MurphyA/hacker-news huggingface dataset:
Ask HN: Dear Cloud Providers
by krautburglar | 2025-12-23 13:12:55+00:00
...would you please standardize on an automated abuse reporting procedure? We suffer so much abuse from all of you. Many of you ask that reports be submitted through your bespoke (and broken) web forms. I am not sorry to inform you that I will not be wrestling with your web form for each abuse that we receive. We are just going to block your subnets.

So I ask again, please come up with:

1. A standardized report schema. Doesn't matter if it's XML, JSON, or whatever, as long as it is a standard, and you all adhere to it.

2. A standardized automated submissions interface. Doesn't matter if it's e-mail, REST, SOAP, or whatever, as long as it is a standard, it does not require human interaction to submit a report, and you all adhere to it.

3. A standardized publication of your submissions interfaces. Doesn't matter if it's WHOIS, RDAP, or whatever, as long as it is a standard, and you all adhere to it.

Thank you for your attention in this matter.
by rocqua | 2025-12-23 13:14:41+00:00
No, the program should take care to enable TCP_NODELAY when creating the socket. If the program gets passed a FD from outside it's on the outside program to ensure this. If somehow the program very often gets outside FDs from an oblivious source that could be a TCP socket, then it might indeed have to manually check if it really wants Nagle's algorithm.
by snarf_br | 2025-12-23 13:14:53+00:00
I disagree, on both levels.

The application is perfectly fine for my needs and I'm ok with the ui.

But if you want something else, you can change that.

So grab the source code, try to get it to compile and run, and start making changes.

You have the freedom to do so. Use it. It doesn't matter that you're not great. Just do. No need to wait for others.
by kasey_junk | 2025-12-23 13:14:56+00:00
Bari Weiss is a conservative journalist that was appointed to the head of cbs under the appearance of being a suck up to Trump. Trump has attacked critical news organizations aggressively and that includes 60 minutes.

The fear when she was, recently, appointed was that she’d exert editorial control to hide stories critical of Trump. This episode being buried at least has the appearance of this happening.
by ssl-3 | 2025-12-23 13:16:05+00:00
It's a perspective, prefaced with a speech about human error. I might get it wrong -- so might you, yourself.

There remains some reason for the businesses and residents of the neighborhood in which Kit Kat was run over to have spent money to install and maintain things like security gates and iron pickets in front of the glass and entryways of their buildings.

When I find myself in such a neighborhood at night and am already intent upon leaving, is not my intention to stick around and maybe find out what that reason might be.

It is instead my intention to simply leave.
by windex | 2025-12-23 13:16:53+00:00
I see a similar theme with most techbros or rich VC groups. They say they dont like politics but they move fast to influence policy by buying influence. See what's happening with Trump and the tech companies.

What tech connected leaders really hate is the plebs being informed and having an opinion on policy. I see the same thing with the All-In podcast. All round glee on that podcast with things that negatively impact the working classes.

Billionaires are for billionaires while controlling the media.
by latexr | 2025-12-23 13:17:36+00:00
> No, I disagree with the premise

What premise?! I made general questions that I want to know for myself. They were questions, not accusations. The fact you saw then as such says something about you, not me. You flipped out for no reason.

> that's why I don't want to answer.

Then you could’ve said that too, instead of dismissing it with a sketch and lamenting without any clarification.

> Your questions are irrelevant.

That’s not for you to decide. Silly example: Imagine you have a peanut allergy and go to a restaurant. You ask the waiter if some dessert has peanuts in it and they answer “that is irrelevant”. Questions are relevant to the asker. You didn’t even try to understand why I made the questions, you simply assumed bad faith.

> If I didn't think it's good enough to release, I'd say something like "I vibe-coded this and didn't check it, use at your own peril".

And how is anyone supposed to know you’d do or not do that? If you had been upfront about using LLMs from the start, we wouldn’t be having this conversation.

> How much of the code I understand and how much an LLM wrote is entirely irrelevant.

No, no it is not. It may be irrelevant to you, but it’s not to everyone else. You don’t get to decide what other people think is relevant.
Show HN: Mysti – Claude, Codex, and Gemini debate your code, then synthesize
by bahaAbunojaim | 2025-12-23 13:18:32+00:00
Hey HN! I'm Baha, creator of Mysti.

The problem: I pay for Claude Pro, ChatGPT Plus, and Gemini but only one could help at a time. On tricky architecture decisions, I wanted a second opinion.

The solution: Mysti lets you pick any two AI agents (Claude Code, Codex, Gemini) to collaborate. They each analyze your request, debate approaches, then synthesize the best solution.

Your prompt → Agent 1 analyzes → Agent 2 analyzes → Discussion → Synthesized solution

Why this matters: each model has different training and blind spots. Two perspectives catch edge cases one would miss. It's like pair programming with two senior devs who actually discuss before answering.

What you get:
* Use your existing subscriptions (no new accounts, just your CLI tools)
* 16 personas (Architect, Debugger, Security Expert, etc)
* Full permission control from read-only to autonomous
* Unified context when switching agents

Tech: TypeScript, VS Code Extension API, shells out to claude-code/codex-cli/gemini-cli

License: BSL 1.1, free for personal and educational use, converts to MIT in 2030 (would love input on this, does it make sense to just go MIT?)

GitHub: https://github.com/DeepMyst/Mysti

Would love feedback on the brainstorm mode. Is multi-agent collaboration actually useful or am I just solving my own niche problem?
by jcgl | 2025-12-23 13:18:33+00:00
What makes ss different?

In any case, interesting to think of shared libraries (specifically shared libc) as a risk here. Makes sense, but I hadn't thought about it before.

That said, I'm having a hard time doing a threat model where you worry about an attacker only setting LD_PRELOAD but not modifying PATH. The latter is more general and can screw you with all programs (doesn't cover shell builtins, but it's not like those would just be one more step).
by rmoriz | 2025-12-23 13:18:48+00:00
Companies offering LIR services to hobbyists are probably not going to stay in business forever, as many of them are 1 person companies, too. Also keep in mind that they may change pricing. I understand, that with IPv6 the numbering strategy is almost always automatic and a renumbering can be done in a couple of hours, but it's still an inconvenience, especially when you have to update a lot of AAAA records.

I really think that when you start to operate an AS that you should have a direct RIR membership. And as mentioned above, RIPE has a higher financial entry barrier. I remember they had an object volume based pricing scheme 15 years ago, just like ARIN still has.
by bulbar | 2025-12-23 13:19:14+00:00
They would start to pardon criminals that conducted acts they like and fire the people that investigated those crimes.
They would try to bring everybody to jail that oppose or upset them or have opposed them.

They win when challengers become too rare because others are afraid of the consequences to oppose.

What the Trump administration did regarding the Capitol storming on January 6th tells you everything you need to know. They strive for power and nothing else.
by gardncl | 2025-12-23 13:19:26+00:00
Those costs with storage are if you want 100% power from solar which is not reality. US alone gets 20% of power from nuclear today, we’re not going around tearing down the base load and adding solar. We’re keeping base load and adding renewables, which include wind.

Also if renewables are so dumb and are so problematic why were they 95% of new power generation installed in the US last year?
Ask HN: Can You Patent Prompts?
by rcarmo | 2025-12-23 13:19:43+00:00
I decided to ask this question because of a rather contrived informal discussion I'm involved in with colleagues from both academia and industry, neither of which are lawyers but who share a few concerns about how we can go about creating new "things" and intellectual property in an increasingly AI-centric world.

You can take prompts as "processes", or "embodiments" or any variation on intellectual property, but I'd love to know what people think about this--my particular concern was that if you ship your software as Open Source, could someone nitpick over your prompts and claim they were taken from their IP/software? How valid would this be given that prompts are, essentially language? How detailed does a prompt need to be to be complex intellectual property that describes a process? Can we consider it as code and an embodiment of a concept?

Discuss. And Happy Holidays!
by coldpie | 2025-12-23 13:20:20+00:00
I agree with this, but I think the spec author's public statements means we don't need to give them the benefit of the doubt. People have repeatedly pointed out how this will result in vendor lock-in, and their response is either "yep, working as intended" or "we don't want to talk about this anymore." They're just steamrolling ahead with support from all the Big Tech companies. It's a really ugly situation =/
by TheNewsIsHere | 2025-12-23 13:20:36+00:00
> I only say that because I've noticed that it's most often people who have the "right" social characteristics that get the most aggressive responses. The people criticizing her wouldn't expect a white male to do anything else[...]”

I don’t think I’ve ever heard this idea communicated in this kind of framing. I think it makes your point quite striking.
by elitan | 2025-12-23 13:21:42+00:00
For those who can't wait for PG18 or need full instance isolation: I built Velo, which does instant branching using ZFS snapshots instead of reflinks.

Works with any PG version today. Each branch is a fully isolated PostgreSQL container with its own port. ~2-5 seconds for a 100GB database.

https://github.com/elitan/velo

Main difference from PG18's approach: you get complete server isolation (useful for testing migrations, different PG configs, etc.) rather than databases sharing one instance.
Show HN: Superapp – Native Swift iOS App Builder
by thekotik | 2025-12-23 13:22:25+00:00
Hi HN

We're Vitalik (Ex-Bolt) and Stas (Ex-Grammarly, Wix)

We build a MacOS vibecoding tool for native Swift iOS apps, that replaces Xcode for non-developers.

Features:
- Project Creation agent makes a real Xcode project in the background.
- Design Agent creates design system using SwiftUI (supports glassmorphism )
- Coding Agent is quite efficient with caching and parallel tool calls.
- The app gets build on your mac using iOS simulator and runtime, any bugs are passed back to coding agent.

Requirements:
- You still need an Xcode on your machine, but don't need to open it.

Website: https://www.superappp.com

Would love feedback for our Beta
by hombre_fatal | 2025-12-23 13:22:43+00:00
GUI kits like AppKit or GTK have built-in accessibility features like standard components (input fields, dropdown boxes) and view hierarchy that interact with accessibility tools for free. It's the main upside of a GUI.

TUIs are tricky.

I think TUI accessibility generally involves rereading the screen on changes (going by macOS VoiceOver). It can optimize this if you use the terminal cursor (move it with ansi sequences) or use simple line-based output, but pretty much zero TUIs do this. You'd have to put a lot of thought into making your TUI screenreader friendly compared to a GUI.

The thing going for you when you build a TUI is that people are used to bad accessibility so they don't expect you to solve the ecosystem. Kind of like how international keyboards don't work in terminal apps because terminal emulator doesn't send raw key scans.
by jghn | 2025-12-23 13:23:09+00:00
I do almost everything git manually at the CLI. But the Jetbrains IDEs have a fantastic GUI git merge tool, and I also like the local git diff UI. Add in integrated blame mode, ability to pull up version-diff files, and that sort of thing.

It's not part of my daily driver toolbox, but they do get used a lot by me.
by fn-mote | 2025-12-23 13:23:12+00:00
> it's just me and a professor of previously mentioned course who are actively involved in the project

Unfortunately, past experiences I have are that a very small academic team = stay away, project will have too many rough edges.

I hope your experience goes better. Tip: A revenue stream gives you something to work with. Failing that, carefully document your whole architecture so contributors will be willing to help.

## Irrelevant Complaining

Just ran across this last year: good looking software, great concept, first half of features work great … enough to hook me, so when I finally found out the other half was bug ridden I stuck it out but ouch. Needless to say, no design document so even fixing stuff was a pain point.
by malfist | 2025-12-23 13:23:26+00:00
The Free Press is the publication she created that you refer to as "center right". I would not characterize it as center anything, it was created with an agenda to push far right narratives, including the elimination of Palestine. The publication primarily focuses on social issues and anti-woke narratives. In particular, it regularly publishes either outright anti-trans people content, or engages in dishonest concern trolling
by coldpie | 2025-12-23 13:23:33+00:00
Passkeys don't require it, but relying-parties may: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... If enough RPs ban clients that let users manage their own data in the name of "security," then it is effectively required by passkeys. The passkey spec could have been written to be resilient against this type of abuse, but instead this abuse is explicitly considered a feature of the spec.
by pigpop | 2025-12-23 13:25:00+00:00
Ok, I can see why they wouldn't list a copilot related stuff since that page is just providing a list of public Amp threads, some of which have public repos. Copilot is a different framework so you wouldn't find it on that page. I linked to the Amp threads because you can see both the conversation as well as the repo for those that include one.
by evs91 | 2025-12-23 13:26:17+00:00
You are pretty much going to experience that no matter what. Even if you update UFW to only allow Cloudflare IP ranges, you will get scans against SSH and if you turn on deny logging you will see that your IP still is being scanned. Changing the IP just moves your target somewhere else for it to be indexed again. Fail2Ban rules, like you mentioned, will reduce your attack surface and get the "background" automated attacks somewhat at bay. You can do things like only allowing SNI HTTPS requests and not direct IP connections (which is what you doing with the Cloudflare proxy). From what you are saying: you are doing a solid middle of the road start. I would focus on making sure you keep the security posture up as you implement other services.
Is this just for your projects or are you providing a service to customers? If it's just you - does the effort merit the work. If its customers, there are more things you can do but "do you need to" is going to be more up to you.

TL;DR - sounds like a solid starting place; don't worry about the IP address
by TheNewsIsHere | 2025-12-23 13:26:33+00:00
You’ve put your finger right on the issue.

A lot of people in tech today think politics is something “other” to tech. It’s the same kind of “we just make the thing, how it’s used, by whom, for what, and why is someone else’s problem” that pervades the likes of Meta Platforms Inc. With today’s technology industry, thinking like that is naive at best.

The worst of the worst tech bros and their earlier investors (like Marc A) created and have tried hard to spread that idea around. The goal is to keep politics out of the tech workforce so that they can meddle in politics without fighting multiple fronts.

You’re not supposed to say that though, for that’s saying the quiet part out loud. The sad thing is how many people buy it hook line and sinker.

Which isn’t to say you’re somehow wrong for wanting a safe space away from political discourse. It’s important not to forget how empowering silence and ignorance are to causes that typically undermine the rights of the populace.
by albert_roca | 2025-12-23 13:26:46+00:00
The "Equilibrium Mass" mz is Not Physical The claim that Fe = Fg at some special mass mz = √(α·mP) ≈ 1.86×10⁻⁹ kg is mathematically true but physically meaningless

m_z is the geometrical point of transition between regimes. The physical observable is m_phi , where the total intrinsic acceleration function reaches its minimum, following the extreme value theorem.

δ = √5 is Pure Numerology The "dynamic constant" δ = √5 appears because: 1² + 2² = 5 (Pythagorean triple) Therefore δ = √5 is "fundamental"

δ = √5 comes from the scaling exponents. a_g scales as m^1/3. a_e scales as m^−5/3. The ratio is 5. Since the interaction is quadratic, it's the result from minimizing the acceleration function, not numerology.

The Standard Model calculation requires 12,672 Feynman diagrams at 5-loop order and achieves agreement to 0.1 ppm

Precisely. 12,672 diagrams is the definition of brute force. Achieving 63 ppm with one single term (a_μ = α / 2 · π + α^2 / 12) is quite the opposite.

The factor 2.5 = 5/2 is claimed to come from δ²/w, but this has no connection to quark mass generation via the Higgs mechanism.

The model is geometric in nature. Quarks are not considered fundamental building blocks, but a geometric necessity of the way that the proton can be fragmented. One can disagree with this premise, but it geometrically derives the fractional charges (1/3, 2/3) that the Standard Model merely assigns.

Conceptual Confusions 1. Charge as Topology (Section 1.3) Claim: "Electric charge is not intrinsic but a topological attribute of spatial surface." Problem: This contradicts gauge theory.

That's not a problem, nor a confusion. The model assumes that charge is not an independent substance, but a topological attribute.
by whywhywhywhy | 2025-12-23 13:27:31+00:00
His business is too tied to being in Apple's good graces anyway to take him that seriously these days. In the past he's been given access well above a lot of bigger outlets and way above what a blog that size should have especially when most of his social media output is now on mastodon to an audience the fraction of his X size.

All though I would say EU regulation has far more misses than hits, this and forcing Apple to USB-C were great but millions of man hours a year are burned navigating cookie banners on every website and chat control being forced through soon.

So we have two wins on iOS device convenience, not a great trade off for the other overreach.
by windexh8er | 2025-12-23 13:27:41+00:00
Between the two (TikTok & DJI) ByteDance is the bigger threat to the US. But...Gotta have my vertically shot, short form, ad-laden, misinformation canon!

If the US does actually ban DJI drones the price of them will skyrocket (there's no good competition at the price point), DJI will do their little rebrand shuffle they did last time, and we'll have wasted a few news cycles (by design).
by selfhost | 2025-12-23 13:28:06+00:00
Hi HN — I built Postastiq because I wanted a self hosted blogging platform that felt closer to writing than managing a system.

Postastiq is written in Go, stores data locally using SQLite, and runs as a single binary or container with no external services required. It supports posts, pages, media, RSS, and optional access controls.

This is intentionally minimal and still early. I’m sharing it to get feedback from people who’ve built or run blogs before — especially around what feels unnecessary or what you’d expect even in a lightweight setup.

Happy to answer questions and hear critiques.
by latexr | 2025-12-23 13:29:48+00:00
Please stop assuming bad faith. I didn’t complain about anything, I asked a few questions to make an initial call on the level of engagement I’d want to have with the project. I even openly said I’d have just moved on without further reply if it was admitted to be entirely LLM generated with no review.

https://news.ycombinator.com/item?id=46364478
by ImPostingOnHN | 2025-12-23 13:29:54+00:00
> Exactly what I said

Actually, it's exactly what I said. Here's the quote:

>It is largely in cooling pools and piling up in empty lots around nuclear power plants, waiting for safe, secure storage to appear.

See? Exactly.

> Yes it is.

No it isn't.

> I mean, if you’re going to dispute my point without providing any evidence

lol, you never provided us with any in the first place! Why would I waste more time and effort disproving some claim of yours, than you spent trying to prove the original claim in the first place? That'd be falling for gish gallop.

Until you produce sufficient evidence to convincingly prove that your original claim is true, we can safely assume it is not. So, onus is on you: It's up to you to prove your own point, nobody else. If you’ve got data, let’s see the data.
by beepbooptheory | 2025-12-23 13:32:04+00:00
Hmm maybe walk us through this. If they were convicted of crimes in other countries, is the idea here that they have escaped their punishment? Like thats a significant concern? Seems like a lot of prison breaks!

Or is it that perhaps they were convicted but not punished enough (for us), so we have to correct that?

Or something else? If they were convicted of a crime in another country, it suggests that justice has been doled out already, right?
by dragontamer | 2025-12-23 13:32:51+00:00
> Why would I take it back? Did I lie in it?

Just say that the Trump admin is friendlier to Google. Can you do that for me?

Or are you unable to even do that?

> How is that even relevant

If it's not relevant, you should be able to admit it yourself without any issue. So take the statement 'This admin is friendlier to Google than Biden admin was', and make sure your statements are logically consistent with said statement.

That's all I'm asking you to do.

> Sometimes I can't tell here who's more crazy US righties or US lefties...

Don't making this a left or right thing. I'm just seeing if you can admit to the differences between 2024 and 2025 with respect to Google and the antitrust case. It's not like the fine issues of antitrust cases are an issue that the left or right really rallies behind.
by refurb | 2025-12-23 13:32:55+00:00
You’re confusing the faction leading the country with the people themselves.

South Korea and Taiwan as countries don’t have an inherent will to align with the West. The countries are made up people with different beliefs, some are more aligned to democracy (what you call the West) and some aren’t. Even today Taiwan has a political party that is pro-CCP.

The logic is not that the CCP will suddenly want to align with the West, it’s that the people will become more pro-Democratic as they become more developed (both economically and politically).
by TheNewsIsHere | 2025-12-23 13:33:59+00:00
A bit late on my reply here, sorry.

There are minor clumsy points here and there in the UI, but nothing major and nothing that’s a stumbling block.

It’s hard to paint a perfect comparison without using the same features but all the basics are there and working.

The version we have in use doesn’t support a gist functionality but the last I looked there was a PR for a similar feature with a less-GH—lawyer-baiting name. That was the biggest thing for me.

It has a GH Actions compatible rubber system too.