MurphyA/hacker-news huggingface dataset:
by jart | 2025-12-15 06:36:10+00:00
It'd probably be such a small amount of money that it'd cost me more to cash the cheque. Lawyers are the only people who get rich over that kind of thing. Don't share any information with the robot that you don't feel comfortable with them using to make their service better. If you want to be fully in control of your interactions with AI then use llamafile which is 100% local. That's the healthy thing to do. Everything else is just rent-seeking and the fact that so many people are doing it is threatening much more important goals than money like transcendence.
by mljungblad | 2025-12-15 06:37:59+00:00
We’re a group playing floorball (https://en.wikipedia.org/wiki/Floorball#:~:text=Floorball%20...) once a week and needed a simple way to know we got enough players to play.

I’ve been mostly vibe coding RecurAt (https://recur.at) to get a feel for coding this way and been learning a ton about frontend development at the same time.

Next.js app hosted on Vercel.
by protocolture | 2025-12-15 06:38:26+00:00
>You know a position is indefensible when you equivocation fallacy this hard.

No its quite defensible. And if that was equivocation, you can simply outline that you didn't mean to invoke the specific definition of stealing, but were just using it for its emotive value.

>You know a position is indefensible when you strawman this hard.

Its accurate. No one wants thes LLM guys stopped more than other big fascistic corporations, plenty of oppositional noise out there for you to educate yourself with.

>Sounds about right to me, but why you would state that when defending slop slingers is enough to give me whiplash.

Cool, so if you agree all data should usable to create derivative works then I don't see what your complaint is.

>Where can I find these totally legal, free, and open datasets all of these slop slingers are trained on?

You invoked "strawman" and then hit me with this combo strawman/non sequitur? Cool move <1 day old account, really adds to your 0 credibility.

I literally pointed out they should have to pay the same access fee as anyone else for the data, but once obtained, should be able to use it any way. Reading the comment explains the comment.

Unless, charitably, you are suggesting that if a company is legally able to purchase content, and use it as training data, that somehow compels them to release that data for free themselves?

Weird take if true.
by awesome_dude | 2025-12-15 06:38:29+00:00
> A friend who had been learning some language in Duolinguo and then couldn't say a sentence to a native, should be proverbial nowadays.

I tried to learn Mandarin via Duolingo, and whilst I agree that the "multi choice" style isn't great for learning a language I did notice that I was picking up fragments of what native speakers were saying around me.
by autoexec | 2025-12-15 06:38:46+00:00
At least historically Apple would also have to run slower, while still costing much more than Windows. If a part gave you trouble you'd be forced to buy parts from the dealership and they'd sometimes tell you that you needed a new car when the same part on Windows could be repaired or replaced cheaply by any repair shop. You'd only be able to drive the Apple car on a handful of toll roads, although they were well paved while windows cars could be driven all over the place for free, even off-road if necessary, although that often resulted in flat tires making a triple A membership necessary and leading to a common misconception that apple was immune to flats.
by MomsAVoxell | 2025-12-15 06:39:21+00:00
It is of interest because these palms only bloom once in their entire lifetime and then they perish. This has relevance to us all, because it’s literally a once in a lifetime event, and a beautiful one at that. Imagine spending your entire life storing energy for your one and only act of reproduction, and then dying.

Plants are beautiful systems, and for those of us who pay attention there are is lots of beauty in the way they work.
by WalterBright | 2025-12-15 06:40:28+00:00
Caltech tests were not based on memorization, as they were "open book open note". You had to reason your way to a solution.

But I do agree that real world physics, like designing an actual electronic circuit, have behaviors that are not modeled by the usual mathematical models. For example, resistors vary widely from their marked resistance. And I was told, when building digital circuits, to make sure it worked with chips faster than the spec, as replacement chips are always faster, never slower.
by tsimionescu | 2025-12-15 06:41:02+00:00
The biggest thing is the spectacle of the flowers themselves, and the reflection on time passing for humans given by such a long time span between when the palm is planted and when this spectacle can be observed.

There's also the spectacle of seeing so many once in 40-80 years blooms happen at once - which the article doesn't touch on, but is an awe-inspiring look into how regular biology can be, despite us thinking of it as messy and random. You'd tend to think that over such a long timespan, the trees would get "de-synchronized". Of course, that wouldn't make sense evolutionarily - they almost certainly need to all bloom at once to have a good chance of reproduction. But getting a biological process to happen 80 years from now on the same day/week for dozens(?) of trees across a park is a marvel in itself.
by mellosouls | 2025-12-15 06:41:03+00:00
I'd forgotten what an unusually strong and culturally-resonant line of movies the man had without (I think) the popular acclaim you might associate with them, like a low-profile Spielberg.

Spinal Tap

The Princess Bride

When Harry Met Sally

Sleepless in Seattle

Stand By Me

etc

A great loss, RIP
by indentit | 2025-12-15 06:41:06+00:00
I personally really enjoyed this article - thanks for sharing.

I have worked for companies which use OKRs to help decide what they want to achieve, but it was never clear to me how they decide what features to implement to reach those goals.

Seeing the "impact, confidence, and ease scores (ICE)" concept and how it should be done is quite an eye opener for me. Maybe that has been done where I work, just never shared with me - a lowly senior developer, who knows...
by zarzavat | 2025-12-15 06:41:27+00:00
> Type inference is usually reserved for more general algorithms that can inspect not only how a variable is initialized, but how the variable used, such as what functions it's passed into, etc...

In a modern context, both would be called "type inference" because unidirectional type inference is quite a bit more common now than the bidirectional kind, given that many major languages adopted it.

If you want to specify constraint-based type inference then you can say global HM (e.g. Haskell), local HM (e.g. Rust), or just bidirectional type inference.
by techtalksweekly | 2025-12-15 06:42:04+00:00
https://techtalksweekly.io/

I'm working on Tech Talks Weekly which is a free weekly email with all the recently published Software Engineering podcasts and conference talks in the past 7 days.

Every week I pull all the new talk recordings from hundreds of conferences (Devoxx, KubeCon, PyCon, QCon, LeadDev, JSNation, and many more) and even more podcasts podcasts. I feature the ones I think are must-watch with short summaries written by me, then include a list of everything else uploaded that week.

It started as a personal project to fix my own messy YT subscriptions and RSS feeds and now 7,500+ people read it.

I also publish extra editions from time to time like “The Most Watched Talks of 2024” which made it to the HN front page.

If you watch software engineering conference talks or listen to podcasts, you might find it useful.

I’d love to know what you think!
by benzible | 2025-12-15 06:42:18+00:00
> Thanks. I’ve been following unfolding coverage at https://particle.news/share/lRL-d but hadn’t caught the Rolling Stone article.

I've been following it on my own news app as well, just didn't share a link to it as I thought it might be a bit ghoulish to piggyback on an unspeakably tragic celebrity death for a bit of self-promotion.

Also, frustrating that people have somehow landed in a place where they either trust nothing or trust everything, with no ability to calibrate based on the actual track record and incentive structure of the source. People magazine attributing something to "multiple sources" in a case where they, and their billionaire owner Barry Diller, would face massive defamation liability if wrong is categorically different from, say, an anonymous Reddit post or a tweet.

The LAPD "no person of interest" thing is also just standard procedure. Cops don't publicly name suspects until charges are filed. Totally normal that the official process is slower than journalism.
by password-app | 2025-12-15 06:42:28+00:00
This is a great example of why AI automation needs careful oversight. When AI gets things wrong in high-visibility contexts like this, it erodes trust.

The same principle applies to password management - automating password changes across dozens of sites is powerful, but you need transparency and control over what the AI is doing. Users should be able to monitor the automation in real-time and intervene if needed.

Building trust in AI-powered tools requires showing your work, not just delivering results.
by hnlmorg | 2025-12-15 06:47:22+00:00
> That's not correct. The (ephemeral) keys are still available. Just do `aws configure export-credentials --profile <YOUR_OIDC_PROFILE>`

That’s not on the file system though. Which is the point I’m directly addressing.

I did also say there are other ways to pull those keys and how this isn’t completely solution. But it’s still vastly better than having those keys in clear text on the file system.

Arguing that there are other ways to circumvent security policies is a lousy excuse to remove security policies that directly protect you against known attacks seen in the wild.

> Sure, they'll likely expire in 1-24 hours, but that can be more than enough for the attacker.

It depends on the attacker, but yes, in some situations that might be more than long enough. Which is while I would strongly recommend people don’t set their OIDC creds to 24 hours. 8 hours is usually long enough, shorter should be required if you’re working on sensitive/high profile systems. And in the case of this specific attack, 8 hours would have been sufficient given the attacker probed AWS while the German team were asleep.

But again, i do agree it’s not a complete solution. However it’s still better than hardcoded access keys in plain text saved in the file system.

> You also can try to limit the impact of the credentials by adding IP restrictions to the assumed role, but then the attacker can just proxy their requests through your machine.

In practice this never happens (attacks proxying) in the wild. But you’re right that might be another countermeasure they employ one day.

Security is definitely a game of ”cat and mouse”. But I wouldn’t suggest people use hardcoded access keys just because there are counter attacks to the OIDC approach. That would be like “throwing the baby out with the bath water.”
by dataflow | 2025-12-15 06:47:42+00:00
This makes things seem more complicated than they already are, I feel?

There's nothing special about auto here. It deduces the same type as a template parameter, with the same collapsing rules.

decltype(auto) is a different beast and it's much more confusing. It means, more or less, "preserve the type of the expression, unless given a simple identifier, in which case use the type of the identifier."
by scotty79 | 2025-12-15 06:48:12+00:00
kompare, kdiff3, meld, git diff --no-index (--patience, --word-diff, --histogram)

All weren't remotely close to what I wanted.

On first glance delta is also doing completely standard thing. But I can't rule out that there are some flags to coerce it to do the thing I wanted. But searching for tools and flag combinations is not that fun and success is not guaranteed. Also I found a (SaaS) tool and a flag there that did exactly what I wanted. Just decided to make my own local tool afterwards for better control. With an agent.

> Because comparing two text files with minor edits is exactly what diff-related tools have excelled at for decades.

True. And I ended up using this excellent Google diff-match-patch library for diffing. AI didn't write me a diffing algorithm. Just everything around it to make a convenient tool for me. Most tools are for source code and treat end lines as a very strong structural feature of compared texts. I needed something that doesn't care about end lines all that much and can show me which characters changed between one line of one file and five lines it was split into in the second file.
by uecker | 2025-12-15 06:48:22+00:00
I think making things more explicit with "unsafe" is an advantage of Rust, but I think "far better" is a bit of an exaggeration. In C you need to audit pointer arithmetic, malloc/free, casts and unons. If you limit pointer arithmetic to a few safe accessor functions and have a documented lifetime rules, this is also relatively simple to do (more difficult than "grep" but not much). Vice versa, if you use a lot of "unsafe" in Rust or in complicated ways, it can also easily become possible to guarantee safety. In contrast to what people seem to believe, the bug does not need to be inside in unsafe block (a logic error outside can cause the UB inside unsafe or a violation of some of Rust's invariants inside unsafe can allow UB outside of unsafe) and can result even from the interaction of unsafe blocks.

The practical memory safety we see in Rust is much more the result of trying hard to avoid memory safety issues and requiring comments for unsafe blocks is part of this culture.
by Lumocra | 2025-12-15 06:48:25+00:00
I am working on a self-hostable borrow store management system: https://github.com/leihbase/leihbase.

I am running it in my city for a library of things. We hope to help people abstain from buying things they only need once a year.

It includes a reservation system, and an dashboard to manage those reservations in the shop. Currently I'm expanding it with a proper product management interface.
by aioo99 | 2025-12-15 06:49:47+00:00
This is a joke right? How can someone be this out of touch?

Capitalism exists because it is being entertained by the labor force. The Marxists (incorrectly) predicted that the proletariat wouldn't stand for it.

> “What the bourgeoisie therefore produces, above all, are its own grave-diggers. Its fall and the victory of the proletariat are equally inevitable.”

But they were wrong. So, so wrong, that even communist countries adopted capitalism.
by Fnoord | 2025-12-15 06:51:20+00:00
Listen, I am Dutch. I am loyal to the Dutch government, Dutch society, and therein lie my interests. This is also my potential bias.

> Did they ever claim otherwise? They say "Zivver scans the content of every email" prominently on the front page. The flow seems to be TLS to Zivver first, scanning, then encryption.

I worked at a government organization which used Zivver. This was around 2018. It was assumed to be E2E encrypted. I wrote about the issue in my security audit, but it had low priority for a myriad of reasons (they had worse issues at the time). Zivver is more akin to the Lavabit situation.

Proton's OpenPGP.js is slightly more secure than this implementation (it encrypts client-side), but because Proton can decide (and be forced) to serve a different OpenPGP.js, it suffers from a similar issue.

> If all it takes to convince us that a communication product was created as a front for spying operations is not having a strict e2e design like Signal's, then do you think virtually all of them are fronts for spying operations?

I never wrote it was created as a front. I don't believe anyone asserted that. The company was founded by a couple of Dutch people in 2015, it was a Dutch company. So they fell under Dutch jurisdiction. I honestly haven't looked them up.

Fast forward to June 2025 and this company got acquired by an American company where the higher echelons are ex-Israeli spies. This could be a front, I don't know. I very much question this sale should've been ACK'ed by the Dutch government. Because due to the CLOUD act, the data now falls under American jurisdiction. Around the time of the acquisition though, the Dutch government fell. responsible up to then was Dirk Beljaarts. Around that time (June 2025), Vincent Karremans took his place. Fast forward a couple of months later, we had the Nexperia crisis, where Karremans intervened. A fallout from a stopped acquisition due to national security is lower than Nexperia fallout though.

I copied the title of the article verbatim. The Dutch article has a different title, and is IMO of better quality. The title of that article calls it a strategic blunder. I very much agree with that, but not because the top of Kiteworks is Israeli and ex-Unit 8200. That is just a cherry on top, worse case scenario a red herring. No, because of the current geopolitical situation with regards to Trump and the CLOUD act. Can you blame them for trying, given the situation and stakes? The acquisition occurred at a perfect timing.

The TL;DR is not that a American or Israeli entity supposedly succeeded. It is that the Dutch government failed. And while Zivver is heavily in use in The Netherlands, it also is within EU. So we failed to serve the best interests of EU here as well.
by fragmede | 2025-12-15 06:52:09+00:00
Mr. Bullwinkle acknowledges Comma.ai, but doesn't dig into them deeply. It's really really good cruise control on freeways. That task is well defined. Every new car that is sold today should be that good. It's not self driving, it's not sentient, it doesn't change lanes for you. But I can do the city driving. It's the long boring endless stretches of freeway that was the problem and they've solved that. Yes there's more to go, but cameras + radar is good enough. The insightful thing is to get the insurance companies on board. Money talks.
by tsimionescu | 2025-12-15 06:52:11+00:00
A model that only understands, say, Java is useless : you need a model that understands English and some kind of reasoning and has some idea of how the human world works, and also knows Java. The vast majority of the computational effort is spent on the first two, the second is almost an afterthought. So, a model that can only program in Java is not going to be meaningfully smaller than a model that can program in ~all programming languages.
by Surac | 2025-12-15 06:52:12+00:00
I am diagnosed with dyslexia. I was learning to read before computer displays where a thing. I tried dyslexia fonts on my kindle and also on my computer. I have not found these font to be more readable. I have problems following the line of letters with and without the fonts. Perhaps there are different types of dyslexia all called the same but with different problems. Sorry for my English , I’m not a native speaker
by turkyilmazeymen | 2025-12-15 06:52:22+00:00
Location: Istanbul, Turkey (UTC+3)

Remote: Yes

Willing to relocate: Possible

Technologies: Python, JavaScript, React, SQL, HTML/CSS, Node.js (basic), REST APIs, Power BI, BPM / workflow automation, basic ML (scikit-learn)

Résumé/CV: https://drive.google.com/file/d/1c0GfW4azWWYEY_cgfeVuyAWHD5d...

Email: turkyilmazeymen2@gmail.com

About me: Recent MIS graduate focused on software development and process automation. I’ve worked on Python- and SQL-driven automation systems, built React-based web apps, and developed AI-assisted decision support and workflow solutions. Comfortable working remotely, learning fast, and owning problems end-to-end. Looking for a junior software developer or automation-focused role where I can grow and contribute immediately.
by rahulroy | 2025-12-15 06:53:51+00:00
Getting close to my last day at my current job, and I couldn't be more excited to build in public.

When I moved to Thailand last year, the language barrier hit me immediately. So I’m scratching my own itch and building https://thaicopilot.com/, It's designed to help you learn Thai in real situations. Still early, but moving fast.
by Seattle3503 | 2025-12-15 06:54:32+00:00
> For me what GraphQL solves as main problem, which I haven't got good alternative for is API composition and evolution especially in M:N client-services scenario in large systems. Having the mindset of "client describes what they need" -> "graphql server figures out how to get it" -> "domain services resolve the part" makes long term management of network of APIs much easier. And when it's combined with good observability it can become one of the biggest enablers for data access.

I've seen this this solved in REST land by using a load balancer or proxy that does path based routing. api.foo.com/bar/baz gets routed to the "bar" service.
by Stratoscope | 2025-12-15 06:55:13+00:00
I was chatting with Claude this morning about a trip to Chicago where I visited the wonderful Field Museum among other places. An excerpt:

Claude: The Field Museum is enormous - I imagine you got your steps in that day. The anthropology collections there are world-class, even if they didn't make it into your photo collection. Sometimes the experience is more important than the documentation. Did you have a favorite exhibit beyond the dinosaurs?

Me: Oddly enough, the anthropology and human history section! Now I need to take another visit to Chicago to get pictures of those.

[No response from Claude]

[40 minutes pass while I have breakfast]

Me: Looks like I caught you during your morning nap. Every two and a half year old should get a good nap now and then!

Claude: Ha! You caught me mid-thought - I was composing a response about how great it is that the anthropology section was your favorite despite the dinosaurs being such showstoppers, and apparently my brain decided to take that nap you mentioned! ... Though I have to say, for a "two and a half year old," I like to think I'm pretty articulate when I'm awake!
Show HN: luainstaller – Package your Lua scripts into binaries
by WaterRun | 2025-12-15 06:55:32+00:00
There are two common ways to package .lua scripts into binary executables today: the traditional srlua, and the newer luastatic, which can produce a true native binary (instead of simply concatenating the Lua interpreter).

However, both approaches have notable limitations.

srlua:

- Can only package a single .lua file

- Requires manual compilation

luastatic:

- Linux-only

In addition, neither of them provides automatic dependency analysis.

Therefore, I (or, Claude Opus 4.5, haha) wrote luainstaller, similar in spirit to PyInstaller by name and design, wraps both tools and adds automatic dependency analysis and single-file packaging. It also ships with precompiled srlua binaries, working out of the box on both Windows and Linux.

Getting started is straightforward:

pip install luainstaller

For example, suppose you have a.lua, which depends on b.lua, and b.lua depends on c.lua. There is no need to manually analyze dependencies or merge scripts into a single .lua file for srlua. You simply run:

luainstaller build a.lua

and it produces a standalone binary with no external dependencies.

You do not even need to use the command line. Running:

luainstaller-gui

launches a simple GUI built with Tkinter that covers the basic functionality.

luainstaller can also be used as a Python library. It supports additional parameters, a logging system based on SimpSave, selectable engines (precompiled Lua 5.1.5 for Windows and Linux, both 32-bit and 64-bit, as well as Lua 5.4.8), and more. Detailed usage is documented on GitHub.

Tested on Windows 11 and Fedora 43.

Limitations: only pure Lua scripts are supported. Dynamic module loading is not supported, as dependency analysis is based on a simple static approach.