MurphyA/hacker-news huggingface dataset:
Show HN: Bob the Fixer – SonarQube and MCP tools for a fix→test→re-scan loop
by andrearaponi12 | 2025-12-17 18:53:56+00:00
Hi HN — I’m Andrea. I built Bob the Fixer to make “AI fixes” less vibes, more measurable.

The idea: run SonarQube locally (containerized), then expose an MCP server that gives AI coding CLIs a fix-ready view of your static analysis results. Instead of “guess what to fix”, the assistant can:

- scan a repo + apply quality gates - fetch rich issue details (rule info + plain-text code context) - prioritize work (tech debt / coverage gaps / duplication / patterns) - iterate: fix → test → re-scan

Important: this is not a 1:1 “SonarQube API over MCP” wrapper — it’s an opinionated remediation workflow.

Quickstart (Linux/macOS): curl -fsSL https://raw.githubusercontent.com/andrearaponi/bob-the-fixer... | bash

Then open your AI CLI inside a repo and ask something like: “Scan this project with Bob the Fixer, then show me details for the top critical issue.”

Story / why it exists (incl. the “two weeks of tech debt in one night” bet):

https://andrearaponi.it/open-source/bob-the-fixer/
Show HN: Modeling the US Debt as a Healthcare Pricing Failure ($26T Gap)
by kmundy | 2025-12-17 18:53:58+00:00
I spent the last month rebuilding the US federal budget from 1970–2024 to find the 'Taproot' of our fiscal collapse.

The math suggests we don't have a sovereign debt crisis; we have a pricing crisis.

I isolated federal healthcare spending and compared it to a baseline of CPI + a 1.7% 'Innovation Premium' (using Germany as a control group).

The findings: Federal healthcare overpayment accounts for $26T of our national debt. Without this 'Monopoly Premium,' the US would have barely 9T in debt today. The Structural Cause: I trace this back to the 1997 Residency Cap (supply freeze) and the 85% MLR (which turns insurers into cost-plus contractors)

I'm interested in the community's feedback on the 'Triple Multiplier' logic (Price + Innovation + Interest).

P.S. I'm currently hosting a deeper discussion on the policy implications of this data over on LinkedIn bit.ly/3YEv6kl
by yieldcrv | 2025-12-17 18:53:59+00:00
the trend I've seen is that none of these companies are behind in concept and theory, they are just spending longer intervals baking a more superior foundational model

so they get lapped a few times and then drop a fantastic new model out of nowhere

the same is going to happen to Google again, Anthropic again, OpenAI again, Meta again, etc

they're all shuffling the same talent around, its California, that's how it goes, the companies have the same institutional knowledge - at least regarding their consumer facing options
by jfengel | 2025-12-17 18:54:18+00:00
One of my most important jobs as a Shakespeare actor is to find ways to enunciate some of his over-long sentences in a way that allows the audience to follow them just by listening.

In this case, it's not too hard. Shakespeare likes giving you oppositions, like "winter" and "summer". Put the stress there, and the audience will follow. And you don't need to breathe at the end of the line; it can flow directly into the next one.
by aw1621107 | 2025-12-17 18:54:30+00:00
> I know nothing about Rust. But why is unsafe needed?

The short of it is that for fundamental computer science reasons the ability to always reject unsafe programs comes at the cost of sometimes being unable to verify that an actually-safe program is safe. You can deal with this either by accepting this tradeoff as it is and accepting that some actually-safe programs will be impossible to write, or you can add an escape hatch that the compiler is unable to check but allows you to write those unverifiable programs. Rust chose the latter approach.

> Kinda sounds a lock would make this safe?

There was a lock, but it looks like it didn't cover everything it needed to.
by bitpush | 2025-12-17 18:54:36+00:00
I use adblockers, but I'll play devil's advocate to understand your position a bit better.

The article argues this as well, but how do you want all these publishers to make money? If I pay for NYT, that's not a dollar spent on Washington Post or LA times or The Globe. With advertisements, a "little bit" was spend on all of those sites.

So what's the way out here? Please dont say that everything should be free.
by GenerWork | 2025-12-17 18:54:44+00:00
I'm actually liking 5.2 in Codex. It's able to take my instructions, do a good job at planning out the implementation, and will ask me relevant questions around interactions and functionality. It also gives me more tokens than Claude for the same price. Now, I'm trying to white label something that I made in Figma so my use case is a lot different from the average person on this site, but so far it's my go to and I don't see any reason at this time to switch.
by woodruffw | 2025-12-17 18:54:58+00:00
Can you show me an example of Rust promising "if it compiles it works"? This seems like an unrealistic thing to believe, and I've never heard anybody working on or in Rust claim that this is something you can just provide with absolute confidence.

The cost-benefit argument for Rust has always been mediated by the fact that Rust will need to interact with (or include) unsafe code in some domains. Per above, that's an explicit goal of Rust: to provide sound abstractions over unsound primitives that can be used soundly by construction.
by acdha | 2025-12-17 18:55:05+00:00
Did the thief take transit, though? We had a similar NIMBY argument in the area where some totally-not-racist people said thieves were going to bike from a predominantly black neighborhood 15 miles away to steal TVs, and it was so blatantly wrong that the local chief of police noted that the burglars they catch use stolen trucks or SUVs for the cargo capacity.
by elvin_d | 2025-12-17 18:55:21+00:00
Gemini 3 are great models but lacking a few things: - app expirience is atrocious, poor UX all over the place. A few examples: silly jumps when reading the text when the model starting to respond, slide-over view in iPad breaking request while Claude and ChatGPT working fine. - Google offer 2 choices: your data used for whatever they want or if you want privacy, the app expirience going even worse.
by prennert | 2025-12-17 18:55:27+00:00
I did something similar many years ago. I was amazed that Fortran was not more discussed as an option to write performant code within a Python / numpy codebase.

At the time everyone seems to default to using C instead. But Fortran is so much easier! It even has slicing notations for arrays and the code looked so much like Numpy as you say.
by lapcat | 2025-12-17 18:56:00+00:00
> It's an open protocol, you don't need to use any of the vendors. My Yubikey is a "passkey", so is my Flipper Zero. Keepass provides passkey support.

I don't want to use a Yubikey. It's a pain in the butt. I just want to use my Mac, with no more damn dongles.

Keepass is a vendor, and one who doesn't even have a Safari extension.

> Nothing wrong with extending this to passkeys, it's convenient and makes sense for them.

I didn't say there was anything wrong with extending this to passkeys. The problem is the lock-in, e.g., Safari requires iCloud keychain for passkeys, but not for passwords. And there is no plaintext export/import, unlike with passwords.

Nobody can convince me that passkeys are good when I buy a Mac and use the built-in Safari but can't even use passkeys to log in to websites unless I give my passkeys to a cloud sync service or have to install some third-party "solution" (for a problem that should not exist in the first place). That experience is so much worse than passwords.
by DFHippie | 2025-12-17 18:56:15+00:00
That's always the question with this unitary executive business. They believe this is the government defined by the Constitution, regardless of precedent. Do they believe it is a good system of government? Do they believe this is the government intended or rather the government allowed by legal loophole, vagueness, or contradiction? Because it seems like they think the president should rule like a monarch because they happen to control the presidency at the current moment, not because it is a wise and effective system of government.
by sarreph | 2025-12-17 18:56:28+00:00
> if the buyer enters their company and the copy just changes into what we think they want, are they going to lose trust that the copy is a true representation of our focus?

Great point. That's pertinent to how we've been configuring the research → computing "intent" pipelines. Our focus right now is mainly just to streamline content and show brands "in context" as much as possible without having too much of an "opinion".

Your idea about showing how specifically the company could be helped + a use-case is lovely way of putting some of the more complex layout generation ideas we've been working on!
by woodruffw | 2025-12-17 18:56:29+00:00
I've written lots of `forbid(unsafe_code)` in Rust; it depends on where in the stack you are and what you're doing.

But as the adjacent commenter notes: having unsafe is not inherently a problem. You need unsafe Rust to interact with C and C++, because they're not safe by construction. This is a good thing!
by lucideer | 2025-12-17 18:56:45+00:00
> unlike passwords, there is no good provider migration story

I'm curious what the "good provider migration story" you're referring to here for passwords is?

Password managers by-and-large haven't agreed on a standardised interchange format for import/export - a few of them have some compatibility helpers for importing from specific popular competitors but they're all in different formats, no consistent formats.

The above goes for passkeys as it does passwords - import/export will include your passkeys - so I don't see much difference in the provider migration story.

On the other hand, the FIDO Credential Exchange Format does solve the above problem (if/when providers choose to adopt it), so passkeys are at least further along the path of creating a "good provider migration story" than passwords ever were.
by bitpush | 2025-12-17 18:56:51+00:00
What makes you think ChatGPT will serve you, and not Amazon?

> "Hey ChatGPT, help me find a USB-C charger that has 3 ports and around 100W power"

>> "Absolutely. Here's [insert product] which matches most of your criteria. I should also mention this is a promoted response. Read on more to see the really best product, which is [another product]"
by CuriouslyC | 2025-12-17 18:56:51+00:00
I've learned a lot of shit while getting AI to give me the answers, because I wanted to understand why it did what it did. It saves me a lot of time trying to fix things that would have never worked, so I can just spend time analyzing success.

There might be value in learning from failure, but my guess is that there's more value in learning from success, and if the LLM doesn't need me to succeed my time is better spent pushing into territory where it fails so I can add real value.
by holler | 2025-12-17 18:57:30+00:00
this. I don't know any non-tech people who use anything other than chatgpt. On a similar note, I've wondered why Amazon doesn't make a chatgpt-like app with their latest Alexa+ makeover, seems like a missed opportunity. The Alexa app has a feature to talk to the LLM in chat mode, but the overall app is geared towards managing devices.
by dijit | 2025-12-17 18:58:15+00:00
We all have our moments, and I personally consider HN to be “best effort”, almost like a volunteer project. I’m not certain I’m correct: but thats the optics I have so my expectations are adjusted to that.

So don’t beat yourself up please.

When I worked for “SaaS unicorn” we typically had multiple levels of escalation, and acknowledging would have done nothing because the alarm would continue firing until fixed. Not sure what’s changed in 15 years of ops, I had assumed it would be better now- I can’t imagine silencing an alert totally by acknowledging it- if its still occurring.

I’m totally fine with how you handled it, if anything I am thankful. But that seems to be a system I would improve if I had the time.

“mute” is different than “resolve” to me, and both should exist. (Where mute is an acknowledgement of an issue as ongoing.)
by Pet_Ant | 2025-12-17 18:58:16+00:00
It's not moving the goalposts at all. I'm not a Rust programmer, but for years the message has been the same. It's been monotonous and tiring, so I don't know why you think it's new.

Safe Rust code is safe. You know where unsafe code is, because it's marked as unsafe. Yes, you will need some unsafe code in an notable project, but at least you know where it is. If you don't babysit your unsafe code, you get bad things. Someone didn't do the right thing here and I'm sure there will be a post-mortem and lessons learned.

To be comparable, imagine in C you had to mark potentially UB code with ub{} to compile. Until you get that, Rust is still a clear leader.
by dfxm12 | 2025-12-17 18:58:44+00:00
Reading up on the history of the Unitary Executive Theory may provide some background: https://en.wikipedia.org/wiki/Unitary_executive_theory

In this case, Trump is easily bought and isn't very concerned with governing himself (compared to playing golf or designing ballrooms). With this in mind, even people outside the executive branch, or even the USA are benefiting.
by polalavik | 2025-12-17 18:58:59+00:00
Passkeys need a marketing campaign and UX overhaul.

I’m a technical guy, but I really don’t understand what the fuck is going on when I use a passkey. All I know is one day it appeared as an option and it let me login to things. I don’t really understand where it lives, what device it’s tied to, how scanning a QR code on Google Chrome on my phone magically logs me in, etc etc.

The user was not educated on this. Hacker News is the top 1% of computer power users. You gotta understand to someone’s grandma or mom or brother who works in real estate none of this makes any sense nor will they educate themselves on what it is.
by bigstrat2003 | 2025-12-17 18:59:11+00:00
LLMs are not remotely good enough to use as a learning tool. They still make shit up a ton of the time, and you can only catch it if you already know the material (so, not useful for learning). They probably never will be useful for learning, since even after all this time hallucinations are still just as bad as they ever were.
by dpark | 2025-12-17 18:59:14+00:00
It’s “illegal” in the sense that you could write whatever you want in your will but it wouldn’t be binding. You cannot force a party into a legal obligation they do not agree to.

The government can, though. I’m not sure if there’s any existing laws pertaining to transfer of or access to general accounts after death (as opposed to bank accounts which I’m pretty sure there are laws about).

My will says that my executor can access my accounts which alleviates Apple from legal risk if they do grant access but I’m pretty sure they are not obligated to do so.
by MikeTheGreat | 2025-12-17 18:59:35+00:00
To be fair, making a change (particularly changing a habit) takes time. Having something there to remind and nudge you helps make this easier, especially when you're tired, stressed, 'just looking for a short break', etc, etc.

It's like they say: "Your demons will comfort you when no one else will. That's why it's so hard to get rid of them"
by SkyPuncher | 2025-12-17 18:59:36+00:00
*Some juniors have gotten better.

I hate to be so negative, but one of the biggest problems junior engineers face is that they don't know how to make sense of or prioritize the gluttony of new-to-them information to make decisions. It's not helpful to have an AI reduce the search space because they still can't narrow down the last step effectively (or possibly independently).

There are junior engineers who seem to inherently have this skill. They might still be poor in finding all necessary information, but when they do, they can make the final, critical decision. Now, with AI, they've largely eliminated the search problem so they can focus more on the decision making.

The problem is it's extremely hard to identify who is what type. It's also something that senior level devs have generally figured out.
by graeme | 2025-12-17 18:59:45+00:00
Where this analogy breaks is that at the time (2008), Eich's position had majority support in the US. The proposition he wad funding passed with majority support. Mixed marriages by contrast had overwhelming support in 2008.

Eich didn't suddenly come out against anything in 2014. People dug up his prior funding.

Demanding permanent ostracization for supporting a majority position is fairly anti-democratic. You can beat someone in a process (Eich's side lost) without demanding total victory forever or declaring more than half of a whole society as permanent villains. In 2008 55% of the US opposed gay marriage, 36% supported it.

https://poll.qu.edu/Poll-Release-Legacy?releaseid=1194
by m-schuetz | 2025-12-17 18:59:45+00:00
> WebGPU doesn't talk to the GPU directly. It requires Vulkan/D3D/Metal underneath to actually implement itself.

So does WebGL and it's doing perfectly fine without pipelines. They were never necessary. Since WebGL can do without pipelines, WebGPU can too. Backends can implement via pipelines, or they can go for the modern route and ignore them.

They are an artificial problem that Vulkan created and WebGPU mistakenly adopted, and which are now being phased out. Some devices may refuse to implement pipeline-free drivers, which is okay. I will happily ignore them. Let's move on into the 21st century without that design mistake, and let legacy devices and companies that refuse to adapt die in dignity. But let's not let them hold back everyone else.
by westmeal | 2025-12-17 18:59:56+00:00
In my opinion it's pretty clear dr. Amen was really only there to push a book. He was never really interested in having a real discussion anyway, hes just shilling. If you're going to be pushing a diagnostic method and supplements to solve issues without any proof whatsoever that's a problem. No one should be making statements about the efficacy of a technique without evidence. The fact that he got defensive about it speaks volumes about his character and what he hopes to get away with.
by luckylion | 2025-12-17 19:00:18+00:00
It might just as well have been something that was supposed to sound young and fun ("I don't want to do that") and ends up leaving too much room for interpretation.

If you have the power to do something, saying you might do it but that you don't want to makes people imagine you'd do it. If you have a knife and talk about how you "might stab people, but don't want to", that's a very different message than having a knife and saying "obviously I'm not going to stab people, violence is not an option".

The latter reassures, the former depends heavily on what the recipient of the message thinks of you, and whether they can imagine you stabbing people.

If that quote was accurate, then either he just said something and wanted to wing it, or they should reconsider their communication strategists.
by Marsymars | 2025-12-17 19:00:19+00:00
I was going to make a similar point - the math changes quite a bit if you're a multi-car household - in that case it absolutely makes sense to have at least one vehicle that's a short-range EV.

My household is a newer hybrid Ford Maverick and an older ICE Impreza (that gets worse fuel economy than the Maverick) - if we were replacing the Impreza today we'd probably go for a 2026 Leaf or a used Chevy Bolt.
by physPop | 2025-12-17 19:00:20+00:00
re: your last point that is not true. we can measure arbitrarially quickly (Nottingham group does some 3d EVI at ~100ms TRs). You can also reduce volumes and just look at single slices etc, a lot of the fundamental research did this (wash U / Minnesota / etc in the 90s). Its just not all that useful because the SNR tanks and the underlying neurovascular response is inherently low-pass. There is a much faster 'initial-dip' where the bold signal swings the other way and crosses zero (from localized accumulation of DeoxyHg before the inrush of OxyHg from the vascular response). Its a lot better correlated with LFP / spiking measures but just very hard to measure on non-research scanners...
by vilasa | 2025-12-17 19:00:38+00:00
My favorite Linux layout was US International + AltGr dead keys. Basically a US keyboard, but if you want an accented character, just press the AltGr+Accent key, then the letter.

I got the same behavior on macOS by using https://github.com/carjorvaz/macos-us-altgr-intl/blob/master...
by cyberax | 2025-12-17 19:01:23+00:00
If you _live_ in Neah Bay, you likely use your home charger. There are also slow chargers in nearby hotels for tourists.

If you are traveling, through then you just plan to have enough charge to reach the next charger (50 miles away in Forks).

I know that area well, I travel through it every several months. It also does not have a lot of gas stations, and the existing ones are about $1.5 over the regular price per gallon.
by jmsgwd | 2025-12-17 19:01:42+00:00
Some password managers provide an offline root of trust which family members can use in this scenario. For example, 1Password tells users to print off an "Emergency Kit" which is a physical piece of paper with secret recovery codes printed on it, which they store in one or more safe places. [1]

If someone passes away, their family members can use the Emergency Kit to gain access to and use all their credentials - including their passkeys.

(The Emergency Kit also allows you to recover your data in the event that you forget your master passphrase or lose all your devices.)

[1] https://support.1password.com/emergency-kit/
by pseudalopex | 2025-12-17 19:01:50+00:00
Eich was appointed Mozilla CEO in 2014. Not 2008. 2014 polls said 60% to 70% of Californians supported same sex marriage. Most California voters would not qualify for most jobs in any case. And Eich's 2008 discrimination support mattered less than his 2014 inability to say he wouldn't do it again.
by brailsafe | 2025-12-17 19:02:05+00:00
> I even started making latex halloween masks.

Bit of a tangent: I don't really subscribe to the introvert/extrovert divide personally, but do eventually hit a wall with socializing, and am happy to explicitly isolate myself in my own world or with a smaller group for extended periods of recharge. Unfortunately, I've committed to attending my good friend's costume NYE party, and have betrayed myself somewhat because... I'm just tired of costumes, he's a very theatrical film person and I'm... a web dev, who's just never really had an affinity for dressing up in that way—even less so since it's been a socially packed autumn. I'm considering bailing, but I feel like that would be a bit of a fail.

I think as a nerd, I'd need to make it a challenge and a small hobby like you have, but I also am trying to quit YouTube. Can you picture yourself in my situation? Any tips on finding a seed of interest?
by Sesse__ | 2025-12-17 19:02:26+00:00
In contrast, I found it rather lacking. No discussion of the most common way to sort floats as bytes (shift the sign bit down and XOR the other 31 bits with the resulting masks), nor NaNs and +/-0 for that matter. Varint sorting introduces its own homegrown serialization but doesn't discuss the issue of overlong encodings. Nothing about string collation or Unicode issues in general. Composite data suggests adding NULs, but what if there are NULs in the actual data? (It is briefly mentioned, but only as in “you can't”.)
by jaredcwhite | 2025-12-17 19:02:28+00:00
The level of cynicism here is astronomical. After discovering the strategy of "fire juniors and let a few seniors manage autonomous agents" was an abject failure, now the line is "actually juniors are great because we've brainwashed them into thinking AI is cool and we don't have to pay them so much". Which makes me want to vomit.

The only relevant point here is keeping a talent pipeline going, because well duh. That it even needs to be said like it's some sort of clever revelation is just another indication of the level of stupid our industry is grappling with.

The. Bubble. Cannot. Burst. Soon. Enough!!