MurphyA/hacker-news huggingface dataset:
by marcosdumay | 2025-12-20 16:41:54+00:00
The one problem with using your distro's Postgres is that your upgrade routine will be dictated by a 3rd party.

And Postgres upgrades are not transparent. So you'll have a 1 or 2 hours task, every 6 to 18 months that you have only a small amount of control over when it happens. This is ok for a lot of people, and completely unthinkable for some other people.
by cvhc | 2025-12-20 16:42:12+00:00
It's been long known many older TP-Link IoT devices doesn't require any authentication to connect, as my Kasa HS300 strips. Later models requires the account credential [1], but I'm not surprised that they still left something wide open (e.g., WiFi config endpoint for provisioning). I tend to believe this is just poor software engineering (Hanlon's razor).

[1] https://www.home-assistant.io/integrations/tplink/
by mystraline | 2025-12-20 16:42:13+00:00
If you have nothing to hide...

Post your full name, address, social security number, date of birth, mothers maiden name and other security questions, list of active logins and passwords and URLs, your full body scan nudes, sexual fantasies, diary/journal, your ashamed moments in your life, sly or trickster things you've done to others, sordid family secrets, and more.

Oh, that was a no? I guess you DO have something to hide.
Tell HN: PSN Stealth ID Verification
by A4ET8a8uTh0_v2 | 2025-12-20 16:42:22+00:00
Long story short: I use PS4 as my to stream Disney+. Suddenly, a day back, Disney stops working, but quick check shows that profile is not logged in ( and 'network test' shows it is unable to log into playstation network ), wife can log in from phone, I can't log in from hotspot. I do the usual rigamarole with attempting to log into 'playstation network' from computer, but, after 2 additional steps ( one for email verification, one for playstation network forced password reset ). I am told they can't to do verify my info -- and next step is apparently ID verification..

End of the year. Time for some digital clean up. I am not jumping.
AI Code assistants has made completing side projects so easy
by akmittal | 2025-12-20 16:42:25+00:00
I am a full stack developer with a full time job. I try to work on side projects like a lot of other developers.

In last ~10 years I have started 20+ projects and for each project spent anywhere between 2 weeks to 6 months. I have completed just 2 projects which were fairly short(~4 week). So recently when started some big side project, There was almost no chance of me completing it. I was just doing it for fun.

All this changed with AI code assistants. I picked a fairly big project which involved writing crawlers for multiple sites. There was no chance of me completing it, until I started using AI code assistant. It sped up the development by 5-10x(can I call myself 10x developer now?). Completed the project in ~3 weeks.

Curious if others were able to do the same.

(This is not an Advertisement for AI code assistants. These has their own problems. I have less confidence in my product, Code reviews are difficult and I have go and make sure all security best practices are handled.)
by candiddevmike | 2025-12-20 16:42:41+00:00
Skeptic here: I do think LLMs are a fad for software development. They're an interesting phenomen that people have convinced themselves MUST BE USEFUL in the context of software development, either through ignorance or a sense of desperation. I do not believe LLMs will be used long term for any kind of serious software development use cases, as the maintenance cost of the code they produce will run development teams into bankruptcy.

I also believe the current generations of LLMs (transformers) are technical dead ends on the path to real AGI, and the more time we spend hyping them, the less research/money gets spent on discovering new/better paths beyond transformers.

I wish we could go back to complaining about Kubernetes, focusing on scaling distributed systems, and solving more interesting problems that comparing winnings on a stochastic slot machine. I wish our industry was held to higher standards than jockeying bug-ridden MVP code as quickly as possible.
by Nextgrid | 2025-12-20 16:43:24+00:00
> employing engineers to manage self-hosted databases is more cost effective than outsourcing

Every company out there is using the cloud and yet still employs infrastructure engineers to deal with its complexity. The "cloud" reducing staff costs is and was always a lie.

PaaS platforms (Heroku, Render, Railway) can legitimately be operated by your average dev and not have to hire a dedicated person; those cost even more though.

Another limitation of both the cloud and PaaS is that they are only responsible for the infrastructure/services you use; they will not touch your application at all. Can your application automatically recover from a slow/intermittent network, a DB failover (that you can't even test because your cloud providers' failover and failure modes are a black box), and so on? Otherwise you're waking up at 3am no matter what.
by itomato | 2025-12-20 16:43:39+00:00
Arduino has four layers, only two were ever truly open:

1 Hardware reference designs (sort of open by intent)

2 Core software (open-source licensing)

3 Services and “happy path” tooling (not open)

4 Brand and governance (never open)

Qualcomm’s move is about owning layer 4 and using it to grow layer 3, while keeping layers 1 and 2 open enough to preserve credibility and community adoption.
by newsclues | 2025-12-20 16:44:24+00:00
I want a local gaming machine that I control.

Not a locked ecosystem console or a streaming service with lag!

I think if nvidia leaves the market for AI, why wouldn’t AMD and intel, with the memory cartel. So DIY market is gone. That kills lots of companies and creators that rely on the gaming market.

It’s a doom spiral for a lot of the industry. If gaming is just PlayStation and switch and iGPUs there is a lot less innovation in pushing graphics.

It will kill the hobby.
by hilbert42 | 2025-12-20 16:44:32+00:00
"Stylometry is the study of this."

It's as old as history. In the days super-abbreviated telegrams (words were costly) you could even get two for the price of one--the author and the Morse code operator who actually sent the telegram. He could be recognized by his Morse fist, other Morse operators on the network would recognize him by the style of his sending even though they were only listening to dots and dashes,
by zamadatix | 2025-12-20 16:45:50+00:00
Your ultimate conclusion is correct, to my understanding. I know wireguard sought to be ultra minimal but I do wish they had included DPLPMTUD as something which is required to be supported (but not mandated to be used e.g. if the user wants to hard set it as they would currently) because it's one of those cases where "do it yourself separately the UNIX way™" or "have the tunneled things do it if they need it" instead are both significantly more complex and fragile.
Show HN: Movely – Auto-scheduled micro-breaks based on your calendar free slots
by olivdums | 2025-12-20 16:46:31+00:00
Oli here,

I’m 32, working remotely and spending 10h a day sitting at my desk,

This is slowly but surely killing me (and you), It kills my body but also my productivity so here is my attempt to fix this:

Connect your Calendar, Movely will find free slots and adds 5min micro breaks in it (Strength, Mobility, Reduce eye strain or stress),

Every Sunday night I’m running a task that will create the sessions for next week based on your available slots,

My stack if you wanna know: * Monorepo: Nx (web / backend / marketing + shared libs) * Front: Next.js, Tailwind, Radix UI, Zustand * Back: NestJS, PostgreSQL (Prisma), Redis (BullMQ for the scheduling jobs)

I’d love to get direct feedbacks here if you have some remarks, some unclear aspects of the products or improvements and whether the scheduling feels helpful or intrusive :)

Thanks for reading me!
by api | 2025-12-20 16:47:16+00:00
So there are papers. There are studies on tons and tons of things. One of the things you learn really studying science is that there are always papers, and you really have to immerse yourself in a field to see what’s actually happening.

People who believe in chemtrails need to prove that the it’s being done, is being done at industrial scale (not just a few one off experiments), and that this is harmful to human health or the environment.

Ocean fertilization to soak up CO2 has been extensively studied and in that case there are documented experiments, but we are not doing it at scale… mostly because nobody wants to pay for it and because we are not 100% sure the CO2 will actually be sequestered. There’s also some concern about side effects on ocean ecosystems.

A lot of things get studied.

Of course the real conspiracy I keep hearing is that this is some kind of mind control thing. Why? Even if that were possible, why bother when you can mesmerize humans at scale with mindless slop scrollers like TikTok and program them like a zombie army. Much cheaper and done 100% in the open.
by raxe | 2025-12-20 16:47:30+00:00
Extra implementation details for anyone curious:

- The engine is dual-layer: - L1: regex rules (explainable + fast) - L2: EmbeddingGemma-300M based, INT8 quantized ONNX classifier (CPU), with 5 heads: 1) is_threat 2) threat_family 3) severity 4) primary_technique 5) harm_types (multilabel)

- Offline mode: You can run completely without network

- Telemetry is detection metadata only (e.g., prompt_hash + rule_id + severity + duration). Raw prompts and matched substrings are never sent.

Happy to answer anything / take feature requests.
by zbentley | 2025-12-20 16:48:06+00:00
For a fascinating counterpoint (gist: cloud hosted Postgres on RDS aurora is not anything like the system you would host yourself, and other cloud deployments of databases should also not be done like our field is used to doing it when self-hosting) see this other front page article and discussion: https://news.ycombinator.com/item?id=46334990
by nine_k | 2025-12-20 16:48:47+00:00
It's superficially tailwind-y, but in fact a sort of stenographic subset of SQL:

db-{table}-{column}-where-{field}-{value}-limit-{n}-orderby-{field}-{asc|desc} db-users → SELECT * FROM users db-users-name → SELECT name FROM users db-users-where-id-1 → SELECT * FROM users WHERE id = 1 db-posts-title-limit-10 → SELECT title FROM posts LIMIT 10 db-products-orderby-price-desc → SELECT * FROM products ORDER BY price DESC

Certainly can result in some terribly inefficient access patterns, as there's no obvious syntax for joins. But enough for a toy project, and enough to hit the HN front page %)
by lowsong | 2025-12-20 16:48:56+00:00
> They cite cherry picked announcements showing that LLM usage makes development slower or worse. They opened ChatGPT a couple times a few months ago, asked some questions, and then went “Aha! I knew it was bad!” when they encountered their first bad output instead of trying to work with the LLM to iterate like everyone who gets value out of them.

"Ah-hah you stopped when this tool blew your whole leg off. If you'd stuck with it like the rest of us you could learn to only take off a few toes every now and again, but I'm confident that in time it will hardly ever do that."
by jshaqaw | 2025-12-20 16:48:58+00:00
Since I sadly must return to the real world (but thank you everyone for the well spirited debate) -- string theory is funny to me because its a bit of a Rorschach test as such a tiny number of people who follow the subject can actually evaluate string theory vs. alternative models. It's just an abstract blob people can project their worldview onto. To the extent someone reading this is in the group who does understand the topic, this isn't about you--

As a society we can't place excess faith in the orthodox positions of institutions. We all know they can be rigid, wrong, and lock out dissenting views. But society today seems to embrace heterodoxy for its own sake the way perhaps in the past orthodoxy was just accepted on pure faith and there is a vast media ecosystem happy to promote (ie monetize) this worldview. Just because something is heterodox doesn't make it right.

Have a wonderful weekend all.
by IAmGraydon | 2025-12-20 16:49:01+00:00
It's decent for things that would take a long time in Photoshop. Like most AI, sometimes it works great and sometimes it goes off the rails completely. Most recently, I used it to process some drone photos that were taken during late fall for the purpose of marketing a commercial property. All of the trees/grass/plants were brown, so I told it to make it look like the photos were taken during the summer but not to change anything else. It did a very good job, not just changing the color, but actually adding leaves to the plants and trees in a way that looked very realistic. It did in seconds what would have taken one of my team members hours, leaving them to work on other more pressing projects.
by dahart | 2025-12-20 16:50:19+00:00
That makes sense to me. Adafruit’s complaint relates to layer 3, right? Is Qualcomm changing the openness of layers 1 & 2 in meaningful ways that affect makers & hobbyists? And I guess layer 1 is PCB design, not [MC]PU design, right? Is that what you mean by ‘sort of’?
by wmichelin | 2025-12-20 16:50:34+00:00
GraphQL and SQL are not comparable or competing technologies. GraphQL is more analogous to a REST API. GraphQL can use SQL under the hood, or you can even hand serve the bytes (tongue in cheek here). It's just an over-the-network protocol to serve data.

a Node.JS server might use SQL directly or call out to a GraphQL API, but I literally don't think it's possible to let client-side JavaScript (safely) call a SQL database server directly.
by vpribish | 2025-12-20 16:51:00+00:00
hyperbolic.

anonymity in your product could be a sensible design choice that your customers could value. fine. go nuts.

but in general? hard disagree. anonymity is fragile and can't be guaranteed, privacy is a legal obligation which can actually be enforced if push comes to shove.

also that page reads like slop : it's not X, it's Y. blah blah blah. this is a marketing piece trying to go viral.
by jayofdoom | 2025-12-20 16:51:13+00:00
In OpenStack, we explicitly document what our log levels mean; I think this is valuable from both an Operator and Developer perspective. If you're a new developer, without a sense of what log levels are for, it's very prescriptive and helpful. For an operator, it sets expectations.

https://docs.openstack.org/oslo.log/latest/user/guidelines.h...

FWIW, "ERROR: An error has occurred and an administrator should research the event." (vs WARNING: Indicates that there might be a systemic issue; potential predictive failure notice.)
by jsheard | 2025-12-20 16:51:22+00:00
You can't turn a GB200 into a GB202 (which I assume is what you meant since GP102 is from 2016), they are completely different designs. That kind of salvage happens between variants of the same design, for example the RTX Pro 6000 and RTX 5090 both use GB202 in different configurations, and chips which don't make the cut for the former get used for the latter.
by bicepjai | 2025-12-20 16:51:22+00:00
I love the LLM tech and use them everyday for coding. I don’t like calling them AI. We can definitely argue LLMs are not just rearranging code. But let’s look at some evidence that shows otherwise. Last year NYT lawsuit that show llms has memorized most of the news text, you had see those examples. Recent not-yet peer reviewed academic paper “Language Models are Injective and Hence Invertible “ shows llms just memorized training data. Also this https://youtu.be/O7BI4jfEFwA?si=rjAi5KStXfURl65q recent defcon33 talk shows so much ways you can get training data out. Given all these, it’s hard to believe they are intelligently generating code.
by zahlman | 2025-12-20 16:51:25+00:00
> For example, a consumer SSD can do a million (or more) operations in a second not 50K

The "Read 1MB from SSD" entry translates into a higher throughput (still not as high as you imply, but "SSD" is also a broad category ranging from SATA-connected devices though I think five generations of NVMe now); I assume the "Read 4KB" timing really describes a single, isolated page read which would be rather difficult to parallelize.
by zbentley | 2025-12-20 16:52:17+00:00
There is plenty of provider markup, to be sure. But it is also very much not a given that the hosted version of a database is running software/configs that are equivalent to what you could do yourself. Many hosted databases are extremely different behind the scenes when it comes to durability, monitoring, failover, storage provisioning, compute provisioning, and more. Just because it acts like a connection hanging off a postmaster service running on a server doesn’t mean that’s what your “psql” is connected to on RDS Aurora (or many of the other cloud-Postgres offerings).
by hallole | 2025-12-20 16:52:50+00:00
The job of the justices is to interpret the Constitution, not maintain a public image. The law profs who authored this are surely aware of that. "Illegitimate" means more than "people dislike it." I think the late Justice Scalia did things right: delivering decisions that aligned with his Constitutional philosophy, even if he ultimately found the results distasteful (nevermind what the public had to say!).

A small YouTube channel I found, hosted by a constitutional litigator, has a number of solid videos about the S.C., and about this "partisanship problem" in particular [1]. The D/R split of the S.C. is much fuzzier than I once thought.

[1]: https://youtu.be/WKfF-WhIm5o
by makeitdouble | 2025-12-20 16:53:15+00:00
> the database is owned by a separate oncall rotation

Not OP, but this part hits the same for me.

In the case your client app is killing the DB through too many calls (e.g. your cache is not working) you should be able to detect it and react, without waiting for the DB team to come to you after they investigated the whole thing.

But you can't know in advance if the DB connection errors are your fault or not, so logging it to cover the worse case scenario (you're the cause) is sensible.
by cwzwarich | 2025-12-20 16:53:30+00:00
Nvidia doesn't share dies between their high-end datacenter products like B200 and consumer products. The high-end consumer dies have many more SMs than a corresponding datacenter die. Each has functionality that the other does not within an SM/TPC, nevermind the very different fabric and memory subsystem (with much higher bandwidth/SM on the datacenter parts). They run at very different clock frequencies. It just wouldn't make sense to share the dies under these constraints, especially when GPUs already present a fairly obvious yield recovery strategy.
by bee_rider | 2025-12-20 16:53:48+00:00
The term pseudonymous should be more popular. A crypto id is a pseudonym, right? In the sense that it is a consistent identity you have, just, not one that is initially tied to the identity you were born with.

Social media handles are usually pseudonymous at most.

I wonder where the figure of anonymity is. With writing style analysis, correlating pseudonyms is probably pretty easy these days. Maybe we’ll all start writing our ideas into LLMs and have them do the talking…
by NitpickLawyer | 2025-12-20 16:53:59+00:00
> but as far as I can see all the AI companies are not making money on inference alone.

This was the missed point on why GPT5 was such an important launch (quality of models and vibes aside). It brought the model sizes (and hence inference cost) to more sustainable numbers. Compared to previous SotA (GPT4 at launch, or o1/3 series), GPT5 is 8x-12x cheaper! I feel that a lot of people never re-calibrated their views on inference.

And there's also another place where you can verify your take on inference - the 3rd party providers that offer "open" models. They have 0 incentive to subsidise prices, because people that use them often don't even know who serves them, so there's 0 brand recognition (say when using models via openrouter).

These 3rd party providers have all converged towards a price-point per billion param models. And you can check those prices, and have an idea on what would be proffitable and at what sizes. Models like dsv3.2 are really really cheap to serve, for what they provide (at least gpt5-mini equivalent I'd say).

So yes, labs could totally become profitable with inference alone. But they don't want that, because there's an argument to be made that the best will "keep it all". I hope, for our sake as consumers that it isn't the case. And so far this year it seems that it's not the case. We've had all 4 big labs one-up eachother several times, and they're keeping eachother honest. And that's good for us. We get frontier level offerings at 10-25$/MTok (Opus, gpt5.2, gemini3pro, grok4), and we get highly capable yet extremely cheap models at 1.5-3$/MTok (gemini3-flash, gpt-minis, grok-fast, etc)
by Bridged7756 | 2025-12-20 16:54:45+00:00
I have a kindle. And it's really good, I've never read as much. Ive never bought a single thing from its store, only sideloaded though. And seeing the recent events im more worried about Amazon pulling the plug on side loading stuff. Turns out it's not that complicated to jailbreak your kindle though, so that's what I'm doing this weekend.
by michaelsbradley | 2025-12-20 16:55:00+00:00
Well, as the author says in the FAQ, he's been using the name Final Cut since 1991, whereas the famous video editing software appeared in 1999. Now, given how well-known the latter became, a name change would certainly be reasonable if he wanted to avoid confusion, improve find-ability in web search, etc. But, I get the impression that's not among his priorities, and it's his project, so...
by dpkirchner | 2025-12-20 16:55:10+00:00
I have my cameras connected to a N150 server running hostapd and dnsmasq and no IP forwarding. That server runs Frigate. I figured if I need a server anyway it might as well be the AP.

It's a little bit of a pain to set up the cameras because of the mobile app. I have to connect to the AP on my phone and as it doesn't have internet access my phone nags me, and this specific model doesn't have an external antenna. If it did I think it might be the ideal setup.
by ErroneousBosh | 2025-12-20 16:55:35+00:00
Because when I get tired of reconstructing the contents of the database between my various dev machines (at home, at work, on a remote server, on my laptop) I can just scp the sqlite db across.

Because it's "low effort" to just fire it into sqlite and if I have to do ridiculous things to the schema as I footer around working out exactly what I want the database to do.

I don't want to use nodejs if I can possibly avoid it and you literally could not pay me to even look at Java, there isn't enough money in the world.
by woodruffw | 2025-12-20 16:55:39+00:00
One of the biggest problems with GitHub Actions is that, even with fully transitive locking at the action layer, you still can’t really guarantee hermetic execution: lots of actions do implicit version resolution on tools by default. For example, setup-python, etc. will select a reasonable version based on the constraints you give it, which may end up being the pre-installer runner’s Python, or a newly released patch version, etc.

Fully pinning action references themselves is a step in the right direction, but the ecosystem as a whole probably has expectations that are misaligned with reproducibility/hermeticity, and those expectations will be challenging to overcome.