MurphyA/hacker-news huggingface dataset:
by Telaneo | 2025-12-02 21:15:43+00:00
If the choice is between being broken behind the scenes and broken in your face, it's no wonder people pick the former.

If Microsoft and the like really cared about security, they'd push security completely separately from feature updates, allowing people to get the benefit of updates, without the negatives of those update breaking their environment.

Or better yet, not push updates that break that break their environment in the first place. Security is a nice excuse for Microsoft to get you to update, but it's been used so many times to push hostile experiences to users that I can't blame the users for not wanting to be burned. The fault lies entirely with Microsoft and other companies for pushing hostile changes and chipping away at their goodwill.

It hurts, Microsoft. Why are you doing this to us? (It's money. It's always money.)
by poisonborz | 2025-12-02 21:16:04+00:00
They were solid top in quality for 15 years for Android. DeX, pen features, camera software was solid. OneUI became very customizeable. But it was stably boring at best, and atrocious at worst, and they couldn't ship any other standout feature that wasn't scrapped soon after.

Now they shipped the same camera on their most sold flagship phone 3 years in a row, same battery size for 5 years. Flip-flopping between Qualcomm CPUs as their own couldn't compete after years of trying. They don't deserve the spot they have for quite some time now.
by mywittyname | 2025-12-02 21:16:05+00:00
Ship them somewhere else, then print a banner saying, "mission accomplished."

It worked at a state level for years, with certain states bussing their homeless to other states. And recently, the USA has been building up the capability to do the same thing on an international scale.

That's the "solution" we are going to be throwing money at. Ship them to labor camps propped up by horrible regimes.
by rglullis | 2025-12-02 21:16:10+00:00
> They're not paying me to use it.

Of course they are.

> As long as the inference is not done at a loss.

If making money on inference alone was possible, there would be a dozen different smaller providers who'd be taking the open weights models and offering that as service. But it seems that every provider is anchored at $20/month, so you can bet that none of them can go any lower.
by CTDOCodebases | 2025-12-02 21:16:11+00:00
Bingo!

Some will argue that consumption drives production but according to the common definition children don’t contribute to GDP.

Assuming governments are going to address population growth/decline then it’s a choice between incentivising births or issuing visas.

Even in countries that have free healthcare births are in decline so it’s not the cost of children alone that is causing this situation. I would argue it’s the economic crutch called immigration.
by cryptonector | 2025-12-02 21:16:19+00:00
> However, Unicode is not a very good character set, and they should not force or expect you to use it.

Unicode is an excellent character set, and for 99% of cases (much more probably) it's absolutely the best choice. So one should choose Unicode (and UTF-8) in all cases unless there is an excellent reason to do otherwise. As time passes there will be fewer and fewer cases where Unicode is not sufficient, so really we are asymptotically approaching the point at which Unicode is the only good choice to make.

This is all independent of ASN.1. But it is true that ASN.1 has built-in types for Unicode and non-Unicode strings that many other protocols lack.

Have you written up anything about ASN.1X anywhere? I'd love to take a look.
by losvedir | 2025-12-02 21:16:33+00:00
I'm sort of surprised to see that you used Claude Code so much. I had a vague idea that "Zig people" were generally "Software You Can Love" or "Handmade Software Movement" types, about small programs, exquisitely hand-written, etc, etc. And I know Bun started with an extreme attention to detail around performance.

I would have thought LLM-generated code would run a bit counter to both of those. I had sort of carved the world into "vibe coders" who care about the eventual product but don't care so much about the "craft" of code, and people who get joy out of the actual process of coding and designing beautiful abstractions and data structures and all that, which I didn't really think worked with LLM code.

But I guess not, and this definitely causes me to update my understanding of what LLM-generated code can look like (in my day to day, I mostly see what I would consider as not very good code when it comes from an LLM).

Would you say your usage of Claude Code was more "around the edges", doing things like writing tests and documentation and such? Or did it actually help in real, crunchy problems in the depths of low level Zig code?
by felixfurtak | 2025-12-02 21:17:02+00:00
All of which you will be able to do with your bundled assistant in the not-to-distant future.

OpenAI is a basket case:

- Too expensive and inconvenient to compete with commoditized, bundled assistants (from Google/ Microsoft/Apple)

- Too closed to compete with cheap, customizable open-source models

- Too dependent on partners

- Too late to establish its own platform lock-in

It echoes what happened to:

- Netscape (squeezed by Microsoft bundling + open protocols)

- BlackBerry (squeezed by Apple ecosystem + open Android OS)

- Dropbox (squeezed by iCloud, Google Drive, OneDrive + open tools like rclone)

When you live between giants and open-source, your margin collapses from both sides.
by Animats | 2025-12-02 21:17:06+00:00
No mention of flash LIDAR, which really ought to be seen more for the short-range units for side and rear views.

Interference between LIDARs can be a problem, mostly with the continuous-wave emitters. Pulsed emitters are unlikely to collide in time, especially if you put some random jitter in the pulse timing to prevent it. The radar people figured this out decades ago.
by giancarlostoro | 2025-12-02 21:17:11+00:00
> - You can’t set alarm on a certain date.

I have some alarms for specific dates, do you mean a single use alarm?

> - You can only snooze the alarm for 9 minutes (I think you can configure this in iOS26, but this was unacceptable even 5 years ago)

To this day I miss one alarm that LG phones had where it would make me do more work to even dismiss it, on purpose, because I am known to just turn it off and keep sleeping.

> - Hotspot automatically disconnects even with a Macbook (Windows/Linux is much worse). I used to live without home internet relying on hotspot feature. IPhone hotspot proved to be extremely unreliable.

I have not had this issue, though I did have the issue of not realizing that since I had bought my phone through Apple instead of through T-Mobile my data / hotspot plan was not the right one, I realized this after I left T-Mobile for Mint, but I rarely if ever use hotspot.

> - Swipe typing is so horrible I had to disable it.

I had the 12 Pro and now the 17 Pro, I rarely do swipe typing, voice to text is slightly more annoying, I would hope that in this world of AI that Apple would improve their voice to text, it just doesn't hear me at all half of the time.

> - You can’t transfer files by simply connecting your phone to a PC.

Apple has always been all about being on Apple, so yeah, though I have gotten my Linux to mount files from the iPhone before, doesn't look pretty at all mind you, but I can take a rough but full snapshot of all my images on my phone..
by alok-g | 2025-12-02 21:17:15+00:00
Hi Can,

I looked at the simulator mentioned at the end of the post.

The deep work I am often in requires way more than an hour of it and with continuity. This is because a lot of context needs to be held in memory and the loss from interruptions is thereby much higher.

It would have been better if the ranges on the following were wider, hitting may be even 16 hours for the first one below (not kidding).

>> What counts as deep work? 30m 45m 60m

>> How many blocks do you need? 1 2 3

PS: Why limit the range or quanta when the math framework you have painstakingly built allows for more.

Thanks.
by hunter2_ | 2025-12-02 21:17:47+00:00
I agree with no JS, but why PDF over HTML? Hard-wrapping for letter-sized paper (ok, a PDF doesn't need to be letter-sized, but most menus are approximately that) with crapshoot reflow options for soft-wrapping in certain viewer apps is pretty dicey on a phone, mitigated only slightly by rotating the phone sideways.

The only benefit I can think of is if it leads to more frequent updates by the restaurant, due to limited skillset.
by sph | 2025-12-02 21:17:52+00:00
That phrase was an essay from a Danish Social Democrat, the exact same party that has been pushing very hard for Chat Control in Europe.

It’s not a lobbying firm, it’s the same people that make our laws and decide our future.

By the way, the full title of that essay is “Welcome to 2030. I own nothing, have no privacy, and life has never been better”
by grim_io | 2025-12-02 21:18:13+00:00
What kind of templating are we talking about? HTML or in general?

If we take python, for example, you could use jinja for HTML and composition/inheritance for the general stuff.

That's all django does, and it does it well. I don't see what nix is doing so much better.

Prefer JS/TS? You can have JSX, which is superior in any way compared to this nix-based abomination.
by shkkmo | 2025-12-02 21:18:22+00:00
> They can ride their current street rep the same way Kleenex did.

Kleenex was one product of many and launched by an already 50 year old company. I'm not sure in what sense they "rode" the Kleenex brand, but it would probably have involved being able to sell that product profitably...

> they've got time to play the long game.

They have a couple of years of runway, not sure how that gives them room to focus on the long game.
by sparkie | 2025-12-02 21:18:32+00:00
It's due to the way the instruction is encoded. `lea` would've needed special treatment in syntax to remove the brackets.

In `op reg1, reg2`, the two registers are encoded as 3 bits each the ModRM byte which follows the opcode. Obviously, we can't fit 3 registers in the ModRM byte because it's only 8-bits.

In `op reg1, [reg2 + reg3]`, reg1 is encoded in the ModRM byte. The 3 bits that were previously used for reg2 are instead `0b100`, which indicates a SIB byte follows the ModRM byte. The SIB (Scale-Index-Base) byte uses 3 bits each for reg2 and reg3 as the base and index registers.

In any other instruction, the SIB byte is used for addressing, so syntax of `lea` is consistent with the way it is encoded.

Encoding details of ModRM/SIB are in Volume2, Section 2.1.5 of the ISA manual: https://www.intel.com/content/www/us/en/developer/articles/t...
by beezlebroxxxxxx | 2025-12-02 21:19:08+00:00
> You gotta ask yourself whether we really want a society where people have to already know the job before they get their first job. Where everyone is like a doctor: already decided at age 16 that this was the path they wanted to follow, choosing classes towards that goal, and sticking with it until well into adulthood. And they have to essentially pay to get this job, because it comes at at cost of exploring other things (as well as actual money to live).

With the way higher-ed works in the US, and the way certain schools opportunity hoard to an insane degree, that is effectively already the case for whole industries and has been so for decades at this point. It's practically an open secret that getting into some schools is the golden ticket rather than the grades you earn while there. Many top schools are just networking and finishing schools for whole "elite" industries.
by BenjiWiebe | 2025-12-02 21:19:14+00:00
I'm curious, is an RPO of 0 truly expected or needed? I can easily believe that some places would "require" it.

What kind of data is so critical that the data from a quarter second before catastrophic destruction must be saved?

I guess weapons testing, at least... But that wouldn't be streaming data of that importance for a very large % of time.
by jomohke | 2025-12-02 21:19:32+00:00
Is this why everyone only seems to know the first half of Dario's quote? The guy in that video is commenting on a 40 second clip from twitter, not the original interview.

I posted a link and transcription of the rest of his "three to six months" quote here: https://news.ycombinator.com/item?id=46126784
by bloppe | 2025-12-02 21:20:07+00:00
To be fair, I would get a ton of value out of someone selling dollars for 20 cents apiece.

But ya, OAI is clearly making a ton of revenue. That doesn't mean it's a good business, though. Giving them a 20 year horizon, shareholders will be very upset unless the firm can deliver about a trillion in profit, not revenue, to justify the 100B (so far) in investment, and that would barely beat the long term s&p 500 average return.

But Altman himself has said he'll need much more investment in the coming years. And even if OAI became profitable by jacking up prices and flooding gpt with ads, the underlying technology is so commodified, they'd never be able to achieve a high margin, assuming they can turn a profit at all.
by PawelKozy | 2025-12-02 21:20:35+00:00
OP here.

With the release of Anthropic's MCP, I realized we are effectively creating API endpoints that accept natural language as input, but I couldn't find many practical resources on the security implications.

I built this repo to move beyond theory. It contains 9 Dockerized labs covering vulnerabilities I’ve seen in the wild, including:

Indirect Prompt Injection (via GitHub Issues) Tool Output Poisoning (The 'Rug Pull') Filesystem Traversal (CVE-2025–53110)

Each lab has a 'Vulnerable' and 'Secure' implementation so you can diff the code to see the fix.

I wrote a longer breakdown of the philosophy here if interested: https://medium.com/@kozielpawe/when-agents-get-tools-10-mcp-...

Happy to answer questions about agent security.
by echelon | 2025-12-02 21:21:18+00:00
I like your attitude, but there is potentially a major business in there if they can get users to tolerate it. (Major business meaning greater than the GDP of most countries.)

Over 75% of Google's revenue is ads. A bulk of that from Google Search ads.

I just don't think the ads will be natural. And I think OpenAI has been testing this in quiet and is now "changing course" because the results didn't look great. Hypothesis, of course, but it lines up with the signals we're getting.
by gwd | 2025-12-02 21:21:45+00:00
Sorry, did I accidentally wander into a political action group working meeting, and you're mistaking me for the chairperson or something? If you have actual money and people working on this, don't take your cues form some rando on the internet!

I thought this was a site where we talk about ideas and see what people's perspectives are. @basilikum asked why on earth @mchusma would advocate "pay to extend" instead of "14+14 no extensions". I gave my own personal take. I'd be totally happy to be wrong about the political viability of "14+14 no extensions". If you have actual data, or even just a different take on the situation, I'm all ears.
by harmmonica | 2025-12-02 21:22:05+00:00
Do you mean the opposite as in they purchased because they wanted to make some money? If so, that makes sense since one of the many reasons people buy homes is to invest in them. Here's hoping you didn't follow their lead, though, given https://fred.stlouisfed.org/series/MEDLISPRIPERSQUFEE6075.

But even having said that, people will buy houses or condos in SF today and make a profit in spite of any broader market conditions. But that seems dumb for someone who has a full-time gig that's anything other than identifying underpriced residential investment opportunities given how crazy both housing prices and equity (tech in particular) prices are.
by raw_anon_1111 | 2025-12-02 21:22:32+00:00
It’s really even easier than that. I already do all my work on AWS and use Bedrock that hosts every popular model and its own except for OpenAIs closed source models.

I have a reusable library that lets me choose between any of the models I choose to support or any new model in the same family that uses the same request format.

Every project I’ve done, it’s a simple matter of changing a config setting and choosing a different model.

If the model provider goes out of business, it’s not like the model is going to disappear from AWS the next day.
by waffletower | 2025-12-02 21:22:45+00:00
It seems that 10% of college students in the U.S. are younger than 18, or do not have adult status. The other 90% are adults and are trusted with voting, armed services participation and enjoy most other rights that adults have (with several obvious and notable exceptions -- car rental and legal controlled substance purchase etc.) Are you saying that these adults shouldn't be trusted to use AI? In the United States, and much of the world, we have drawn the line at 18. Are you advocating that AI use shouldn't be allowed until a later cutoff in adulthood? It is not at all definitively established what these "essentially hidden" negative side effects are, that you elude to, and if they actually exist.
by kmeisthax | 2025-12-02 21:23:17+00:00
The cost inflation started with pharmaceutical companies buying each other out and increasing the cost of drugs. Then the hospitals consolidated so they could get better negotiating power with pharmaceutical companies... and also, raise their prices to insurance companies. Who then also had to consolidate to preserve margin.

The idea that cost inflation is downstream of subsidy is... well, it's not entirely wrong, but it's also propaganda written by the people doing the inflation. The government can't distribute economically effective subsidies if industry is conspiring to eat the subsidy and hold the consumer hostage to get more. In an unconsolidated market, the underlying actual costs don't change beyond the increased demand. Consolidation transfers the subsidy premium away from the customers, who can't consolidate. You can't give a bullied kid more lunch money.
by ngrilly | 2025-12-02 21:23:44+00:00
Considering that 1) Bun is written in Zig, 2) Zig has a strict no-AI policy [1], and 3) Bun has joined Claude, it seems that Bun and Zig are increasingly culturally apart.

[1] https://ziglang.org/code-of-conduct/#strict-no-llm-no-ai-pol...
by alok-g | 2025-12-02 21:23:46+00:00
+1

Interruptions are 'breaks' that clear your context memory by drawing it to something else entirely.

An activity like lunch, shower, etc., actually help by giving you moments to ruminate thoughts related to the deep work at hand, help capture the bigger picture and innovate.

I am a respected technologist and am credited with more than 100 inventions. Practically none of those came to me when I was at my workstation. Breaks that are not interruptions can be so good that one should purposefully mandate them into schedule.
by 1vuio0pswjnm7 | 2025-12-02 21:23:53+00:00
"The notion that because one is rich one must be smart, however fallacious, is deeply embedded: People can equate piles of money - or the promise of it - with good sense, wisdom, and savoir faire," she wrote." (2000)

The writer who dared criticize Silicon Valley

https://news.ycombinator.com/item?id=46107890
by addaon | 2025-12-02 21:24:39+00:00
Yep, 200 m is pretty close to standard. Which is why 32 channel and 20 kHz is a pretty common design point. But customers would love 64 channel and 40 kHz, for example. Also, it's worth noting that if your design range is 200 m -- your beam doesn't just magically stop beyond that. While the inverse square law is on your side in preventing a 250 m target from interfering with the next pulse, a retro-reflector at 250 m can absolutely provide a signal that aliases with a ~16 m signal (assuming 234 m time between pulses) on the next channel under the right conditions. This is an edge case -- but it's one that's observable under steady-state conditions, it's not just a single pulse that gets misinterpreted.
Show HN: Davia – A Visual Wiki, Generated by Your Coding Agent (Open-Source)
by ruben-davia | 2025-12-02 21:24:44+00:00
Hi HN,

We’re Ruben, Afnan, and Theo. A few days ago we shared the first early version of Davia, and the feedback was far more active than we expected. For context, you can see the previous discussion and reactions here: https://news.ycombinator.com/item?id=45880716

Based on that response, we decided to push things further and release Davia as a fully open-source package you can run locally.

Davia helps coding agents generate a structured, editable internal wiki for your project. The focus is on high-level documentation: onboarding context, architectural overviews, key design decisions. Traditional tooling often lacks visual context, omits diagrams, and doesn’t integrate well with local workflows or AI-assisted editing.

Davia outputs a workspace where: – Text is editable in a Notion-like editor – Diagrams are placed on editable whiteboards – Everything runs locally and can be modified either in your IDE or within the workspace

One feature people particularly liked is that your IDE’s AI agent can write the documentation while Davia turns it into clean pages, diagrams, and visual structures automatically.

The project is still early, so we’d love your feedback, use cases, criticisms, and thoughts on how you currently document internal knowledge.
by Zarathruster | 2025-12-02 21:25:00+00:00
> Adding to this: it's not just that the apprenticeship ladder is gone—it's that nobody wants to deal with juniors who spit out AI code they don't really understand.

I keep hearing this and find it utterly perplexing.

As a junior, desperate to prove that I could hang in this world, I'd comb over my PRs obsessively. I viewed each one as a showcase of my abilities. If a senior had ever pointed at a line of code and asked "what does this do?" If I'd ever answered "I don't know," I would've been mortified.

I don't want to shake my fist at a cloud, but I have to ask genuinely (not rhetorically): do these kids not have any shame at all? Are they not the slightest bit embarrassed to check in a pile of slop? I just want to understand.
by mettamage | 2025-12-02 21:25:40+00:00
Location: Amsterdam Remote: Hybrid or remote Willing to relocate: Yes Technologies: Python + Jupyter + Polars + Flask, ReactJS and SQL. But honestly, I dabbled with all the popular languages for 100 to 2000 hours per language (Java, C#, PHP, C, C++, Objective-C, R, Smalltalk, x86-64 assembly, SQL, NoSQL, LaTeX). Résumé/CV: upon request Email: see my profile

I excel at software engineering for business impact. If I can see: the amount of hours saved, amount of revenue/users/clicks gained, then I am on it. I'm currently also being creative with LLMs (both professional and personal). I love to talk to LLM enthusiast and sceptics alike.

Some recent successes: * Saved 90% of time for SEO specialists by automating the tedious bits with LLMs and give them all the creative bits. Also the ranking went up during that period!

* Using LLM rewrites to generate better product pages driving higher conversion and higher traffic

* Created a full-stack web app showcasing our bespoke offerings, which halves the time to close the deal (before this, obtaining a price took a while)

* Used triple exponential smoothing to predict supply and demand, showcasing the gap for our company to drive more supply to

* Created my own project management dashboard so that certain weak PM skills I have are actually quite okay now :)