MurphyA/hacker-news huggingface dataset:
by giovanella | 2025-12-14 13:59:09+00:00
Hello HN,

I'm the builder behind 0xFeed. Like many of you, I suffer from "Technical FOMO" but I'm tired of filtering through the noise of the "Dead Internet" — SEO spam, shallow tutorials, and generated fluff that floods LinkedIn and generic aggregators.

I built 0xFeed to be a high-precision noise filter for Senior Engineers, CTOs, and Tech Leads.

How it works (The Stack):

Ingestion: It monitors ~30 high-signal engineering blogs (Netflix Tech Blog, Uber, AWS, etc.) via Cloud Functions.

Analysis: Every article is processed by GPT-4o. I wrote a strict system prompt that penalizes clickbait, basic "hello world" tutorials, and PR/hiring announcements. It assigns a "Relevance Score" (0.0 to 10.0) based on technical density.

Delivery: The frontend (React + Vite) hides anything below a certain score threshold by default.

The goal is simple: Reduce 2 hours of daily reading into 5 minutes of high-signal consumption.

It's currently in Open Beta and completely free. I'm looking for brutal feedback on the scoring algorithm and the UX.

The stack is Firebase (Firestore + Functions + Auth), React, Tailwind, and OpenAI.

Link: https://www.0xfeed.dev/

Thanks!
by zbentley | 2025-12-14 13:59:35+00:00
Because the instant I want a dependency, I’m screwed. Half of what I want isn’t on CPAN, and the other half is ten years out of date and requires a compiler toolchain, fifty undocumented build dependencies at nonstandard paths, and five obscure/package-specific environment variables set in order to install. Python? Python either has it in the stdlib or has wheels available for pretty much everything.

Talking super simple stuff here, too: database drivers, markdown formatters, structured data parsers.
by DamonHD | 2025-12-14 13:59:40+00:00
I spent a long time working in finance one way or another, including as a founder/director of a small e-money issuer, and I have at least from this time ASSUMED that gift cards carry a very inflated AML risk.

Plus I have no desire to carry scrip when I could have fungible cash or equivalent, so I would not buy a gift card. I have received a few.
by 9rx | 2025-12-14 13:59:43+00:00
> Let's imagine we are working with some hypothetical language in which what you describe is possible.

Or even a real one. The hypothetical part is that you'd be able to understand it. The languages with complex type systems are complete bears to work with, as I am sure you can image. It isn't just some historical curiosity as to why we prefer to use testing over types to define the contract. It is way more practical. But, no matter how you feel about that, it remains that we do define the contract in tests in the languages people actually use.

> The implementation for that function can also be wrong, in exactly the same way the implementation for the typescript equivalent could be wrong.

The compiler would give you an error if you got the syntax wrong, and in isolation it's fair that you could, say, get the domain name wrong as long as it is syntactically valid. I suppose what I failed to convey, making some assumptions about your understanding of type systems, is that the types would not just specify RFC-compliance. You would also spec out other dependencies such that you also couldn't even provide the wrong domain name without a compiler error. So, no, the implementation of the function couldn't be wrong.

You could mis-spec the contract, of course. Then the function could be "wrong". Maybe this is the intent behind what you are trying to say here. But the idea has always been here that I would also read and accept the contract, so it wouldn't actually be "wrong". It would be exactly what we both expect. My side will be written to what the contact specifies. If you try to deviate from the contract later, you'll face the wrath of the compiler.

As you point out, that's not the case in Typescript. If you try to change the contract (even if by accident) the compiler/typechecker will never say a word. I won't know until my code starts breaking. Your tests are the only thing you have to keep you in line with what we agreed upon. Tests define the contract in its case.
Bird Game 3 – Online trend or marketing genius?
by SergiuNistor | 2025-12-14 13:59:59+00:00
I keep seeing reels related to Bird Game 3 (here's a compilation: https://www.youtube.com/watch?v=KSu1OuTQBfM).

Bird Game 3 is depicted as this old game (~2009 iirc) which used to have lots of players, and cool, engaging multiplayer mechanics, giving you this sense of "second-hand nostalgia". Some reels even claim that the servers have been closed. I rarely play games (maybe once a year), but the reels indeed convinced me to at least look into the game, especially since it is so popular.

However, it turns out Bird Game 3 never existed, and all the videos are AI-generated. There are 3 possibilities: 1. This is just a trend, and people simply keep it going for fun 2. This is a genius market validation/marketing scheme for a game that's about to drop soon 3. All of the above

Curious about your opinions. It might be that this approach is already popular, but I was not aware of it.
by setopt | 2025-12-14 14:00:55+00:00
Yeah we do. For many reasons:

Privacy is privacy. I ideally don’t want any of my data sold to anyone, but health data is even more vulnerable.

In my country it was even a big deal when they allowed different doctors to access your health data via a common system, as there were e.g. concerns that the information recorded by one doctor might bias another doctor, so some felt that it should be your choice what data to share between different parts of the public health system (except for explicit referrals).

Moreover, most European countries do have private doctors, private hospitals, and private health insurance – it’s just way less used than the public system. Those would have the same concerns as in the US.
by A_D_E_P_T | 2025-12-14 14:01:12+00:00
Kimi K2 is a really weird model, just in general.

It's not nearly as smart as Opus 4.5 or 5.2-Pro or whatever, but it has a very distinct writing style and also a much more direct "interpersonal" style. As a writer of very-short-form stuff like emails, it's probably the best model available right now. As a chatbot, it's the only one that seems to really relish calling you out on mistakes or nonsense, and it doesn't hesitate to be blunt with you.

I get the feeling that it was trained very differently from the other models, which makes it situationally useful even if it's not very good for data analysis or working through complex questions. For instance, as it's both a good prose stylist and very direct/blunt, it's an extremely good editor.

I like it enough that I actually pay for a Kimi subscription.
by christophilus | 2025-12-14 14:02:05+00:00
So, they have inside knowledge about how dangerous we can be?

If I was in charge of any nation, I would want sovereignty over critical technology. I’d be suspicious of the US, China, Europe, Israel, etc. Even though some of those are my allies, I still would want to keep them firmly in their own borders and have critical production and knowledge within my own country.

The Trump administration has caused a lot of countries to question their reliance on the US, but the reality is, they should have always questioned that.
by VonGuard | 2025-12-14 14:02:29+00:00
2007, my employer is a magazine. I demand a blog. They decide to write one from scratch in .NET because we are a software magazine. 2010, said CMS is retired for Hubspot. Or maybe that happened later. Either way, to make me happy to have Hubspot is a feat. Also a great business angle for Hubspot: write your own shitty CMS? Welcome! And again, either way, 2017, bankruptcy. All money spent on CMS from inception to retirement could have been abated by a WordPress subscription. Definitely way above 6 figures lost. Coulda kept us alive for a few more years, anyway.
by Kim_Bruning | 2025-12-14 14:02:35+00:00
Kimi K2 is a very impressive model! It's particularly un-obsequious, which makes it useful for actually checking your reasoning on things.

Some especially older ChatGPT models will tell you that everything you say is fantastic and great. Kimi -on the other hand- doesn't mind taking a detour to question your intelligence and likely your entire ancestry if you ask it to be brutal.
by yolkedgeek | 2025-12-14 14:03:49+00:00
I don't know how to do what you are describing, but right now, the drawing is OK. it's not instantaneous but good enough for me, not creating artworks. just doodles and scribbles. I just don't look at the tablet screen for drawing. I only use it as an input because the refresh rate is low for this. but the VNC latency itself is not annoying (I would guesstimate ~0.2s), although I think there are ways to make VNC latency less.
by themgt | 2025-12-14 14:04:00+00:00
Overall I like Dagger conceptually, but I wish they'd start focusing more on API stability and documentation (tbf it's not v1.0). v0.19 broke our Dockerfile builds and I don't feel like figuring out the new syntax atm. Having to commit dev time to the upgrade treadmill to keep CI/CD working was not the dream.

re: the cloud specifically see these GitHub issues:

https://github.com/dagger/dagger/issues/6486

https://github.com/dagger/dagger/issues/8004

Basically if you want consistently fast cached builds it's a PITA and/or not possible without the cloud product, depending on how you set things up. We do run it self-hosted though, YMMV.
by ben_w | 2025-12-14 14:04:53+00:00
> Batteries are probably going to kill long-range transmission lines and open up remote generation at a scale never thought possible.

Not at current power densities.

The bandwidth of a station wagon filled with hard drives is quite high; the power delivery of station wagon filled with batteries is on the low side compared to a wire made from the same material as that station wagon and buried under the road the wagon would have been driving along.

Even for liquid and gas fuels, people make dedicated pipelines rather than doing it all by truck and train.

Now, if someone figures out how to get something like metastable pumped hafnium isomers working… https://en.wikipedia.org/wiki/Hafnium_controversy
by acmerfight | 2025-12-14 14:04:57+00:00
Cloudflare’s dual 2025 outages weren't just about a missed Lua nil-check or a sloppy Rust unwrap(). They were the inevitable cost of "hotwiring" production to bypass ancient, broken test harnesses during a security panic.

This article argues that Cloudflare's "Homogeneous Edge" architecture—where every node runs every service for extreme efficiency—has created an infinite failure domain. When commercial constraints demand tight coupling and zero physical isolation, a single "Killswitch" logic error doesn't just fail safe; it becomes a global detonator. A deep dive into how technical debt and architectural gambling eventually cash their checks.
by Fnoord | 2025-12-14 14:06:00+00:00
I mean, of course? This is why I opposed electronic health record ( EPD (elektronisch patiëntendossier)) back in the days. Even then, SSL (TLS) downgrade attack existed and was known to NSA. IIRC EPD was started as opt-in, then opt-out, then mandatory.

I received my daughter's ASD diagnosis via Zivver. This included very personal details about her life. No parent would want that to be public. For adults it is worse: they become vulnerable to extortion, and Mossad is known to go very far for the cause.
by patapong | 2025-12-14 14:06:12+00:00
I would expect that most apps generated today contain at least some Ai generated code, whether through chat completion or agentic use. But, I think such tools currently mostly support people who already are able to create apps.

As others have said, I think a lot of the difficulty in creating an app lies in making the numerous choices to make the app function, not necessarily in coding. You need "taste" and the ability to push through uncertainty and complexity, which are orthogonal to using Ai in many cases.
by yolkedgeek | 2025-12-14 14:06:45+00:00
Well this is no replacement for them! The monitors you mention are from 700$ (Dasung 13k is 750USD currently) up to 2000USD. This is an old tablet you maybe have lying around or can get for 200USD maybe?

And this is more than a monitor. the VNC provides you with an interface. you can use your tablet as the input device. and it's also portable.
by eggfriedrice | 2025-12-14 14:06:49+00:00
This was a really interesting read! Back in the day a friend and I started a company and Kickstartered a RPi add-on. The kickstarter campaign failed, but we ended up building anyway after one of the silicon manufacturers spotted the project and provided some FoC devices which changed the economics.

We spent oodles of time on it, learned lots, build a fairly simple product but ended up selling it through some of the bigger RPi retailers. It was all an excellent learning experience, and ignoring our time we made about 50p out of the entire batch of a thousand. Factor in our time and it was a complete financial disaster, but we were young and carefree and had fun doing it!
by dtgriscom | 2025-12-14 14:08:09+00:00
"Nanosensors" is useless technobabble. But I bet you could do it by carefully monitoring the rocking of the iceberg in waves. Watch the period of the berg's movements; as the melting brings it closer to instability, the period would get longer and longer, which could give you some warning. (You couldn't predict the consequence of some portion breaking off, but it might give you something.)
by jfifjxneodkf72 | 2025-12-14 14:08:34+00:00
Really HN? Kiteworks was founded by some swedish dude[1] and most of the execs aren't Israeli[2]. Trying to portray this as some secret mossad company is beyond nonsense.

Should there be scrutiny when sensitive data is being sold off? Of course but this article is extremely low quality, with zero evidence and just based on vibes with a nice dose of antisemitism (and no I don't use that term lightly)

As if cyber security experts running a cyber security company is somehow shocking.

[1]https://en.wikipedia.org/wiki/Kiteworks [2]https://www.kiteworks.com/company/management/
by ThailandJohn | 2025-12-14 14:08:34+00:00
Hi HN, OP here.

I’m a former Enterprise Systems Architect (Cisco/VMware) turned "vibe coder." I realized quickly that AI coding is dangerous because LLMs lack *context* and *verification*. They hallucinate because they are guessing at the file structure.

So, out of pure spite for flaky tools, I built *TheAuditor*.

*The Concept:* Instead of grepping files, I index the entire repo (Python, TS, Go, Rust, Terraform, CDK) into a local SQLite database (~180MB for a mid-sized repo). Because the code is in a DB, I can query the call graph like SQL.

*The Tech (The "Hard" Part):* I needed a way to trace data flow through the infrastructure to prevent the AI from introducing vulnerabilities. I ended up building a *Hybrid Taint Engine* that extends the Oracle Labs (2021) IFDS research: 1. *Forward Flow:* Traces entry points to reachable sinks to prune the graph. 2. *Backward IFDS:* Runs a precise "Interprocedural Finite Distributive Subset" analysis on the pruned graph. 3. *The Handshake:* We only report vulnerabilities where both engines intersect.

*The "Systems Architect" approach:* Coming from a background in critical infrastructure, I hate silent failures. I implemented a *5-Layer Fidelity System*. Every parser emits a cryptographic manifest. If the DB storage receipt doesn't match the manifest (transaction mismatch or data loss), the tool hard-crashes. I'd rather a stack trace than a false negative.

*Why I built it:* I use this as a "Flight Computer" for my AI agent. * Before refactoring, it runs `aud impact` to calculate the blast radius. * Before writing code, it runs `aud explain` to get a token-optimized context bundle of definitions.

This is v2 (a complete rewrite after 800 commits). I learned a lot since my first attempt. The code is open source (AGPL).

Happy to answer questions about the SQLite schema or the IFDS implementation.
by masklinn | 2025-12-14 14:09:01+00:00
And yet it does: https://godbolt.org/z/h9GW5v3YK

And creates an on-stack slice whose size is only limited by Go's 1GB limit on individual stack frames: https://godbolt.org/z/rKzo8jre6 https://godbolt.org/z/don99e9cn
by stingraycharles | 2025-12-14 14:09:47+00:00
> As a chatbot, it's the only one that seems to really relish calling you out on mistakes or nonsense, and it doesn't hesitate to be blunt with you.

My experience is that Sonnet 4.5 does this a lot as well, but this is more often than not due to a lack of full context, eg accusing the user of not doing X or Y when it just wasn’t told that was already done, and proceeding to apologize.

How is Kimi K2 in this regard?

Isn’t “instruction following” the most important thing you’d want out of a model in general, and a model pushing back more likely than not being wrong?
by watwut | 2025-12-14 14:09:52+00:00
I sometimes take pleasure at reading old language ... and still think that giving it to kids as introduction to reading is absurd.

If they read 10 interesting books a year adding one like that to the mix or offer them the option is great. If they did not encountered interesting bool after agw of 7 when parents stopped reading them, no.

And interesting books for kids are there. Plenty of them of all kind, including pure action/adventure stuff. Including those related to movies or games they play. It is not lack of resources.
by anonym29 | 2025-12-14 14:09:59+00:00
You're kidding, right? Boca Raton, FL has been widely recognized as the spam capital of the world for decades, and has nothing to do with ethnicity or religion whatsoever. Eastern Europe is known for being a den of cybercrime groups, and Russia is known to turn a blind eye. China is widely known to cooperate with domestic cybercriminal actors. Non-jewish geographically concentrated threat actors are openly discussed all the time.

The difference is that none of these places operate as legal safe havens for child sex predators.
by hermanzegerman | 2025-12-14 14:11:55+00:00
I've never seen Zivver used in German Healthcare.

Also Germany uses and is already Rolling out a Matrix-based Messenger and S/MIME-Mail with End-to-End-Encryption for Communication between Healthcare Professionals.

So at least for Germany this is not a problem.

More problematic was our prior health Minister who wanted to make data accessibile to OpenAI et al for "research". That's also why I opted out of the electronic health record

https://www.heise.de/news/Lauterbach-zu-Gesundheitsdaten-Goo...
by cxr | 2025-12-14 14:13:01+00:00
I wouldn't call either of these tools that either. Using View Source reveals that there's a pretty obvious build step and confronts you with massive minified blobs. There's no way a person is going to be able open that HTML as a "single file" in their text editor to pick up development where it was left off. (In that regard, the HTML tools in the linked post are closer to the definition, even when they're written to load a module from a CDN.)
by watwut | 2025-12-14 14:13:17+00:00
> How do you write if not in cursive?

I write with mix of cursive and sorta print letters. The sorta print letters are more readable, actually.

Based on what teachers said, kids use cursive while they are forced to and switch to sorta print when they can. But everyone invents their own "font", so it is a challenge to decipher them.
by KellyCriterion | 2025-12-14 14:13:20+00:00
Its not productivity boosting in a sense of "you can leave 2h earlier", but in a sense of "you get more done faster", resulting in more stuff created. Thats my general assumption/approach for "using AI to code".

When it comes to "AI-generated apps" that work out of the box, I do not believe in them - I think for creating a "complete" app, the tools are not good enough (yet?). Context & co is required, esp. for larger apps and to connect the building blocks - I do not think there will be any remarkable apps coming out of such a process.

I see the AI tools just as a junior developer who will create datastructures, functions, etc. when I instruct it to do so: It attends in code creation & optimization, but not in "complete app architecture" (maybe as sparring partner)
by Findecanor | 2025-12-14 14:15:22+00:00
Fil-C has like one "linear memory" per object and each capability gives read/write access to the whole object.

But Fil-C has its compiler which does analysis passes for eliding bounds-checks where they are not needed, and I think it could theoretically do a better job at that than a WASM compiler with multi-memories, because C source code could contain more information. Unlike WASM, but like CHERI, every pointer in memory is also tagged, and would lose its pointer status if overwritten by an integer, so it is still more memory-safe in that way.
by stingraycharles | 2025-12-14 14:15:32+00:00
I don’t think it will ever make sense; you can buy so much cloud based usage for this type of price.

From my perspective, the biggest problem is that I am just not going to be using it 24/7. Which means I’m not getting nearly as much value out of it as the cloud based vendors do from their hardware.

Last but not least, if I want to run queries against open source models, I prefer to use a provider like Groq or Cerebras as it’s extremely convenient to have the query results nearly instantly.
by KronisLV | 2025-12-14 14:15:45+00:00
During the announcement of the tariffs and the subsequent period, pretty much everything I had invested dropped across the board: https://blog.kronis.dev/user/pages/blog/my-investments-in-20...

(I was doing an experiment of putting 1k into a bunch of stocks each through Revolut instead of my usual bank funds and seeing how they do after a year)

Yet it recovered afterwards. I’m certain that some transfer of wealth took place there, with at least some people panic selling.
by jwr | 2025-12-14 14:16:01+00:00
Let's take an example: if there are several images, you click on the "next" button (keys do not work!) several times, and if you are not careful, the last click gets you a full-screen image, because the button has disappeared and clicking in the same place now magnifies the image.

How is that "fine".

In the mobile app, even swiping from the left edge to go back doesn't work reliably.
by ParanoidShroom | 2025-12-14 14:16:01+00:00
Can people spot them?

https://countrx.app/ is something I vibed in a month. Can people here tell? Sure the typical gradiënt page is something to spot, but native apps i think are harder. I would love to see app store and Google Play Store stats to see how many new apps are onboarded.

Looking at distribution channels like Google Play, they added significant harder thresholds to be able to publish an app to reduce low quality new apps. Presumably due to gen ai?

Edit: Jesus guys, the point I'm trying to make is that there are probably a lot more out there that are not visible... Im not claiming i developed the holy grail vibe coding.
by pdimitar | 2025-12-14 14:16:30+00:00
Generalizations don't help almost any discussion. Even if that's 100% of what you ever saw, many people have seen mixed (or entirely in the other extreme).

> In every monolith, people violate separation of concerns and things are tightly coupled. I have only ever seen good engineering velocity happen when teams are decoupled from one another. I have only seen this happen in a (micro) service architecture.

I would write this off as indifferent or incompetent tech leadership. Even languages that people call obscure -- like Elixir that I mostly work with -- have excellent libraries and tools that can help you draw enforceable boundaries. Put that in CI or even in pre-commit hook. Job done.

Why was that never done?

Of course people will default to the easier route. It's on tech leadership to keep them to higher standards.