MurphyA/hacker-news huggingface dataset:
by astrostl | 2025-12-01 00:41:58+00:00
I have Claude itself write CLAUDE.md. Once it is informed of its context (e.g., "README.md is for users, CLAUDE.md is for you") you can say things like, "update readme and claudemd" and it will do it. I find this especially useful for prompts like, "update claudemd to make absolutely certain that you check the API docs every single time before making assumptions about its behavior" — I don't need to know what magick spell will make that happen, just that it does happen.
by splintersio | 2025-12-01 00:42:10+00:00
Based on your quiz results(https://lolwifi.network/quiz/58efbbca-9b4d-4825-adb7-0e98133...) , I notice you acknowledged:

- TLS only protects application-layer data (Q1) - doesn't cover layers 2-6 - Client isolation cannot be verified before joining (Q2) - ARP spoofing, DNS manipulation, port scanning, certificate solicitation, MAC collection, and traffic analysis are all possible attacks (Q6) - Personal computers lack defense-in-depth (Q8) But then concluded: "Public WiFi is safe for everyone" (Q10). Your HN comment says "there's nothing preventing me from securely using public wifi" - but you haven't explained how. This is the issue: vague, hand-wavey claims without materialistic explanation(s). What specific protections are you using? You acknowledged these malicious behaviours in Q6: - ARP spoofing - DNS manipulation - Port scanning - Certificate solicitation - MAC collection - Traffic analysis You claim HTTPS makes it safe, but you didn't explain: - How HTTPS prevents ARP poisoning (it doesn't - this happens at Layer 2) - How HTTPS prevents port scanning of your device (it doesn't - attackers scan your listening services directly) - How HTTPS prevents DNS manipulation when 80% of users don't use DoH/DoT - How HTTPS prevents SNI leakage when ECH adoption is <5% - What specific mitigations you've deployed against the network service exploitation you acknowledged TLS operates at layers 5-7. The attacks you listed in Q6 happen at layers 2-4. Your HTTPS traffic is irrelevant to these attacks. The quiz asked about everyone, not just you: This isn't about how well you've personally secured your device. It's about whether the general public should be told "public WiFi is safe because HTTPS." Most people: - Don't know what services are listening on their network interfaces - Are running unpatched software (Q8: personal computers lack defense-in-depth) - Aren't using DoH/DoT - Aren't aware SNI is unencrypted - and the rest If you're going to have a good conversation about this you need to provide better, more specific explanations - not just "HTTPS makes it safe." What exact technical controls are you deploying? What does the average person need to configure to achieve your level of protection? Without specifics,it's all a bit hand-wavey.
by godelski | 2025-12-01 00:42:17+00:00
> people who do super extraordinary things are extraordinary themselves

Nothing I said contradicts this. I even agree.

The problem is the inverse. You imply that people who do not do extraordinary things are not themselves extraordinary.

You can be extraordinary but shit out of luck. You can't rise to the top by just being the best, you also need and the right support. Take for example any startup. Good luck getting to scale without that. Eventually someone needs to take a chance on you.

This is something VCs even know. They invest broadly because a small percentage will be big hits. It's because things fall along a power distribution rather than a normal. The upside is unbounded. Most will lose, for many reasons, including just bad luck.

Or I'll let Picard say it

> It is possible to commit no mistakes and still lose. That is not a weakness, that is life

Its because random elements exist in life. It is not deterministic. If it was then VCs would exclusively invest in unicorns and take no losses.

Hindsight is useful but it's also easy to ignore subtle but critical variables

https://m.youtube.com/watch?v=1TCX90yALsI
by Rendello | 2025-12-01 00:42:21+00:00
This reminds me of an article I read [1] where a surgeon, deciding his skills had room for improvement and lives could be bettered by honing those skills, had a retired surgeon come in occasionally and coach him. The external perspective and quick feedback improved his confidence and outcomes, and he convincingly advocated that practice.

https://www.newyorker.com/magazine/2011/10/03/personal-best
by Zecc | 2025-12-01 00:42:33+00:00
For what it's worth, it's what caught my attention. I wouldn't have found it so captivating if it had only said "Fixing Google Nano Banana Pixel Art". To be clear, it's not because of Rust in particular. It would have been the same if it said "with C#", or "with Python", or even just "programmatically". And on that note: I feel disappointed. I thought I would be reading about the development process, and not just a product presentation.
by gerdesj | 2025-12-01 00:42:36+00:00
Kubuntu.

KDE is generally considered close to a Windows experience, although, I'm afraid the "start" menu is still affixed to the left hand side and not in the middle of the taskbar (which is weird). It also doesn't bother with too much telemetry and all that stuff.

Kubuntu is Ubuntu but with the KDE front end, instead of the Gnome one or whatever it is. Being Ubuntu it supports Secure Boot which ticks a box.

It is just as easy to install as any other mainstream Linux distro, which is very easy. Its also quite easy to upgrade. I do recommend that you stick to Long Term Supported (LTS) releases.

I took a customer's "redundant" laptop (destined for land fill, too old, ran slow for Win10) about five years ago and repurposed it for my grand-daughter and stuck Kubuntu on it. If you recall we were heading into Covid related lockdown back then and this was for her to access school remotely.

She is still using it! I have updated it from 18.04 to 24.04 remotely through an OpenVPN tunnel. Try doing that with Windows ...
by ggm | 2025-12-01 00:42:59+00:00
Taking a diehard revolutionary who wants to leverage the memorial of the october revolution to carry the project forward instead of into regressive trends, and changing it into an embittered baltic state soviet who decides to defect with his entire submarine and crew unknowing except a cohort of specially picked boat officers. Thats like re-writing "the island of dr moreau" into "Dr Dolittle".

If Tom Clancy wasn't on the payroll of a US state agency, he should have been.

I loved the film. Sam Neil writes hilariously about the filming. But if you loved the film and "bought the book" you'd be in for a serious disappointment if you didn't buy Tom Clancy.
by peanut-walrus | 2025-12-01 00:43:00+00:00
For 1, you can still have extremely malicious networks. It's true that your web traffic is likely encrypted but... What services are exposed on your machine? Do you have mapped samba shares?

For 5 - session cookies are one of the main things stealers look for. Deleting cookies is absolutely good advice until browsers build in better mitigations against cookie theft.

For 6 - if there was a standard interface how password managers could rotate my creds, I would sure as hell use it. Force rotating passwords is only "bad" if people need to remember them. Any random credentials stored in a vault absolutely should be rotated periodically, there is no reason not to.

I don't see the point of this letter, none of the "bad" advice they call out is harmful to security in any way, if people feel safer avoiding public wifi, so be it. Is it just a call out to other cisos to update their security hygiene powerpoints?
by ArthurDev | 2025-12-01 00:43:23+00:00
Hi HN, I'm an automation specialist based in Belgium.

I built this interactive report to visualize a trend I'm seeing on the ground: the 'Barbell Economy.' Companies are freezing junior hiring (-13% YoY) while paying premiums for senior 'Orchestrators.'

I used React/Tailwind to map out the saturation of benchmarks (MMLU/SWE-bench) and project three economic scenarios for 2026.

Would love to hear if others are seeing this 'hollow middle' in their local markets.
by crystal_revenge | 2025-12-01 00:43:43+00:00
For me (and most of my friends/coworkers) the point of AoC was to write in some language that you always wanted to learn but never had the chance. The AoC problems tend to be excellent material for a crash course in a new PL because they cover a range of common programming tasks.

Historically good candidates are:

- Rust (despite it's popularity, I know a lot of devs who haven't had time to play with it).

- Haskell (though today I'd try Lean4)

- Racket/Common Lisp/Other scheme lisp you haven't tried

- Erlang/Elixir (probably my choice this year)

- Prolog

Especially for those langs that people typically dabble in but never get a change to write non-trivial software in (Haskell, Prolog, Racket) AoC is fantastic for really getting a feel for the language.
by TheCraiggers | 2025-12-01 00:43:49+00:00
I have a love/hate relationship with the site, and I'm likewise conflicted by its eventual demise.

On one hand, it's an incredible place full of smart people and has some of the best rabbit holes to fall into. On the other hand, portions of the site (programming among them) has the worst culture imaginable and has likely turned as many people off from learning as it has helped.
by villiage | 2025-12-01 00:46:14+00:00
I don’t understand why people promote password managers for individuals. You don’t need to store your password in a central location that is a prime target to hackers; even if it’s encrypted, that’s more of a risk than keeping one of your own.

And some of the previous advice they’re stepping back from like avoiding QR codes you’re unfamiliar with is still good advice; you should be careful and not expose yourself too much.
Show HN: Meetinghouse.cc, a site to find and be found
by simonsarris | 2025-12-01 00:46:28+00:00
Please note this site requires Twitter/X to log on, and requires $12 if you want to place a pin.

I made this as a sort-of social network helper, a spatial directory of people who want to find and be found.

I would be happy for any feedback or feature suggestions. Right now Twitter/X is required because it adds a sense of real-ness to the pins. I could imagine other globes for other social networks, but I think the lack of overlap is a feature.
by crazygringo | 2025-12-01 00:46:54+00:00
I have no problem with a company voluntarily choosing to make it a toggle.

I have a big problem with a government forcing companies to enable toggles on features because users complain about the UX.

If there are problems with copyright, that's an issue for the courts -- not a user toggle. If you have problems with the electricity, then that's an issue for electricity infrastructure regulations. If you think it doens't work, then don't use it.

Passing a law forcing a company to turn off a legal feature by default is absurd. It's no different from asking a publisher to censor pages of a book that some people don't like, and make them available only by a second mail-order purchase to the publisher. That's censorship.
by TheRoque | 2025-12-01 00:47:29+00:00
> but not using AI is simply less productive

Some studies shows the opposite for experienced devs. And it also shows that developers are delusional about said productivity gains: https://metr.org/blog/2025-07-10-early-2025-ai-experienced-o...

If you have a counter-study (for experienced devs, not juniors), I'd be curious to see. My experience also has been that using AI as part of your main way to produce code, is not faster when you factor in everything.
by venturecruelty | 2025-12-01 00:47:50+00:00
I mean, even the idea of "it's only going to affect the weak" is disgusting and horrible. "The weak" is someone's grandmother, or their dad with a heart transplant, or their newborn baby. There is some pretty filthy, wretched ideology in the world that says very similar things about people it perceives as not worthy of being alive. And someday, for any of us who are blessed to live that long, we will be weak, too. We will be infirm. We will arrive at the end of our lives deserving protection, too, just like all of those people who were wantonly discarded during the pandemic.

Every life lost is a tragedy, especially when it is, to an extent, preventable. Not perfectly, and not without mistakes, but we could've done better than we did. It's heartbreaking that so many people are so willing to sacrifice the very people society should be trying to protect.
by nickjj | 2025-12-01 00:48:17+00:00
I still want to switch, have been trying for like 8 years. Not yet unfortunately.

Video editing is still pretty sub-par on Linux compared to Windows.

DaVinci Resolve technically works on Linux and it's an amazing piece of software that I'd love to use but on Linux there's no h264 support unless you pay $300. Ok no problem, I'd do that except the studio version doesn't support AAC for audio on Linux.

If you want to record from OBS, you have to re-encode the video for Resolve and then after rendering your video with Resolve you have to re-encode it again with another tool for h264 / AAC. That means you have to record + render + edit + render + render instead of just record + edit + render. A huge time sink and waste of drive space.

Kdenlive is there but its text editing capabilities are really lack luster. If you want to do things like create a text call out with a rectangle behind it and have your text styled up where different words are colored up differently or you want to underline a word or 2 you have to spend 10 minutes fighting its text UI, duplicating layers, fiddling with z-indexes and if you decide to change your text later, you have to re-do everything. That or you have to use an external tool like GIMP but that breaks you out of the flow and takes a lot more time.

On Windows, there's Camtasia. It "just works" and you can make text call outs described above in seconds.

Until I can easily create text call outs in videos on Linux (something I do a few times a week) I will use Windows 10 + WSL 2.
by ryandv | 2025-12-01 00:48:19+00:00
They... sort of are though? A year or two ago I just waited until the very last problem, which was min-cut. Anybody with a computer science education who has seen the prompt Proof. before should be able to tackle this one with some effort, guidance, and/or sufficient time. There are algorithms that don't even require all the high-falutin graph theory.

I don't mean to say my solution was good, nor was it performant in any way - it was not, I arrived at adjacency (linked) lists - but the problem is tractable to the well-equipped with sufficient headdesking.

Operative phrase being "a computer science education," as per GGP's point. Easy is relative. Let's not leave the bar on the floor, please, while LLMs are threatening to hoover up all the low hanging fruit.
by astrostl | 2025-12-01 00:49:35+00:00
Having been through cycles of manual writing with '#' and having it do it itself, it seems to have been a push on efficacy while spending less effort and getting less frustrated. Hard to quantify except to say that I've had great results with it. I appreciate the spirit of OP's, "CLAUDE.md is the highest leverage point of the harness, so avoid auto-generating it" but you can always ask Claude to tighten it up itself too.
by timschmidt | 2025-12-01 00:50:09+00:00
> Many game devs develop on windows

I would say most game devs. That doesn't change a thing I've said.

> plus the stability of drivers there

Driver code for Nvidia, AMD, and Intel are all shared across Windows and Linux these days. Have been for years. AMD's even made a point of pulling improvements from the Linux drivers back into the Windows drivers.

> Your assumption of what you've been taught in compsci circles with many resources at their disposal does not hold up in places in which fast iterations are required

I have developed games. I write libraries useful for gamedev. Every game developer I know uses version control and most use CI. Contrary to your opinion, version control and CI help to iterate faster with greater confidence, and don't require lots of resources, just a GitHub account and 5 minutes.

What an odd thing to argue.
by senshan | 2025-12-01 00:50:27+00:00
>> 1. The raw code with no empty space or comments. 2. Code with comments

> 1. Turn off 2. Code 3. Turn on 4. Commit

What does it mean "turn off" / "turn on"?

Do you have a script to strip comments?

Okay, after the comments were stripped, does this become the common base for 3-way merge?

After modification of the code stripped of the comments, do you apply 3-way merge to reconcile the changes and the comments?

This seems a lot of work. What is the benefit? I mean demonstrable benefit.

How does it compare to instructing through AGENTS.md to ignore all comments?
by crazygringo | 2025-12-01 00:50:48+00:00
Take it up with your city council, if they're the ones require a smartphone to pay for parking.

But also, you're going to have to be more specific about what tracking you're worried about. Cell towers need to track you to give you service. But the parking app only gets the data you enable with permissions, and the data the city requires you to give the app (e.g. a payment method). So I'm not super clear what tracking you're concerned about?

If you don't use your smartphone for anything but paying for parking, I genuinely don't know what tracking you're concerned about.
by thatfrenchguy | 2025-12-01 00:50:52+00:00
It's not free, but because of its unique market shaping power, the government is often the best & the cheapest way to do things like education or health care, because it has no incentives to spend money on bullshit to raise prices.

That's why there's a harpist in the hall in fancy hospitals in the US and not at Necker in Paris, or why the administration at universities in the US is multiple times the size you'll see in France. Market shaping incentives.
by peanut-walrus | 2025-12-01 00:51:57+00:00
Vulnerabilities in the software you use don't even make the top 5 in ways bad guys actually compromise you.

The most common attacks:

- Phishing

- Getting the user to run the malware themselves

- Credential reuse

- Literal physical theft

- Users uploading their own stuff completely willingly to some sketchy service

Vulnerabilities in the services you use are important, but you can't update those yourself :)
by partomniscient | 2025-12-01 00:52:29+00:00
I spent ages submitting the bug report with various log files, /etc/fstab that worked vs. the one that didn't. Detailed steps to reproduce, specific kernel versions, snapshots of /etc/ /usr/share/etc and so on. What the problem was, how I resolved it.

Also found someone else that had experienced the same: https://old.reddit.com/r/linuxquestions/comments/t6795f/emer...

Created an account to submit it all to Fedora(/Redhat/IBM). And it just got marked wont fix. Apparently the filesystem guy didn't think it was a filesystem problem (despite being caused by fstab) and just closed it.

Apparently getting stuck in the below loop is an acceptable response due to a typo in /etc/fstab.

--

Reloading system manager configuration. Starting default target. You are in emergency mode. After logging in, type "journalctl -xb" to view system logs, "systemctl reboot" to reboot, or “exit” to continue booting.

Cannot open access to console, the root account is locked. See sulogin(8) to continue.

Press Enter to continue.

Reloading system manager configuration. Starting default target. You are in emergency mode. After logging in, type "journalctl -xb" to view system logs, "systemctl reboot" to reboot, or “exit” to continue booting.

Cannot open access to console, the root account is locked. See sulogin(8) to continue.

Press Enter to continue.

etc.
by egypturnash | 2025-12-01 00:52:36+00:00
I spent a lot of time as a kid with Krakout on my c64, which was a horizontal Arkanoid. I could probably handle it. It looks like Atari's got another Breakout remake on Steam that's horizontal-aspect, too.

Personally I've been having fun with BallxPit though (https://store.steampowered.com/app/2062430/BALL_x_PIT/) which is basically what you get when you cross Arkanoid with Vampire Survivors, it gets hilariously chaotic once you have a bunch of upgraded and mutated super-balls to fling at the bricks with monsters sticking out of them. I don't really have an urge to play a more pure riff on Breakout.
by pirates | 2025-12-01 00:53:34+00:00
> You have to assume it is helping at least to some degree... since cops are generally in favor of them. No, I assume the exact opposite. Cops and people who are law enforcement adjacent lie and obfuscate all the time. They have no real reason to need it but they know they can get their hands on it, so they do. Any justification happens after the fact, when it will be harder to take away.
by alexfoo | 2025-12-01 00:54:13+00:00
The group of people for which the problems are "too easy" is probably quite small.

According to Eric last year (https://www.reddit.com/r/adventofcode/comments/1hly9dw/2024_...) there were 559 people that had obtained all 500 stars. I'm happy to be one of them.

The actual number is going to be higher as more people will have finished the puzzles since then, and many people may have finished all of the puzzles but split across more than one account.

Then again, I'm sure there's a reasonable number of people who have only completed certain puzzles because they found someone else's code on the AoC subreddit and ran that against their input, or got a huge hint from there without which they'd never solve it on their own. (To be clear, I don't mind the latter as it's just a trigger for someone to learn something they didn't know before, but just running someone else's code is not helping them if they don't dig into it further and understand how/why it works.)

There's definitely a certain specific set of knowledge areas that really helps solve AoC puzzles. It's a combination of classic Comp Sci theory (A*/SAT solvers, Dijkstra's algorithm, breadth/depth first searches, parsing, regex, string processing, data structures, dynamic programming, memoization, etc) and Mathematics (finite fields and modular arithmetic, Chinese Remainder Theorem, geometry, combinatorics, grids and coordinates, graph theory, etc).

Not many people have all those skills to the required level to find the majority of AoC "easy". There's no obvious common path to accruing this particular knowledge set. A traditional Comp Sci background may not provide all of the Mathematics required. A Mathematics background may leave you short on the Comp Sci theory front.

My own experience is unusual. I've got two separate bachelors degrees; one in Comp Sci and one in Mathematics with a 7 year gap between them, those degrees and 25+ years of doing software development as a job means I do find the vast majority of AoC quite easy, but not all of it, there are still some stinkers.

Being able to look at an AoC problem and think "There's some algorithm behind this, what is it?" is hugely helpful.

The "Slam Shuffle" problem (2019 day 22) was a classic example of this that sticks in my mind. The magnitude of the numbers involved in part 2 of that problem made it clear that a naive iteration approach was out of the question, so there had to be a more direct path to the answer.

As I write the code for part 1 of any problem I tend to think "What is the twist for part 2 going to be? How is Eric going to make it orders of magnitude harder?" Sometimes I even guess right, sometimes it's just plain evil.