MurphyA/hacker-news huggingface dataset:
by magicalhippo | 2025-12-20 17:26:59+00:00
This can be difficult or just not possible.

What is possible is to include as much information about what the system was trying to do. If there's an file IO error, include the the full path name. Saying "file not found" without saying which file was not found infuriates me like few other things.

If some required configuration option is not defined, include the name of the configuration option and from where it tried to find said configuration (config files, environment, registry etc). And include the detailed error message from the underlying system if any.

Regular users won't have a clue how to deal with most errors anyway, but by including details at least someone with some system knowledge has a chance of figuring out how to fix or work around the issue.
by epistasis | 2025-12-20 17:27:28+00:00
Based on the headline, I was guessing it was any amount of positivity, and may be close to the population level, but it's actually impairment levels of THC:

> In a review of 246 deceased drivers, 41.9% tested positive for active THC in their blood, with an average level of 30.7 ng/mL — far exceeding most state impairment limits.

Since COVID in CA, it feels like driving has become far more dangerous with much more lawlessness regarding excessive speeding and running red lights, going into the left lane to turn right in front of stopped cars, all sorts of weird things. But I can't tell if my anecdotes are significant. It seems that Ohio's impaired drivers have been consistent through the past six years though.
by reactordev | 2025-12-20 17:27:49+00:00
Your browser knows more about you than you do. When accessing a website, anonymous or not, it sends a fingerprint so to speak to that site and its ad network. It’s there that your anonymity ceases and you are identified, classified, segmented, and fed more “How to stay safe online” ads. There’s no escaping it. Chromium is not to be trusted.
by riedel | 2025-12-20 17:27:58+00:00
Working in a university Lab self-hosting is the default for almost anything. While I would agree that cost are quite low, I sometimes would be really happy to throw money at problems to make them go away. Without having the chance and thus being no expert, I really see the opportunity of scaling (up and down) quickly in the cloud. We ran a postgres database of a few 100 GB with multiple read replica and we managed somehow, but actually really hit our limits of expertise at some point. At some point we stopped migrating to newer database schemas because it was just such a hassle keeping availability. If I had the money as company, I guess I would have paid for a hosted solution.
Show HN: A PostHog SDK-Compatible Ingestion API for Cloudflare Workers in Rust
by nicoritschel | 2025-12-20 17:28:34+00:00
While I love the Posthog product (that has grown substantially in features the past few years) it's nearly impossible to self-host.

The stack is comprised of 3 web services, 5 background services, the temporal stack, Postgres, Redis x 2, Kafka, Zookeeper & ElasticSearch.

Most of ue really only care about the events coming from the SDK at a reasonable price, forget session replay and other nice to haves.

So I built an equivalent of their ingestion layer on Cloudfalre Workers in Rust. It publishes events to a Cloudflare Pipeline that lands the events in R2 Data Catalog.

Happy eventing!
Vercel for Desktop Apps?
by vicdotso | 2025-12-20 17:28:57+00:00
Desktop CI/CD and end-to-end testing feels unreasonably chaotic compared to web/server workflows.

For web, I run `vercel` or `next build` locally and I'm done. For desktop apps (Swift, Electron, Tauri, GPUI), I'm juggling different platforms, manually configuring runners for each OS/architecture combination, and constantly context-switching between my IDE and various web dashboards.

Why isn't there a CLI where I can just run something like `build --matrix=macos-arm,windows-x64,linux` from my terminal? Or a platform that auto-detects the project type the way Vercel detects Next.js? Custom Docker images and proper caching seem table-stakes for web CI but rare for desktop.

Am I missing something obvious? What are people using for this?
by ndsipa_pomu | 2025-12-20 17:28:57+00:00
Surely the "I never tell anyone my pin" is just an admission that they do have something to hide?

The point is that there are many things that should be kept private/secret and often the need for that secrecy isn't obvious to people who have never been in particular situations. A woman trying to escape from an abusive relationship may need to keep her location secret to avoid being murdered by her ex, but your typical white male who declares "nothing to hide" may have difficulty in understanding that, whereas they may be able to grasp why their PIN should be kept secret.
by piker | 2025-12-20 17:29:06+00:00
The second example has nothing to do with the first. I am optimistic that LLMs are great for translations with good testing frameworks.

“Optimize” in a vacuum is a tarpit for an LLM agent today, in my view. The Google case is interesting but 1% while significant at Google scale doesn’t move the needle much in terms of statistical significance. It would be more interesting to see the exact operation and the speed up achieved relative to the prior version. But it’s data contrary to my view for sure. The cynic also notes that Google is in the LLM hype game now, too.
by satvikpendem | 2025-12-20 17:29:08+00:00
What is it with commenters in this thread and wanting to "reliably scan one line at a time?" When users use image galleries, they generally do jump around because they're looking at all the options on screen all at once. The eyes absorb everything and then they pinpoint what looks good. I've never seen or heard anyone go line by line in an image gallery or a newspaper layout and doing so I'd find to be highly abnormal to average users.
by skydhash | 2025-12-20 17:29:16+00:00
You're on the internet, you can make whatever claims you want. But even with no sources or experimental data, you can always add some rational logic to add weight to your claims.

> They're undeniably useful in software development

> I've fixed countless bugs in a tiny fraction of the time

> I get the most reliable results

> This works extremely well and reliably in producing high quality results.

If there's one common thing in comments that seems to be astroturfing for LLM usage, it's that they use lots of superlative adjectives in just one paragraphs.
by ndriscoll | 2025-12-20 17:29:18+00:00
At least when I was in school 15 years ago (math/engineering), a non- or partially-funded (including living stipend) grad school "acceptance" in the US was understood by all of my peers to be a rejection. I saw a post on reddit a few years ago saying that's still true and is in fact also true in the humanities (with an assumed TA role). Is that not accurate? Why are people going into debt for grad school? Did no one tell them you're not supposed to pay for it? Are they just unwilling to accept they were rejected?
by nephanth | 2025-12-20 17:29:48+00:00
The EU in its current form is mostly about markets. It routinely pushes for the sacrifice of government monopolies to the altar of the free market (see for a recent example the french train network). Most of its regulations are to ensure a level field for a balanced market.

Hell it pushes for free markets even when it makes very little sense (the eu electricity market and its weird idiosyncrasies are an artifact of that)

It basically bans member governments from printing money and imposes very strict limits of 3% GDP on government deficits. For reference the US deficit was 5.9% gdp this year, Almost twice as much. this greatly limits government control over the economy.
by tavavex | 2025-12-20 17:29:51+00:00
That's one hell of a long shot. Are your views applicable to the rest of the entertainment industry? There's plenty of people wasting away in front on Netflix, after all. Or why just entertainment, any "useless" hobbies that are repeatedly done for fun but have no real productive output. Is any comparable "pleasurable" activity that also hooks a minority of people in an unhealthy way bad, or just gaming?

But what's most insane is trying to draw any parallels between gaming and these other things - something that was literally engineered to ruin human lives, biologically (hard drugs) or psychologically (gambling). The harm and evil caused by these two industries is incomprehensible (especially the legal parts of them, like alcohol and casino gambling/sports betting/online gambling), and trying to fit gaming in among them both downplays the amount of suffering inflicted by gambling and hard drugs, as well as villainizes normal people - like the hundreds of millions of people who play games in a sane, non-problematic way or indie game devs who make games because they want to express themselves artistically.

Anyways, I gotta log off HN for a while. I can feel my gaming withdrawal kicking in. I've bankrupted myself four times by only spending my money on gaming, and I've been in and out of rehab centres and ERs as I've been slowly destroying my body with gaming in a spiral of deadly addiction. I think I'll have to panhandle and threaten strangers on the street to buy some Steam cards.
Show HN: BlamelessPostmortem – Exec-safe incident postmortems from raw notes
by jabelburns | 2025-12-20 17:29:55+00:00
Hi HN,

I built BlamelessPostmortem after getting tired of post-incident writeups turning into political documents instead of learning tools.

After incidents, teams usually have: - chat logs - timelines - scattered notes

Turning that into a clean, executive-safe postmortem takes time and careful wording, especially if you’re trying to keep things blameless and system-focused.

BlamelessPostmortem takes raw incident notes and generates a structured postmortem with: - Executive summary - Impact - Timeline - Blameless root cause - Action items

You can regenerate individual sections, export everything as Markdown, and copy the full document into tools like Confluence, Notion, or Docs.

There’s a small free tier, then it’s $29/month if it’s useful. I built it as a solo project and wanted to see if this solves a real pain for other engineers.

I’d love feedback on: - Whether the output matches how you write postmortems - Where the language feels off or too generic - What would make this trustworthy enough to use after a real incident

Happy to answer questions or explain how it works.
by lbrito | 2025-12-20 17:29:59+00:00
I'm probably just an idiot, but I ran unmanaged postgres on Fly.io, which is basically self hosting on a vm, and it wasn't fun.

I did this for just under two years, and I've lost count of how many times one or more of the nodes went down and I had to manually deregister it from the cluster with repmgr, clone a new vm and promote a healthy node to primary. I ended up writing an internal wiki page with the steps. I never got it: if one of the purposes of clusters is having higher availability, why did repmgr not handle zombie primaries?

Again, I'm probably just an idiot out of my depth with this. And I probably didn't need a cluster anyway, although with the nodes failing like they did, I didn't feel comfortable moving to a single node setup as well.

I eventually switched to managed postgres, and it's amazing being able to file a sev1 for someone else to handle when things go down, instead of the responsibility being on me.
by 3eb7988a1663 | 2025-12-20 17:30:11+00:00
Wish the paper were available - would love to know the percentage with alcohol.

The other question I have - my prior is that a bad driver (tired, drunk, high) is something like 70:30 odds of killing themselves vs some innocent bystander dying because of their actions. I have anecdotally heard of several sad tales where some guy is on his Nth DUI and kills an entire family, while he walks away from the accident without a scratch. Meaning are the rates of fatalities involving THC actually higher, but the detectably inebriated person managed to walk away without dying.
by gldrk | 2025-12-20 17:30:15+00:00
It's absolutely possible to be mistaken about this. The placebo effect is very strong. I'm sure there are countless things in my own workflow that feel like a huge boon to me while being a wash at best in reality. The classic keyboard vs. mouse study comes to mind: https://news.ycombinator.com/item?id=2657135

This is why it's so important to have data. So far I have not seen any evidence of a 'Cambrian explosion' or 'industrial revolution' in software.
by eterm | 2025-12-20 17:30:16+00:00
How I'd personally like to treat them:

- Critical / Fatal: Unrecoverable without human intervention, someone needs to get out of bed, now. - Error : Recoverable without human intervention, but not without data / state loss. Must be fixed asap. An assumption didn't hold. - Warning: Recoverable without intervention. Must have an issue created and prioritised. ( If business as usual, this could be downgrading to INFO. )

The main difference therefore between error and warning is, "We didn't think this could happen" vs "We thought this might happen".

So for example, a failure to parse JSON might be an error if you're responsible for generating that serialisation, but might be a warning if you're not.
by shogotoda | 2025-12-20 17:30:19+00:00
I am sharing ESC (Erasable Secret Container). It’s a next-gen security model where secrets are treated as consumable resources that autonomously erase themselves upon observation.

Key Technical Highlights:

・Formal Verification: Verified with TLA+, exploring over 190 million states. The log on page 1 records the moment the model's theoretical infinity actually surpassed the trace length limits of the TLC checker.

・High-Reliability Implementation: Built using SPARK/Ada to ensure formal correctness and memory safety.

・The Philosophy: The safest secret is the one that does not exist. If information no longer exists, it cannot be leaked.

I'd love to hear the community's thoughts on this observed-then-erased paradigm.
by wavemode | 2025-12-20 17:30:22+00:00
A stable vector generally improves append performance (because you never have to move the data), allows storing data that can't be moved, and allows for appending while iterating. The downside is slightly worse performance for random lookups (since the data is fragmented across multiple segments) and higher memory usage (depending on implementation).

This "semistable" vector appears to only do the "allow appending while iterating" part, but still maintains a contiguous buffer by periodically moving its contents.
by tokai | 2025-12-20 17:30:30+00:00
An issue with having the legal limit at ~2-5ng/ml is that it makes habitual users be over the limit if they have smoked recently or not.[0] Making the prohibition seem unserious to some, not about safety but about punitive control, and in turn making it matter less if you smoke and drive as you are taking the risk of getting into trouble in any case.

The impairments of driving under the influence of alcohol have been extensively studied, but unless I have overlooked the literature it seems that the same investigations have not been carried out with THC.

[0] «Blood THC >2 ng/mL, and possibly even THC >5 ng/mL, does not necessarily represent recent use of cannabis in frequent cannabis users.»; https://www.sciencedirect.com/science/article/abs/pii/S03768...
by mittermayr | 2025-12-20 17:30:30+00:00
Self-hosting is more a question of responsibility I'd say. I am running a couple of SaaS products and self-host at much better performance at a fraction of the cost of running this on AWS. It's amazing and it works perfectly fine.

For client projects, however, I always try and sell them on paying the AWS fees, simply because it shifts the responsibility of the hardware being "up" to someone else. It does not inherently solve the downtime problem, but it allows me to say, "we'll have to wait until they've sorted this out, Ikea and Disney are down, too."

Doesn't always work like that and isn't always a tried-and-true excuse, but generally lets me sleep much better at night.

With limited budgets, however, it's hard to accept the cost of RDS (and we're talking with at least one staging environment) when comparing it to a very tight 3-node Galera cluster running on Hetzner at barely a couple of bucks a month.

Or Cloudflare, titan at the front, being down again today and the past two days (intermittently) after also being down a few weeks ago and earlier this year as well. Also had SQS queues time out several times this week, they picked up again shortly, but it's not like those things ...never happen on managed environments. They happen quite a bit.
by kube-system | 2025-12-20 17:30:48+00:00
Nobody is being prosecuted on the basis of blockchain analysis data alone -- what I mean is that the data is good enough that that it provides information valuable enough to find the criminal in meatspace with the related physical evidence.

e.g. police look for online drug dealer with blockchain data, get warrant, bust down door, find big pile of drugs.

The point being, the data might not be "proof" on its own but it absolutely illustrates that there is no privacy on public ledgers.
by kijin | 2025-12-20 17:31:15+00:00
Yes, mix-and-match is the way to go, depending on what kind of skills are available in your team. I wouldn't touch a mail server with a 10-foot pole, but I'll happily self-manage certain daemons that I'm comfortable with.

Just be careful not to accept more complexity just because it is available, which is what the AWS evangelists often try to sell. After all, we should always make an informed decision when adding a new dependency, whether in code or in infrastructure.
by satvikpendem | 2025-12-20 17:31:17+00:00
The screen is infinite but information should still be prioritized, that is why newspapers use different sizes of headings. If they truly wanted to jam everything in there, they'd use the same small font size and save on paper, but that's not what people like because they want to see at a glance what is important and what's not, and that's done by the font size initially. This is no different on an infinite screen, the design principle of information prioritization still holds.
by recvonline | 2025-12-20 17:31:44+00:00
Same here! I built around 6 side projects this year! One literally in 1h which now serves my little community I living in (<5k people) everyday.

A fun side effects I got from this: Now I can see my ideas fully fleshed out, and realised that, a), most of these ideas are stupid and better solved by existing solutions , or b), that the code was never the problem but tweaking the UI or user facing part to really hone in the problem I am trying to solve!
by epistasis | 2025-12-20 17:31:52+00:00
> “An average level of 30.7 ng/mL generally means those people must have consumed marijuana at some time close to driving. This isn’t about residual use; it’s about recent consumption.”

If we are at 40% of the population being high at any given moment I think we are having extremely serious societal problems around mental health. Occasional use is not a big deal IMHO, but if a person is spending 40% of waking hours impaired that person has some serious unmet psychological needs.
Show HN: OpenAuditKit – Offline, Python-native security scanner
by Tunti35 | 2025-12-20 17:31:57+00:00
Hi HN,

I built OpenAuditKit after repeatedly running into leaked secrets and misconfigured Docker/.env files in small Python projects.

Existing tools worked well but often felt too heavy, cloud-dependent, or hard to extend.

OpenAuditKit is an offline-first, Python-native CLI tool that scans codebases for secrets and configuration risks. It uses regex + entropy checks, YAML-based community rules, and produces both human-friendly and CI-friendly reports.

It’s fully open-source and designed with a clean core that could later power an API or dashboard.

Feedback, criticism, and ideas are very welcome.

github.com/neuralforgeone/OpenAuditKit
by xg15 | 2025-12-20 17:32:23+00:00
Yes, but if the constraints only permit a single valid token anyway for some positions, you could skip the forward pass entirely for those positions and just return that token.

The other idea was a bit more theoretical: If you know only a handful tokens are valid, then calculating the logits of the other tokens in the forward pass is wasteful as they won't affect the sampling process. However, it's probably not worthe the cost to optimize that as it only affects the last layer and might be mostly amortized by SIMD parallel processing anyway.
by colonCapitalDee | 2025-12-20 17:32:43+00:00
Before the first loop iteration, the harness sends a message to the LLM along the lines of.

<Skills>

<Skill> <Name>postgres</Name> <Description>Directions on how to query the pre-prod postgres db</Description> <File>skills/postgres.md</File> </Skill>

</Skills>

The harness then may periodically resend this notification so that the LLM doesn't "forget" that skills are available. Because the notification is only name + description + file, this is cheap r.e tokens. The harness's ability to tell the LLM "IMPORTANT: this is a skill, so pay attention and use it when appropriate" and then periodically remind them of this is what differentiates a proper Anthropic-style skill from just sticking "If you need to do postgres stuff, read skills/postgres.md" in AGENTS.md. Just how valuable is this? Not sure. I suspect that a sufficiently smart LLM won't need the special skill infrastructure.

(Note that skill name is not technically required, it's just a vanity / convenience thing).
by Benjammer | 2025-12-20 17:32:45+00:00
>Since COVID in CA, it feels like driving has become far more dangerous with much more lawlessness regarding excessive speeding and running red lights, going into the left lane to turn right in front of stopped cars, all sorts of weird things

NYC has had the same effect since COVID, and over the last year or two it's gotten to the point where every single light at every busy intersection in Manhattan you get 2-3 cars speeding through the red light right after it turns. I bike ride a lot so I'm looking around at drivers a lot, and for the most part the crazy drivers seem to be private citizens in personal cars, not Uber or commercial/industrial drivers.
by NitpickLawyer | 2025-12-20 17:33:31+00:00
It would be trivial to create something like this but there are a few major problems with running such a platform that I think makes it not worth while for anyone (maybe some providers will try it, but it's still tough).

- you will be getting a TON of spam. Just look at all the MCP folks, and how they're spamming everywhere with their claude-vibed mcp implementation over something trivial.

- the security implications are enormous. You'd need a way to vet stuff, moderate, keep track of things and so on. This only compounds with more traffic, so it'd probably be untenable really fast.

- there's probably 0 money in this. So you'd have to put a lot of work in maintaining a platform that attracts a lot of abuse/spam/prompt kiddies, while getting nothing in return. This might make sense to do for some companies that can justify this cost, but at that point, you'd be wondering what's in it for them. And what control do they exert on moderation/curation, etc.

I think the best we'll get in this space is from "trusted" entities (i.e. recognised coders / personalities / etc), from companies themselves (having skills in repos for known frameworks might be a thing, like it is with agents.md), and maybe from the token providers themselves.
by ninkendo | 2025-12-20 17:33:36+00:00
At $WORK we’ve been using the Zalando Postgres kubernetes operator to great success: https://github.com/zalando/postgres-operator

As someone who has operated Postgres clusters for over a decade before k8s was even a thing, I fully recommend just using a Postgres operator like this one and moving on. The out of box config is sane, it’s easy to override things, and failover/etc has been working flawlessly for years. It’s just the right line between total DIY and the simplicity of having a hosted solution. Postgres is solved, next problem.