cookies, which obviously doesn't work now when nearly every site uses the "httpOnly" flag which makes the cookie inaccessible to JavaScript, but really, stealing your session isn't necessary. They just have to make the XSS payload run the necessary JavaScript.

Once the JavaScript is running on the page, all bets are off. They can do ANYTHING that the page can do, because now they can make HTTP requests on your behalf. SOP no longer applies. CSRF no longer protects you. The attacker has full control of your account, and all the requests will appear to come from YOUR browser.
by rahimnathwani | 2025-12-19 01:00:00+00:00
No it's not.

With a cluster of two 512GB nodes, you have to send half the weights (350GB) over a TB5 connection. But you have to do this exactly once on startup.

With a single 512GB node, you'll be loading weights from disk each time you need a different expert, potentially for each token. Depending on how many experts you're loading, you might be loading 2GB to 20GB from disk each time.

Unless you're going to shut down your computer after generating a couple of hundred tokens, the cluster wins.
by 7thaccount | 2025-12-19 01:00:33+00:00
Bahaha. I was looking for the Warhammer 40k comment.

For those that don't know, the writers of Warhammer basically copied off of history and many other IP like Dune. In Warhammer, there was also a Council of Nicaea where it was discussed whether the use of psychic powers was acceptable in the Imperium of Man.
by layer8 | 2025-12-19 01:00:55+00:00
If your acceptance criteria state something like “produces output f(x) for any inout x, where f(x) is defined as follows: […]”, then you can’t possibly test that, because you can’t test all possible values of x. And if the criteria don’t state that, then they don’t cover the full specification of how the software is expected to behave, hence you have to go beyond those criteria to ensure that the software always behaves as expected.

You can’t prove that something is correct by example. Examples can only disprove correctness. And tests are always only examples.
by derrida | 2025-12-19 01:00:56+00:00
I wonder if you could query some of the ideas of Frege, Peano, Russell and see if it could through questioning get to some of the ideas of Goedel, Church and Turing - and get it to "vibe code" or more like "vibe math" some program in lambda calculus or something.

Playing with the science and technical ideas of the time would be amazing, like where you know some later physicist found some exception to a theory or something, and questioning the models assumptions - seeing how a model of that time may defend itself, etc.
by sunrunner | 2025-12-19 01:01:09+00:00
> The funding for underrepresented creators was a condition of my involvement in this project, so doesn't represent his values so much as mine. He was at least willing to do it though, which I'm not sure he would be today.

Interesting, and thanks for the sources. I was under the impression that it was the same fund as that announced in 2010 [1] but the date in [2] plus the apparent timeline does align.

"I'm not sure he would be today" is a strawman and just Hazelden's own current views of Blow, but I doubt there's going to be a direct quote (or even better, a new grant from Thekla) to back it up. But yes, 7 years is a long time and the political landscape has changed "somewhat".

[1] http://the-witness.net/news/2010/03/announcing-indie-fund/

[2] https://www.gamesindustry.biz/the-witness-studio-offering-us...
by jrowen | 2025-12-19 01:01:44+00:00
Yes, it can get tricky if you have to scroll a bunch, e.g. moving a file in a big directory into a subfolder, trying to hit that one pixel where it will scroll up, or using two other fingers to attempt to scroll, while holding the drag finger down...(CLI pros, you win this one).

I would like a desktop pick and place that works like drag and drop, you click and then it sticks to the cursor, but you are free to do whatever gestures until you click again.
by Swannie | 2025-12-19 01:03:09+00:00
If only there were community standards for this...

Oh, there are, for years :D This has really stood the test of time:

https://rfc.zeromq.org/spec/42/#24-development-process

And its rationale is well explained too:

https://hintjens.gitbooks.io/social-architecture/content/cha...

Saddened by realizing that Pieter would have had amazing things to say about AI.
by scottyah | 2025-12-19 01:03:22+00:00
It's the semantics of "can", where it is used to suggest feasibility. When I moved and got a new commute, I still "could" bike to work, but it went from 30min to an hour and a half each way. While technically possible, I would have had to sacrifice a lot when losing two hours a day- laundry, cooking dinner, downtime. I always said I "can't really" bike to work, but there is a lot of context lost.
by mrguyorama | 2025-12-19 01:03:24+00:00
My favorite part of this argument is that the "It's not a ban" folks always insist "But but parents authority"

Mhmm, and what about when those parents are wrong? Does the state not have a duty to educate people even when parents think that the moon landing is a hoax or plate tectonics aren't real?

When your parent is an insane person, sometimes a school is your only protection.

But so many conservatives find this unconscionable. How dare you! Parents can never be wrong!

The point of public schools is to make an educated populace. Not a populace that only knows what their parents want them to know.

Yes, this means that your kids might learn something you disagree with! The horror! Something like "America is a republic, not a democracy" like I was taught, or "slavery wasn't that bad" like a lot in the south are taught.

Ah, turns out they never really cared that people were getting taught things their parents didn't agree with. Only when children are taught things contrary to fundamentalist christian beliefs.

The point of education is so that your child can see multiple narratives and make their own choices, so they can learn to evaluate narratives and figure out which might have substance and which might just be nonsense. But the people who start their children into church before they can form full sentences really seem to hate that idea.

I wonder why...
by gbear605 | 2025-12-19 01:03:31+00:00
I don't think there is such a time. As long as writing has existed it has privileged the viewpoints of those who could write, which was a very small percentage of the population for most of history. But if we want to know what life was like 1500 years ago, we probably want to know about what everyone's lives were like, not just the literate. That availability bias is always going to be an issue for any time period where not everyone was literate - which is still true today, albeit many fewer people.
by Sn0wCoder | 2025-12-19 01:03:35+00:00
Great work building something and having the courage to show HN ;-)

Interesting design. Even though I read the instructions still could not get it to work for 30 or so seconds. Might want to show some text 'Now Scroll' with up/down arrows to the left or right of the list.

Seems ok when the list is in the middle of the page and you already have room to scroll up and down, but how is it going to work when the list is at the top or bottom of the page?

Or when the page is so short it does not scroll at all? I suppose you could have the container scroll but then it needs to be considerable larger than the list.

Honestly when you click 'Pick' all of the others should say 'Place' would be more intuitive and give the user options to support both. As they use it they will pick up they can scroll if they want.
by benoau | 2025-12-19 01:04:01+00:00
I wish the EU would hurry up and decide if up-to-20% fee for using external payment services abides with their April instructions "must be free". It seems like Apple needs a good nudge to move past rent-collector and now debt-collector mentality.

I wonder if Japan will react to Apple's newly announced conditions for them, where you can use IAP and pay 15 or 26% commission, or not use IAP and pay 10% or 21% commission + your payment provider so the prices are effectively the same either way + other terms like those in the article, which basically means you get nothing but headache for not using IAP.

This tactic is specifically illustrated in Japan's compliance hypotheticals (on page 51):

> Hypothetical Scenario 73: A designated provider, when individual app providers use alternative payment management services, demands fees or places financial burdens at a level that creates a high likelihood of making the use of such services practically difficult

https://www.jftc.go.jp/file/MSCA_Guidelines_tentative_transl...
Show HN: LLM-as-a-Form
by claudeomusic | 2025-12-19 01:04:24+00:00
I dread a future where every internet interface is just a prompt. I built this library more as inspiration than a formal recommendation; my goal is to show that we can still have wonderful, intuitive, and varied UI/UX without being limited to the ubiquitous chat interface found in every product today.
by rvnx | 2025-12-19 01:06:01+00:00
I would not be that confident as you can see: on their first example, they show Discord and the XSS code is directly executed on Discord.com under the logged-in account (some people actually use web version of Discord to chat, or sign-in on the website for whatever reason).

If you have a high-value target, it is a great opportunity to use such exploits, even for single shots (it would likely not be detected anyway since it's a drop in the ocean of requests).

Spreading it on the whole internet is not a good strategy, but for 4000 USD, being able to target few users is a great value.

Besides XSS, phishing has its own opportunity.

Example: Coinbase is affected too though on the docs subdomain and there are 2-step, so you cannot do transactions directly but if you just replace the content with a "Sign-in to Coinbase / Follow this documentation procedure / Download update", this can get very very profitable.

Someone would pay 4000 USD to receive 500'000 USD back in stolen bitcoins).

Still, purely with executing things under the user sessions there are interesting things to do.
by solid_fuel | 2025-12-19 01:06:27+00:00
> why isn't the west's own supply chain options as immense?

They used to be. Since roughly the 80's, policymakers have decided it is better for the shareholders to outsource most of that industry overseas to China and India and etc, where the labor is cheaper.

Note that workers and especially union members actually have every incentive to keep that production domestic, but shareholders and CEOs profit when they can cut labor costs and the typical Western consumer values cheap products more than the health of domestic industry.

Western industries have been supported by subsidies, tax incentives, bailouts, low interest rates, and a dozen other things from the gov't but the same policies reward outsourcing and financial engineering more than actual production capacity.
by notnullorvoid | 2025-12-19 01:06:35+00:00
This specific XSS vulnerability may not have been, but the linked RCE vulnerability found by their friend https://kibty.town/blog/mintlify/ certainly would've been worth more than the $5,000 they were awarded.

A vulnerability like that (or even a slightly worse XSS that allowed serving js instead of only svg) could've let them register service workers to all visiting users giving future XSS ability at any time, even after the original RCE and XSS were patched.
by nateb2022 | 2025-12-19 01:07:46+00:00
> if you design with one vision (AI) then non-AI version of the product will be an after thought

That’s like saying if a car manufacturer adds a "Sport Mode", the steering wheel and brakes suddenly become an afterthought.

Being AI-available means we'll welcome more Firefox users who would otherwise choose a different browser. Being AI-optional means we won't alienate the anti-AI crowd. Why not embrace both?
by _--__--__ | 2025-12-19 01:07:51+00:00
You're a human intelligence with knowledge of the past - assuming you were alive at the time, could you tell me (without consulting external resources) what exactly happened between arriving at an airport and boarding a plane in the year 2000? What about 2002?

Neither human memory nor LLM learning creates perfect snapshots of past information without the contamination of what came later.
by bigyabai | 2025-12-19 01:07:52+00:00
> Now we're bottlenecked by taste.

Speaking personally, I feel like this website is bottlenecked by inconsistent widget margins and unintentionally obtuse design metaphors. Copying Teenage Engineering is not "taste" any more than drinking from a mug that Dieter Rams used to own is tasteful. The cargo cult of design has always been the problem, form has to follow function.
by gausswho | 2025-12-19 01:07:59+00:00
I'd like to weaponize all this scanning into a force for good. Instead of phoning home to Roku, send the fingerprints up to an ADID database registering every ad on the planet. Open up an API so that any video stream can detect an ad and inject Max Headroom replacement clips.

Come on hackers. We could murder the global economy with this shit.