MurphyA/hacker-news huggingface dataset:
by EionRobb | 2025-12-14 18:38:34+00:00
The article pretty much sums up why I've been a bigger fan of OData than GraphQL, especially in the business cases. OData will still let you get all those same wins that GraphQL does but without a sql-ish query syntax, and sticking to the REST roots that the web works better with. Also helps that lots of Microsoft services work out of the box with OData.
by segmondy | 2025-12-14 18:38:55+00:00
This is a weird line of thinking. Here's a question. If you buy one of these and figure out how to use it to make $100k in 3 months, would that be good? When you run a local model, you shouldn't compare it to to cost of using an API. The value lies in how you use it. Let's forget bout making money. Let's just say you have weird fetish and like to have dirty sexy conversation with your LLM. How much would you pay for your data not to be leaked and for the world to see your chat? Perhaps having your own private LLM makes it all worth it. If you have nothing special going then by all means use APIs, but if you feel/know your input it special, then yeah, go private.
by projectcc | 2025-12-14 18:39:31+00:00
- Console pages now show an icon next to each game name. A check mark icon is shown for games with cheats, and a X icon is shown for games without cheats. This change caused an entire rewrite of the console pages. I had to sort each game into lists of games with cheats and games without cheats. I also had to change the way each game opens.

- With the changes above, I wanted to go ahead and complete the code optimization for the app. I have changed the way game pages are created, resulting in over 60,000 lines of code being removed. They still look and function the same, but this change allows me to add games at a faster rate, while keeping the application as small as possible.

- Search results for games have been expanded and improved. Games can now be searched for by partial name, and symbols are no longer required. This will make finding games much easier.

- Sega Genesis 32X has been completed. Please let me know if you find anything missing.
by Roark66 | 2025-12-14 18:39:49+00:00
Jeez, all this "LLM avoidance" is so horribly silly. We will remember it in 10 years like we now remember the decision to setup our great European cookie popup laws. As well intentioned, but very detrimental.

You will not stop scrapers. Period. They will just pay for a service like firecrawl that will fix it for them. Here in Poland one of the most notorious sites implementing anti-bot tech is our domestic eBay competitor allegro.pl. I've been locked out of that site for "clicking too fast" more than once. They have the strictest, most inconvenient software possible (everyone uses the site). And yet firecrawl has no problem scraping them (although rather slowly).

Second argument against these "protections" is, there are people behind bots. Many bot requests are driven by a human asking "find me cheapest rtx5060 ti 16gb" today. If your site blocks it they will loose that sale.
by hn_throwaway_99 | 2025-12-14 18:40:16+00:00
> The main problem GraphQL tries to solve is overfetching.

My issue with this article is that, as someone who is a GraphQL fan, that is far from what I see as its primary benefit, and so the rest of the article feels like a strawman to me.

TBH I see the biggest benefits of GraphQL are that it (a) forces a much tighter contract around endpoint and object definition with its type system, and (b) schema evolution is much easier than in other API tech.

For the first point, the entire ecosystem guarantees that when a server receives an input object, that object will conform to the type, and similarly, a client receiving a return object is guaranteed to conform to the endpoint response type. Coupled with custom scalar types (e.g. "phone number" types, "email address" types), this can eliminate a whole class of bugs and security issues. Yes, other API tech does something similar, but I find the guarantees are far less "guaranteed" and it's much easier to have errors slip through. Like GraphQL always prunes return objects to just the fields requested, which most other API tech doesn't do, and this can be a really nice security benefit.

When it comes to schema evolution, I've found that adding new fields and deprecating old ones, and especially that new clients only ever have to be concerned with the new fields, is a huge benefit. Again, other API tech allows you to do something like this, but it's much less standardized and requires a lot more work and cognitive load on both the server and client devs.
by lumirth | 2025-12-14 18:40:23+00:00
I didn’t think you did use Claude Code! I was just saying that with AI agents these days, even more thoroughly obfuscated text can probably be de-obfuscated without much effort.

I suppose I don’t know data ingestion that well. Is de-obfuscating really something they do? If I was maintaining such a pipeline and found the associated garbage data, I doubt I’d bother adding a step for the edge case of getting the right caesar cipher to make text coherent. Unless I was fine-tuning a model for a particular topic and a critical resource/expert obfuscated their content, I’d probably just drop it and move on.

That said, after watching my father struggle deeply with the complex computer usage his job requires when he developed cataracts, I don’t see any such method as tenable. The proverbial “fuck you” to the disabled folks who interact with one’s content is deeply unacceptable. Accessible web content should be mandatory in the same way ramps and handicap parking are—if not more-so. For that matter, it shouldn’t take seeing a loved one slowly and painfully lose their able body to give a shit about accessibility. Point being, you’re right to be pissed and I’m glad this post had a direct response from somebody with direct personal experience needing accessible content so quickly after it went up.
by FireBeyond | 2025-12-14 18:40:42+00:00
This used to be true, but the DoD turned off "selective availability" (the intentional degrading of the civilian signal) back in 2000, and the current generation of satellites do not have the capability (https://www.gps.gov/selective-availability). What they do have though is a separate, encrypted, military broadcast that can be used for those purposes (I think the plan in those situations is to turn off civilian GPS entirely - but I think that there's no reason for that, now, due to the other navigation systems like GLONASS).
by lern_too_spel | 2025-12-14 18:41:19+00:00
> "NSA Secretly Tapped Google, Yahoo Data Centers, Report Says"

This was for extracting email envelope metadata to build a graph of who was contacting whom, a program that Snowden's leaks showed had already been shut down.

> "A striking feature of proceedings at the Foreign Intelligence Surveillance Court (FISC) is that the executive always wins. Between 1979 and 2012—the first thirty-three years of the FISC’s existence—federal agencies submitted 33,900 ex parte requests to the court. The judges denied eleven and granted the rest: a 99.97% rate of approval."

What do you think the approval rate for other court orders is? It's exactly the same.

> "The newspaper reported that in "more than a dozen classified rulings, the nation's surveillance court has created a secret body of law giving the National Security Agency the power to amass vast collections of data on Americans"

This reporting was at odds with what the leaked documents said and was later walked back.

> So, by "court order" do you mean secret law and secret trials with a history of always deciding against those who are being surveilled? Because that's what was in Snowden's docs.

That explicitly was not in Snowden's docs. The law is public, and warrants are almost always granted. In this case, as Snowden's docs said, the court orders are for foreigners, living outside the U.S.
by anarazel | 2025-12-14 18:41:40+00:00
VACUUM FULL is about cleanup up things above the level of a single page. Moving stuff around within a page doesn't allow you to reclaim space on the OS level, nor does it "compact" tuples onto fewer pages.

But it's important for normal vacuum to compact the tuples on the page, otherwise the space of deleted tuples couldn't effectively be reused. Imagine a page that's entirely filled with 100 byte tuples, then every other tuple is deleted. Then, after a vacuum, a single 108 byte tuple should be inserted onto the page. Without compacting the space in the page during the vacuum, there would not be any space for that larger tuple.
by tdegruijter | 2025-12-14 18:43:31+00:00
The short answer is no. Portfolio and order management systems are highly complex and interface with numerous other systems. There are only a few companies like CRD and Blackrock that make them because the market is small, and because they are so important they are very expensive (millions per year). An open-source system would be useful but you’d have to overcome a lot of issues. Mainly, institutional asset management firms want only systems that are already battle-tested because the due diligence process for institutional clients is very in depth.
by pjdesno | 2025-12-14 18:44:14+00:00
This is tempting.

I fairly frequently leave my phone in the office and take a clipboard full of lined paper and a ballpoint to a place where I can write without access to the internet - I've got a number of published CS papers and at least one funded grant where a significant amount of writing was done in longhand on paper.

Of course this would require a bit of software work and maybe a brain swap to make it into the sort of portable typewriter that I'm really looking for, but given this as a starting point it should be fairly easy.

One question I have - what is the finished weight?
by ThrowawayR2 | 2025-12-14 18:44:53+00:00
Previously submitted 5 times in the past 4 days.

- Show HN: What are your thoughts on this? (npmjs.com) 1 point by chrilleweb 1 day ago

- How do you get meaningful feedback on early-stage open source tools? (github.com/chrilleweb) 1 point by chrilleweb 2 days ago | 1 comment

- Seeking feedback from senior JavaScript engineers (github.com/chrilleweb) 1 point by chrilleweb 3 days ago | 1 comment

- How do you get more exposure for your open-source project? (github.com/chrilleweb) 10 points by chrilleweb 4 days ago | 4 comments

- CLI tool that scans your codebase for environment variable issues (npmjs.com) 1 point by chrilleweb 4 days ago 4 comments

Ironically, observe also that the user says in a sibling post "I’m explicitly not trying to market it aggressively..."
by iamnothere | 2025-12-14 18:44:59+00:00
You shouldn’t be stereotyping rural people like this. Rural communities differ wildly in population and political leanings. On average they are older, whiter, and Republican voting, but this is shifting. Many small communities that were dying out are being revitalized as artist colonies and tourist zones, and many active farming communities are gradually becoming more Hispanic. Framing urban vs rural as red vs blue plays into the hands of the divide-and-conquer strategy that elites use to prevent the population from successfully pursuing radical change.
by steve1977 | 2025-12-14 18:44:59+00:00
"To encrypt email in 1998 you’d run GnuPG from a terminal"

In 1998, you'd probably run PGP.

While GnuPG saw it's first 0.x releases from the end of 1997, 1.0 was only released in 1999 and commercial PGP was still very popular IIRC.
by procaryote | 2025-12-14 18:45:16+00:00
Of course things are easier if you can run all your code in one binary on one machine, without remote users or any need to scale.

As soon as you add users you need to start coping with backwards compatibility though, even if your backend is still a monolith.

The backend being a monolith is probably easier for a while yes, but I've also lost count of the number of companies I've been to who have been in the painful process of breaking apart their monolith, because it doesn't scale and is hard to work with

Microservices or SOA aren't trivial, but the problems you bring up as extremely hard are pretty easy to deal with once you know how; and it buys you independent deploys and scale, which are pretty useful things at a bigger place
by rf15 | 2025-12-14 18:45:28+00:00
Who has time for reading? Audio content at least allows you to absorb information while your hands and eyes can be busy with other things: cleaning, driving, etc.

Besides, teaching videos and also books often share a common weakness: low information density. Youtubers and Authors both like to talk so damn much without saying anything. Give me a good story or documentation catalogue any day, but stop mixing the two.
by ml- | 2025-12-14 18:45:30+00:00
Want to put local history on a map, so when I go somewhere I could ideally just open this webapp and immediately get presented with cool or interesting history that happened close by.

Currently spending time establishing relationships with historical societies, as I really need them to contribute points of interest, and stories. Many of these societies are run on a voluntary basis by 70+ year olds, so it's a long process. Getting some good responses eventually though, so it might actually go somewhere, just a lot slower than I want.

Also still doing https://wheretodrink.beer, but haven't added anything of note since playing on this other project.

And react2shell was a blast
by mmooss | 2025-12-14 18:46:01+00:00
> Some carvers use urushi lacquer which is the sap from a tree common to Japan.

Urushi is the name of the Japanese tree, Toxicodendron verniciflua (the genus formerly was named Rhus), and of the lacquer of which its sap is the main constituent.

The lacquer is also called urushiol (note, not urushoil), which is also the resinous substance found in other members of the Toxicodendron genus: T. radicans and T. rydbergii, or poison ivy; T. diversilobum and T. pubescens, poison oak; and T. vernix, poison sumac. The resinous oil is what causes allergic reactions.

Which finally gets to my point: What are the allergic affects of the tree, its raw sap, the liquid lacquer, and maybe for hypersenstive/reactive urushiol allergies, the finished lacquer?

I don't meant to be alarmist - people have been eating off urushi lacquer for centuries. I'm thinking more about working with it.

EDIT: For those interested in the scientific aspects of the resin, plants, and allergic reaction:

Aaron C. Gladman MD. Toxicodendron Dermatitis: Poison Ivy, Oak, and Sumac. Wilderness & Environmental Medicine vol 17 #2 (June 2006)

https://journals.sagepub.com/doi/10.1580/pr31-05.1
by tilschuenemann | 2025-12-14 18:46:24+00:00
Yes, it's worse for screenreaders, I listed that next to other drawbacks which I acknowledged. I don't intend to apply this method anywhere else due to these drawbacks, because accessibility matters.

It's a proof of concept, and maybe a starting point for somebody else who wants to tackle this problem.

Can LLMs detect and decode the text? Yes, but I'd wager for the case that data cleaning doesn't happen to the extent that it decodes the text after scraping.
by alephnerd | 2025-12-14 18:46:49+00:00
As someone who was adjacent to China studies back in it's early days in the late 2000s/early 2010s (it was not mainstream back then - everyone was concentrating on Russia and the MidEast during that era and those of us who warned about China's potential were ignored), I think she is decent, but I wouldn't really call her a China expert (she is absolutely a Naval strategy expert though). To become a policy expert in a region, you need to understand it's institutional and organizational mores.

I'd recommend following academics affiliated with the FSI@Stanford or the Fairbanks Center@Harvard instead. They tend to be the ones most in touch with policymakers on both sides of the Pacific, and are often a conduit for Track 1.5 and Track 2 dialogues.

There has been a deluge of academics in the US entering "China studies" in the same way you saw "Mid East experts" proliferate in the 2000s and "Kremlinologists" in the 1980s-90s.
by _DeadFred_ | 2025-12-14 18:46:51+00:00
What are you talking about? Johnsons Creek has a population of 80,000 people making it larger than 98% of US cities. I live in a town of less than 10,000 surrounded by a county larger than Rhode Island that has huge forest fires at least every decade since the end of the ice age. And we are the heavy populated county in our area.
by tha_infra_guy | 2025-12-14 18:47:00+00:00
Currently working on the below open source project.

Ai-rganize — For using AI to sort files/folders on your local environment (Mac, Windows or Linux). (https://github.com/adefemi171/ai-rganize)

yaml2mcp — Got tired of writing MCP servers in JSON so I decided to build this as well. (https://github.com/adefemi171/yaml2mcp)
by Wistar | 2025-12-14 18:47:22+00:00
“… any substance, reflective matter, illuminated device, spray coating, covering, or other material that can be dynamically altered so that it interferes with the legibility or detectability of a vehicle/license plate pair (“fingerprint”) – or with the ability of a device to determine the vehicle fingerprint and to record it … shall be illegal.”

Some law, any day now.
by pjdesno | 2025-12-14 18:47:58+00:00
In Boston it's a very frequent occurrence to be driving in the Central Artery Tunnel and have your map software think you're on the surface, or vice versa, or to be on a highway overpass and again have it think you're on a surface road that is inaccessible from your location. You get used to it.

This seems like an entirely different level of craziness, though.
by WoWSaaS | 2025-12-14 18:48:14+00:00
We conducted a "Stress Test" comparing three distinct AI philosophies for 2025:

The Generalist (ChatGPT): Infinite flexibility but high "context overhead." The Automator (Copy.ai): Linear workflow building (Zapier for text). The Vertical Agent (Vect): State-aware agents with permanent "Brand Memory." The Core Thesis: Most teams underestimate the "Hidden Cost" of Generalist AI. Paying $20/month for ChatGPT is cheap, but the 15 hours spent on "Prompt Engineering" and context-resetting is expensive. We argue that the future isn't about better prompts—it's about Agents that maintain state (Brand Kernel, Strategy, Anti-Personas) so you don't have to acts as the "orchestrator" for every single task.

Full comparison and cost analysis in the post.
by tonyhart7 | 2025-12-14 18:49:31+00:00
I don't like GraphQL, it feels strange for me (for my rest brain)

despite many Rest flaw that I know that it feels tedious sometimes, I still prefer that

and now with AI that can scaffold most rest. the pain point of rest mostly "gone"

now that people using a lot of Trpc, I wonder can we combine Grpc + rest that essentialy typesafe and client would be guaranteed to understand how model response look ?????
by vages | 2025-12-14 18:49:54+00:00
Perhaps I’m naive, but buying from an IKEA (in Norway) or another big store feels less risky than buying something handmade.

Several people are involved in making every product at IKEA. At least one of them must be an expert in compliance. They can expect scrutiny and product recalls, fines and bad sales if they’re found out.

The one person making the hand-made spoon does not necessarily know all the environmental regulations that should be followed.
by xandrius | 2025-12-14 18:51:03+00:00
This is a false dichotomy: it's not a given that companies must make money out of personal data.

There are things which shouldn't be for sale, and I believe personal information is one of those.

Even though we don't have another universe to compare ours to, I believe companies started selling personal data not because people didn't want to pay for their services (since they do that even if you DO pay for them) but mainly because it is profitable. End of the story.

I am always surprised why people here attach so much humanity and conventional logic to huge international for-profit VC-backed companies: they will do literally anything if at the end of the day they come out in the green (aka profitable). Even illegal things, if the expected payout is lower than profits created.

I also believe that if literally killing people made some company $X and their analysts predict having to pay $Y to governments (with $Y substantially lower than $X) once in a while, someone would eventually decide to do that. And such a company wouldn't have trouble finding shareholders and employees.
by gmfawcett | 2025-12-14 18:51:46+00:00
That's a fair question, but I didn't have another person read it. (If I'm being honest, I think my colleagues would have looked at me funny. We don't exactly have a culture of using TLA+ to describe sysadmin processes here, and it felt a bit like a sledgehammer-swatting-fly even by my own standards! They thought the visualizations were cool, though...)

Many of my rules seemed pretty basic to me -- a lot of things like, "there is no target-node candidate whose ordinal is higher than the current target's and also satisfies the Good_Match predicate." But if I had been writing it for a human reader, rather than just to document constraints, I would have put in more effort to explain why the constraints existed in the first place (what's a Good match? Are there Poor matches? Why do we care? etc.). I didn't skip this step altogether but I didn't invest much time into it.

I did take care to separate "physics" rules from "strategy" rules (i.e, explicitly separating core actions and limits from objectives and approaches). That seemed to help the AI, and I'm sure it would have helped people too.
by pjdesno | 2025-12-14 18:51:55+00:00
Back in the days of MapQuest there was a (usually) very good site called mapsonus.com, but it evidently had one of the ferries that crossed Boston Harbor in its map as a zero distance link.

Since it was offline, the bug was obvious although a bit frustrating - you had to put in multiple waypoints to make it forget its urge to send you on the ferry to Hull when you were trying to get to parts of the South Shore.
by otterley | 2025-12-14 18:52:16+00:00
Keep in mind that not every agent is so naive as to allow a local client to connect to it without reauthenticating somehow.

1Password, for example, will, for each new application, pop up a fingerprint request on my Mac before handling the connection request and allow additional requests for a configurable period of time -- and, by default, it will lock the agent when you lock your machine. It will also request authentication before allowing any new process to make the first connection. See e.g. https://developer.1password.com/docs/ssh/agent/security
by flir | 2025-12-14 18:52:44+00:00
But it's "made with ♥" (the footer says so).

(He's broken mainstream browsers, too - ctrl+f doesn't work in the page.)

GPT 5.2 extracted the correct text, but it definitely struggled - 3m36s, and it had to write a script to do it, and it messed up some of the formatting. It actually found this thread, but rejected that as a solution in the CoT: "The search result gives a decoded excerpt, which seems correct, but I’d rather decode it myself using a font mapping."

I doubt it would be economic to decode unless significant numbers of people were doing this, but it is possible.
by trashymctrash | 2025-12-14 18:52:55+00:00
What I liked about GraphQL was the fact that I only have to add a field in one place (where it belongs in the schema) and then any client can just query it. No more requests from Frontend developers like „Hey, can you also add that field to this endpoint? Then I don’t have to make multiple requests“. It just cuts that discussion short.

I also really liked that you can create a snapshot of the whole schema for integration test purposes, which makes it very easy to detect breaking changes in the API, e.g. if a nullable field becomes not-nullable.

But I also agree with lots of the points of the article. I guess I am just not super in love with REST. In my experience, REST APIs were often quite messy and inconsistent in comparison to GraphQL. But of course that’s only anecdotal evidence.