MurphyA/hacker-news huggingface dataset:
by echelon | 2025-12-03 18:22:59+00:00
Sure, but that's orthogonal to geopolitics and intelligence.

US policy makers are actively attacking RISC-V and dissuading its use.

China has an increasingly large upper hand in the RISC-V ecosystem and can use that to remove Western surveillance and replace it with their own.

https://itif.org/publications/2024/07/19/the-us-china-tech-c...

https://www.bunniestudios.com/blog/2023/regarding-proposed-u...
by deepdarkforest | 2025-12-03 18:23:03+00:00
It's definitely cool and engineering wise close to SOTA given lovable and all of the app generators.

But, assuming you are trying to be in between lovable and google, how are you not going to be steamrolled by google or perplexity etc the moment you get solid traction? Like, if your insight for v3 was that the model should make its own tools, so even less hardcoded, then i just dont see a moat or any vertical direction. What really is the difference?
by mrguyorama | 2025-12-03 18:23:13+00:00
> A revolving door of congresspeople would decrease the influence of lobbying

Make an argument that actually supports this rather than asserting it.

Most people who study this kind of thing outright disagree.

Lobbying in the US doesn't happen because we let people work in government for a long time, plenty of other countries do that, it happens because we are one of the only places that legally empower rich people to pay for the campaigns of elected officials and have one of the most expensive political campaigning systems in the world and we openly claim lobbying to be a right of rich people.

Political parties in the US yet again come back to just how absurdly expensive running a campaign is in the US, largely because we refuse to regulate it. Other countries don't allow candidates to run advertisements a full year in advance because that's wasteful and stupid. Candidates are beholden to the political parties for campaign funding. Even Bernie suckles the political party teat to maintain his seat.

If you don't fix that but you limit the ability of a politician to gain mindshare simply by doing a good job in congress (because you only give them two terms) all you have done is make it easier for rich people to control who can get elected.

Indeed, even the US system used to be better! The Civil Rights Act was bipartisan, with meaningful republican support, because there used to be socially progressive republicans! There used to be racist asshole democrats! When the Clinton government was cutting programs, prominent republican representatives from Texas were actively working with prominent Democrat representatives to maintain funding to the particle collider project there. But as America continued to enshrine the right of the rich to fund politicians, and continued to let campaign costs balloon to the point that only a rich person's super PAC or the literal party establishments could afford to run one, what did you expect to happen?

Trumps power over the republican party is fascinating because it largely isn't money based. He's just so populist among republican voters that he can unilaterally control who gets elected regardless of funding. This is generally a fucking bad thing, because trump sucks, but it's just a more direct version of what the Democrat and Republican parties have done for a few decades now.

Are you aware that both democrat and republican lawmakers spend most of their time on the phone calling and begging rich people to fund their next election campaign, even right after an election?

None of this goes away with term limits. All you are doing is giving the people who hold the purse more power over elections.

How good would you be at your job if you had to spend a few million dollars every four years to keep it? How good would you be if your company's competitors were loudly offering to pay that burden?
by UtopiaPunk | 2025-12-03 18:23:38+00:00
Mmm, kind of. Scarcity is definitely fundamental under capitalism. But what do we do in a theoretical, post-scarcity society?

The digitization of information and media combined with the Internet and widespread use of electronic devices practically means that in some important ways, we are already grappling with post-scarcity in certain fields. 600 years ago, "books" and other texts were rare and valuable, then there was an explosive transformation with the invention of the printing press. But while much easier, there was a still a laborious printing process and a copy of a book was still a valuable thing. Now, a "book" can exist as an .epub and be copied perfectly a million times practically for free. It is similarly true for movies, photos, recorded music, news articles, etc.

As a capitalist society, we've really struggled how to deal with this post-scarcity arrangement. We understand in the abstract that this stuff is important, and that creating it is a laborious process, but we do not really know how to assign copies of those works value (because, once created, they immediately become infinitely abundant). The best idea we've seem to have settled on is articifically creating scarcity by locking the digital works behind paywalls and subscription services that require an account, or maybe DRM paired with a EULA. But I think people generally, and the HN crowd specifically, understand that is a lousy arrangement.

Could energy become so abundant that it is also post-scarcity? Between fusion energy and advancements in solar, wind, and geothermal energy, maybe! It is a tantalizing vision to dream of, but what does that look like under capitalism?
by 1vuio0pswjnm7 | 2025-12-03 18:24:33+00:00
RFC 8484:

"5.2. HTTP/2

HTTP/2 [RFC7540] is the minimum RECOMMENDED version of HTTP for use with DoH."

One paper I read some years ago reported DoH is faster than DoT but for multiple queries in single TCP connection outside the browser I find that DoT is faster

I use a local forward proxy for queries with HTTP/2. (Using libnghttp2 is another alternative). In own case (YMMV) HTTP/2 is not signifcantly faster than using HTTP/1.1 pipelining

For me, streaming TCP queries with DoT blows DoH away
Show HN: MemState – Transactional, type-safe memory for AI agents (SQLite/Redis)
by scream4ik | 2025-12-03 18:24:43+00:00
I wanted to share MemState, an open-source library I've been building for strict agent state management.

It acts as a Git-like layer for Python agents: unlike standard vector memory, it enforces Pydantic schemas and supports transactional rollbacks (Time Travel) to prevent state corruption.

Key technical features:

* Strict Schemas: Uses Pydantic to validate memory on write. If an LLM tries to save a string into an int field, the transaction fails before corruption happens.

* Time Travel: Every change is an append-only transaction. You can call memory.rollback(1) to undo an agent's hallucination.

* Constraints: Enforce logic like Singleton facts (e.g., only one "User Profile" per session).

* No Vectors required: It uses SQLite's JSON1 extension for structured filtering, which is faster and deterministic for state lookups.

It includes a native checkpointer for LangGraph, so you can persist agent threads to SQLite with full history auditability.

It's open source (Apache 2.0). Would love to hear your feedback on the architecture!
by simonw | 2025-12-03 18:24:43+00:00
That comment didn't read like AI generated content to me. It made useful points and explained them well. I would not expect even the best of the current batch of LLMs to produce an argument that coherent.

This sentence in particular seems outside of what an LLM that was fed the linked article might produce:

> What's wild is that nothing here is exotic: subdomain enumeration, unauthenticated API, over-privileged token, minified JS leaking internals.
by icyfox | 2025-12-03 18:24:49+00:00
I'm always a bit surprised how long it can take to triage and fix these pretty glaring security vulnerabilities. October 27, 2025 disclosure and November 4, 2025 email confirmation seems like a long time to have their entire client file system exposed. Sure the actual bug ended up being (what I imagine to be) a <1hr fix plus the time for QA testing to make sure it didn't break anything.

Is the issue that people aren't checking their security@ email addresses? People are on holiday? These emails get so much spam it's really hard to separate the noise from the legit signal? I'm genuinely curious.
by giancarlostoro | 2025-12-03 18:24:50+00:00
I get it. This is roughly me, I don't always have the best answers, but I know most things can always be done better. I've coined a few different terms over the years such as "marketing driven development" when I wind up working in places where the marketing team is driving the devs off a cliff, and pushing new features at the expense of ever having time to deal with technical debt. The industry really needs "Tech Debt Thursdays" or something.

There's always way more work to do and those key enhancements or research stories that could improve everything get deprioritized.
by red-iron-pine | 2025-12-03 18:24:57+00:00
are you saying it's a fake quote, or an AI created article that uses real quotes?

cuz Peter Hershock is a real guy and talks about AI all the time. I don't know if he ever said those exact words, but it's reasonable to think he did.

https://romeoffice.georgetown.edu/people/peter-d-hershock
by spapas82 | 2025-12-03 18:25:04+00:00
Well I didn't mind when they removed it and certainly I didn't consider their paid version which is way too expensive for most use cases.

The UI was useful when first configuring the buckets and permissions; if you've got it working (and don't need to change anything) you're good to go. Also, everything can be configured without the UI (not so easily of course).
by rikroots | 2025-12-03 18:25:06+00:00
> Can someone explains why does that work?

I've discovered that if you lecture the LLM long enough about treating the subject you're interested in as "literary" then it will engage with the subject along the lines of "academic interpretation in literature terms". I've had to have this conversation with various LLMs when asking them to comment on some of my more-sensitive-subject-matter poems[1] and the trick works every time.

> I mean you can't social engineer a human using poetry?

Believe me, you can. Think of a poem not as something to be enjoyed, or studied. Instead, think of them as digestible prompts to feed into a human brain which can be used to trigger certain outlooks and responses in that person. Think in particular of poetry's close relations - political slogans and advertising strap lines.

[1] As in: poems likely to trigger warning responses like "I am not allowed to discuss this issue. Here are some numbers to support lines in your area".
by Anon1096 | 2025-12-03 18:25:25+00:00
Besides the fact that this article is obviously AI generated (and not even well, why is there mismatches in british/american english? I can only assume that the few parts in british english are the human author's writing or edits), yes "overutilization" is not a real thing. There is a level of utilization at every price point. If something is "overutilizated" that actually means it's just being offered at a low price, which is good for consumers. It's a nice scare word though and there's endless appetite at the moment for ai-doomer articles.
by xpuente | 2025-12-03 18:25:37+00:00
There are also many high-performance Chinese implementations that are open-source (e.g., XuanTie C910, XiangShan, etc.).

While achieving an open-core design comparable to Zen 5 is unlikely in the near term, a sustained open-source collaborative effort could, in the long run, significantly change the situation. For example, current versions of XiangShan are targeting ~20 SPECint 2006/GHz (early where at ~9).
by bertili | 2025-12-03 18:25:50+00:00
Unfortunately, this will not happen. Even if they have it all working:

Above all, Apple wants to show that their hardware is awesome, especially because it really is. Running x86 games or compatibility layers even with great emulation will make that $3000 Mac look half decent at best, against a $1500 gaming laptop. Simply not the story Apple want to tell.
by lxgr | 2025-12-03 18:25:51+00:00
ICAO biometric travel documents, the underlying standard which almost all EU ID cards implement these days, aren't suitable for remote identity verification though, as they don't have any way of verifying whether the legitimate holder or a thief/fraudster is using them.

Selfie or video face verification is susceptible to deepfakes, and remote fingerprint reads would also require trusted reader hardware.

Some countries have domestic schemes implemented on the same cards (e.g. Germany), but these are not interoperable across the EU, and many countries just don't have any non-ICAO scheme on their cards to begin with, and are instead implementing eIDAS (the current EU digital signature scheme) using some alternate scheme.
by reactordev | 2025-12-03 18:25:57+00:00
I mean it works by someone saying look for DotaCheat4.exe and it searches for it. That’s basically it. Also if your engine has the ability to be hooked into (ahem, gta) it will detect that a process has been attached. It may do some memory scanning if they implemented the allocator from the sdk. What I’m saying is, it’s a crap shoot out there whether the devs did or not. Executives use it as a blanket as to not get sued. “We have anti-cheat”. They can claim it was “circumvented” or whatever. They are all garbage. BattleEye, EasyAntiCheat, Vanguard. If you don’t know, here LL giving a run down.

https://m.youtube.com/watch?v=VtHlMTc8lR4&t=49s
by trentnix | 2025-12-03 18:26:02+00:00
Indeed, an informed electorate voting in self-beneficial ways is the only perfect answer.

As Milton Friedman said:

What is important is not the particular person who is elected President or the party he belongs to. I have often said we shall not correct the state of affairs by electing the right people; we’ve tried that. The right people before they’re elected become the wrong people after they’re elected. The important thing is to make it politically profitable for the wrong people to do the right thing. If it is not politically profitable for the wrong people to do the right thing, the right people will not do the right thing either.
by Anamon | 2025-12-03 18:26:19+00:00
It still left the choice of whether we wanted that guidance up to us users, though. It was auto-enabled to make users aware of the feature (and because it mainly targetted the more tech-illiterate). But if we didn't want it, we could turn it off, and if we did, we could ask for those suggestions.

To me, that's a qualitative difference to the M.O. of big tech today. Google doesn't care whether I want an AI summary or not. In fact, they work hard to remove any option for me to express that I don't want it.
by boh | 2025-12-03 18:26:20+00:00
Honestly these IPOs are likely to kill the market. Once the necessary disclosures are out, and the worse-case math people are assuming turns out to have been way more optimistic than the actual truth, the entire market is likely crashing since the money is so spread out. So far there has been zero good news from an investment perspective out of LLM centered companies outside of what are ultimately just complex financial engineered investments.
by DaveZale | 2025-12-03 18:26:28+00:00
Yes! As long as we don't confuse "Standard of Living" with "Quality of Life " - all the money in the world won't help with the results of eating a bad diet, all too often. For example, what's up with the overeating that results in obesity, diabetes and heart disease (all of which correlate with later cognitive decline) - then we need to inject peptides for curbing appetite? Sure, huge industry, big profits, trillion dollar stock valuations - big Standard of Living! But it's kind of "bass ackwards" - simply improving dietary habits could save us all a boatload of money and prevent completely avoidable lifestyle diseases. Sorry if this is "doomer" stuff - but there's an easy way out, and it can be fun, and good for the wallet.
by KronisLV | 2025-12-03 18:26:50+00:00
> Powered by Uptime Kuma

Uptime Kuma is really nice: https://github.com/louislam/uptime-kuma

Supports all sorts of alerts and can even tell you if it ever looks like your TLS certs will soon expire (if any automation is broken, or you use commercial certs with manual rotation).
by jfindper | 2025-12-03 18:27:04+00:00
We finally have a blog that no one (yet) has accused of being ai generated, so obviously we just have to start accusing comments of being ai. Can't read for more than 2 seconds on this site without someone yelling "ai!".

For what it's worth, even if the parent comment was directly submitted by chatgpt themselves, your comment brought significantly less value to the conversation.
by rushingcreek | 2025-12-03 18:27:11+00:00
Thanks, and great question. The custom Phind models are really key here -- off-the-shelf models (even SOTA models from big labs) are slow and error-prone when it comes to generating full websites on-the-fly.

Our long-term vision is to build a fully personalized internet. For Google this is an innovator's dilemma, as Google currently serves as a portal to the current internet.
by quickthrowman | 2025-12-03 18:27:15+00:00
Why not? It’s 40A at 240V, or 25% of the continuous load rating of a 200A 240V single-phase service.

If someone can afford an 8 GPU server, they should be able to afford some #6 wire, a 50A 2P breaker, and a 50A receptacle. It has the same exact power requirements as an L2 EV charger.
by logsr | 2025-12-03 18:27:35+00:00
uWebsockets, which is the foundation of the network and http server stack in Bun, as I understand it, is a compatible 3rd party extension to Node.js that gives it similar performance on HTTP implementation.

The key architectural difference is that Node.js implements the HTTP stack and other low level libraries in JavaScript, which gives it memory safety guarantees provided by the v8 runtime, while Bun/uWebsockets are a zig/C++ implementation. for Node.js, which is focused on enterprise adoption, the lower performance JS approach better aligns with the security profile of their enterprise adoption target.
by btilly | 2025-12-03 18:28:08+00:00
Yes, over-utilization is a natural response to being undercharged. And being undercharged is a natural result when investors are throwing money at you. During bubbles, Silicon Valley often goes to "lose money, make it up with scale". With the vague idea that after you get to scale, THEN you can figure out how to make money. And fairly consistently, their idea for how to make money is "sell ads".

Past successes like Google encourage hope in this strategy. Sure, it mostly doesn't work. Most of of everything that VCs do doesn't work. Returns follow a power law, and a handful of successes in the tail drive the whole portfolio.

The key problem here doesn't lie in the fact that this strategy is being pursued. The key problem is that it is rare for first mover advantages to last with new technologies. That's why Netscape and Yahoo! aren't among the FAANGs today. The long-term wins go to whoever successfully create a sufficient moat for themselves to protect lasting excess returns. And the capabilities of each generation of AI leapfrogs the last so well that nobody has figured out how to create such a moat.

Today, 3 years after launching the first LLM chatbot, OpenAI is nowhere near as dominant as Netscape was in late 1997, 3 years after launching Netscape Navigator. I see no reason to expect that 30 years from now OpenAI will be any more dominant than Netscape is today.

Right now companies are pouring money into their candidates to win the AI race. But if the history of browsers repeats itself, the company that wins in the long-term would launch in about a year from now, focused on applications on top of AI. And its entrant into the AI wars wouldn't get launched until a decade after that! (Yes, that is the right timeline for the launch of Google, and Google's launch of Chrome.)

Investing in silicon valley is like buying a positive EV lottery ticket. An awful lot of people are going to be reminded the hard way that it is wiser to buy a lot of lottery tickets, than it is to sink a fortune into a single big one.
by stoneforger | 2025-12-03 18:28:09+00:00
"How money works" YouTube channel had a nice video about this trend in particular going back to making stock buybacks legal in 1982 I think, which made CEO and execs wealth acquisition driven not by a long successful career with healthy margins and dividends, but a short-tenured local maximum pump-and-dump and a hold-the-bag game funded by endless fiat currency which is printed on the backs of other people. Other people's money , Gordon Gecko, they're not just real, they're celebrity sociopaths running us into the ground because of a fragile ego.
by TSiege | 2025-12-03 18:28:51+00:00
The best I kind is this tech crunch article, which appears to be referencing an article from the information that is pay walled.

> The Information reports that Anthropic expects to generate as much as $70 billion in revenue and $17 billion in cash flow in 2028. The growth projections are fueled by rapid adoption of Anthropic’s business products, a person with knowledge of the company’s financials said.

> That said, the company expects its gross profit margin — which measures a company’s profitability after accounting for direct costs associated with producing goods and services — to reach 50% this year and 77% in 2028, up from negative 94% last year, per The Information.

https://techcrunch.com/2025/11/04/anthropic-expects-b2b-dema...
by spapas82 | 2025-12-03 18:29:04+00:00
This is a way too old version. You should use a newer one instead by downloading the source and built the binaries yourself.

Here's a simple script that does it automagically (you'll need golang installed):

> build-minio-ver.sh

#!/bin/bash set -e VERSION=$(git ls-remote --tags https://github.com/minio/minio.git | \ grep -Eo 'RELEASE\.[0-9T-]+Z' | sort | tail -n1) echo "Building MinIO $VERSION ..." rm -rf /tmp/minio-build git clone --depth 1 https://github.com/minio/minio.git /tmp/minio-build cd /tmp/minio-build git fetch --tags git checkout "$VERSION" echo "Building minio..." CGO_ENABLED=0 go build -trimpath \ -ldflags "-s -w \ -X github.com/minio/minio/cmd.Version=$VERSION \ -X github.com/minio/minio/cmd.ReleaseTag=$VERSION \ -X github.com/minio/minio/cmd.CommitID=$(git rev-parse HEAD)" \ -o "$OLDPWD/minio" echo " Binary created at: $(realpath "$OLDPWD/minio")" "$OLDPWD/minio" --version
by Ocerge | 2025-12-03 18:29:25+00:00
I know the remote aspect is important to you, but having done this exact switch (general backend services dev -> backend dev for a big game company) this requirement is almost certainly going to hold you back. The field is bleeding jobs and there are plenty of people who will go ass-in-seat 5 days a week. Outside of that, there are a surprising amount of roles that generalist SWEs fit into that don't require any experience. It's been a very comfortable foot-in-the-door for myself, at least.
by reactordev | 2025-12-03 18:29:26+00:00
Other options exist but it’s not an option for these real-time games like FPS’s. I get it.

If you don’t need real-time packets and can deal with the old school architecture of pulses, there’s things you can do on the network to ensure security.

You do this too on real-time UDP it’s just a bit trickier. Prediction and analysis pattern discovery is really the only options thus far.

But I could be blowing smoke and know nothing about the layers of kernel integration these malware have developed.