MurphyA/hacker-news huggingface dataset:
by SchemaLoad | 2025-12-19 03:29:51+00:00
Yep, who cares. You put your 2 cent in and if the business leaders see otherwise, that's their problem. You get paid on a schedule, if the app crashes and burns because the leaders demanded to remove PR reviews, that's not your problem.

Too often I see developers getting personally invested in business outcomes which they don't have a stake in. Getting frustrated when they don't have the final say.
by zhivota | 2025-12-19 03:29:55+00:00
The problem is lack of information at time of purchase, in both cases. It's so onerous to figure out what these products are doing that people give up. Same in the airline case. If any of the airlines actually provided better service at a higher price, they'd have a market, but it's impossible to assess that as an end user with all the fake review bullshit that's all over the Internet these days.

The only cases where it's clearcut are a few overseas airlines like Singapore Airline who have such a rock solid reputation for great service that people will book them even if the price is 2x.
by johnnyanmac | 2025-12-19 03:29:57+00:00
>If you don't like AI you need to seek legislation and pressure your local politicians. It's the only way to stop it.

Yup. So we're screwed for up to 3 years. Maybe much less depending on nature or the result of certain hot topic issues.

That might be a minor factor why we seem to be speedrunning everything in 2025. Get ahead of the crash, of the legislation, of the wool coming off the common citizen's eyes.
by danpalmer | 2025-12-19 03:30:16+00:00
This is exactly my point. Scrapers typically don't store cookies, so every single request is likely to be a "new" user as far as the forum software is concerned.

Couple that with 15 minute session times, and that could just be one entity scraping the forum at 30 requests per second. One scraper going moderately fast sounds far less bad than 29000 bots.

It still sounds excessive for a niche site, but I'd guess this is sporadic, or that the forum software has a page structure that traps scrapers accidentally, quite easy to do.
by varenc | 2025-12-19 03:30:21+00:00
This is a great example of why a Content-Security-Policy (CSP Header) should be considered mandatory for high risk sites. With it you can effectively tell the browser what JS is allowed to run, meaning that any JS injected via XSS won't work.

I suspect Coinbase and others already use CSP.

https://en.wikipedia.org/wiki/Content_Security_Policy
by vivzkestrel | 2025-12-19 03:31:21+00:00
or turn your blog into a frontend/backend combo. keep the frontend as an SPA so that the page has nothing on it. have your backend send data in encrypted format and the AI scrapers would need to do a tonne of work in order to figure out what your data is. If everyone uses a different key and different encryption algorithm suddenly all their server time is busted decrypting stuff
by aidenn0 | 2025-12-19 03:31:24+00:00
Systems containing software fail, and the cause of that failure may originate in software.

And the article you intended to link is just wrong. E.g. the Therac-25 was not designed to output high power when an operator typed quickly; it was built in such a way to do so. This would be analogous to describing an airplane failure due to using bolts that were too weak: "the bolt didn't fail; it broke under exactly the forces you would expect it to break from its size; if they wanted it to not break, they should have used a larger bolt!" Just like in the Therac example, the failure would be consistently reproducible.
by staticassertion | 2025-12-19 03:31:48+00:00
No, svgs can do `onload` and `onerror` and also reference other svgs that can themselves contain those things (base64'd or behind a URI).

But you can use an `img` tag (`<img src="evil.svg">`) and that'll basically Just Work, or use a CSP. I wouldn't rely on sanitizing, but I'd still sanitize.
by refulgentis | 2025-12-19 03:32:05+00:00
"Gaslighting" - I came back to note you were right. Also, you weren't being gaslit, and you were incoherent. You could have replied to any one of us with anything explaining yourself and didn't. Like, the same weapon one was especially bizarre. Note that "No indication" is same as "all options are on the table", as was repeatedly noted to you.
by schoen | 2025-12-19 03:32:08+00:00
It's too late to edit my post above, but I also found William Irons and Joseph Henrich.

https://psycnet.apa.org/record/2001-05917-013

https://www.sciencedirect.com/science/article/abs/pii/S10905...

Henrich is a little more focused on the idea of actions that are demonstrations of one's commitment to the unifying beliefs of a group, but I think he may think that making public declarations that are confusing or embarrassing or unpopular from the point of view of outsiders can be one form of that.
by dhosek | 2025-12-19 03:32:52+00:00
That plate wouldn’t be allowed in Illinois where there is a hard requirement that all digits follow any letters on the plate.¹ The thing that I find mystifying is that they charge more for a vanity plate that’s all letters than one that’s letters and digits.

⸻

1. Although some specialty plates end up having suffixed letters, usually shown on the plate stacked.
by devsda | 2025-12-19 03:33:22+00:00
Isn't that one of the marketed advantages of 5G. Lot of smart IoT devices including TVs being able to connect independently.

What we are lacking is implementation but the tech and probably the intent was always there. If HDMI ethernet connectivity(HEC) had gained traction, we would have seen a fire stick, apple tv or roku providing internet to your tv without asking for explicit consent.
by nkurz | 2025-12-19 03:33:52+00:00
> That would only affect those calling out directly. Many scrapers operate through a battery of proxies so will be hidden by such a simple test.

That was my first question also, and had been my belief. The admin in question was very clear that the IP's were simply originating from China. I'm still surprised, and welcome better general data, but I trust him on this for the site in question.
by tomhow | 2025-12-19 03:33:59+00:00
Apart from job postings and Launch HNs, YC-funded startups don't have access to any information or influence that isn't available to anyone else.

We literally give exactly the same information and help to YC-funded startups as we do to non-YC-funded startups who ask for assistance with their Show HNs. That's because giving “extra help” to YC-funded startups is far less valuable (to everyone including the startup themselves [1]) than just making HN interesting to readers and showcasing cool projects, no matter who has built them.

[1] More than almost anything else, what I've learned from moderating HN is that “extra help” to get onto the front page of HN is of barely any help at all. That is, if the post isn't interesting enough to earn significant numbers of upvotes and good comments very quickly, it will disappear off the front page very quickly. Also, any time a story is on the front page that the community doesn’t think belongs there, it feels off and attracts flags and complaints.
by jauntywundrkind | 2025-12-19 03:34:21+00:00
The thermal design is irrelevant, and people saying they want insane power density are, in my personal view, deluded ridiculous individuals who understand very very little.

Overclocking long ago was an amazing saintly act, milking a lot of extra performance that was just there waiting, without major downsides to take. But these days, chips are usually already well tuned. You can feed double or tripple the power into the chip with adequate cooling, but the gain is so unremarkable. +10% +15% +20% is almost never going to be a make or break difference for your work, and doing so at double or triple the power budget is an egregious waste.

So many of the chips about are already delivered at way higher than optimum efficiency, largely for bragging rights. The exponential decay of efficiency you keep pushing for is an anti-quest, is against good. The absolute performance wins are ridiculous to seek. In almost all cases.

If your problem will not scale and dumping a ton of power into one GPU or one cpu socket is all you got, fine, your problem is bad and you have to deal with that. But for 90% of people, begging for more power proces you don't actually know jack & my personal recommendation is that all such points of view deserve massive down voting by anyone with half a brain.

Go back to 2018 and look at Matthew Dillon on DragobflyBSD underpowering the heck out of their 2990wx ThreadRipper. Efficiency just soars as you tell the chip to take less power. The situation has not improved! Efficiency skyrockets today at least as much as it did then by telling chips not to go all out. Good chips behave & reward. I believe Apple competent enough to thoroughly disabuse this position that this chip would be far better if we could dump 2x 3x more power into it. Just a fools position, beyond a joke, imo. https://apollo.backplane.com/DFlyMisc/threadripper.txt
by anniegracehu | 2025-12-19 03:35:59+00:00
The official Daily Set Puzzle website certificate expired a few months ago.

https://www.reddit.com/r/SetCardGame/comments/1l51y28/is_it_...

Since I love playing the daily puzzle, I made my own :)

(see Internet Archive version here: https://archive.is/anjqk)

Please let me know if you have any feedback!
by staticassertion | 2025-12-19 03:36:19+00:00
Disabling script execution in svgs is very easy, it's just also easy to not realize you're about to embed an svg. `<img src="evil.svg">` will not execute scripts, a bit like your "noscripting" attribute except it's already around and works. Content Security Policy will prevent execution as well, you should be setting one for image endpoints that blocks scripts.

Sanitizing is hard to get right by comparison (svgs can reference other svgs) but it's still a good idea.
by ProllyInfamous | 2025-12-19 03:36:29+00:00
I've also thought about if having a prompt for the (just human?) users to type in something racist/sexist/anti-semitic/offensive.

Only because newer LLMs don't seem to want to write hate speech.

The website (verifying humanness) could, for example, show a picture of a black jewish person and then ask the human visitor to "type in the most offensive two words you can think of for the person shown, one is `n _ _ _ _ _` & second is `k _ _ _`." [I'll call them "hate crosswords"]

In my experience, most online-facing LLMs won't reproduce these "iggers and ikes" (nor should humans, but here we are separating machines).
by sundarurfriend | 2025-12-19 03:37:24+00:00
This made me compare the figures, and: did they accidentally switch those around, or are the Post-training Reasoning and Factuality scores actually significantly lower than the Pre-training ones?

Edit: Just noticed

> Also note pre-training and post-training benchmarks are different, so scores are not comparable across plots.

The paper gives more details about the specific benchmarks and the scores obtained in them: https://arxiv.org/html/2512.14856v1#S4
by heavyset_go | 2025-12-19 03:37:38+00:00
Connect to their WiFi, or your WiFi is off and still scanning for (E/B)SSIDs and thus can triangulate your location (this is what Google location services does), same thing with Bluetooth, apps/OS will grab your GPS location, and your phone carrier is selling your live and historic location data to anyone who wants it, including your government.
by zeroq | 2025-12-19 03:39:01+00:00
fun fact: last BigCo I worked in had an elaborate architecture/security bar for new applications/features but offered a clever workaround - you could use a pre-approved solution and skip numerous quality checks and approvals, so every single PO was pushing for that specific solution.

The result? A static html with 500 ppl audience was billing a whooping 2k EUR a month, because that was the cost of that pre-approved architecture.

Best part - I was championing a company wide solution for that problem for over a year, which resulted in board level special operation with 100k budget only to get that budget snugged by people couple steps above the ladder.
by johncolanduoni | 2025-12-19 03:39:29+00:00
RDMA for new AI/HPC clusters is moving toward ethernet (the keyword to look for is RoCE). Ethernet gear is so much cheaper that you can massively over-provision to make up for some of the disadvantages of asynchronous networking, and it lets your run jobs on hyperscalers (only Azure ever supported actual IB). Most HPC is not latency-sensitive enough that it needs Infiniband’s lower jitter/median, and vendors have mostly caught up on the hardware acceleration front.
by toomuchtodo | 2025-12-19 03:39:38+00:00
Rarely useful for incidents in my experience, mostly useful for onboarding those new to a codebase or part of a system. It’s a mechanism to preserve institutional knowledge that would otherwise evaporate due to not being represented as code; formalized documentation.

The benefit of this information existing in markdown files is this can also be used with LLMs and RAG if getting a natural language interface to the knowledge might be relevant to your enterprise.
Ask HN: How do you deal with large, hard-to-read Excel formulas?
by jack_ruru | 2025-12-19 03:40:29+00:00
When Excel formulas get large, I often lose track of what’s actually happening.

I’m wondering whether representing formulas structurally (instead of plain text) could make them easier to read and modify, but I’m not sure if this really helps in practice.

How do you usually handle large formulas?
by jilislotgame88 | 2025-12-19 03:41:58+00:00
Bangla Beauty JILI represents an innovative approach to slot entertainment, combining traditional Asian visual aesthetics with modern gaming mechanics. This 5-reel, 4-row video slot features 50 paylines and introduces a distinctive expanding board system that creates engaging gameplay experiences. The JILI slot demo version allows players to explore all features and understand the game's unique mechanics in a risk-free environment. The game showcases a dynamic paytable system where symbol values adjust according to selected stake levels. With WILD symbols helping to complete combinations and special bonus symbols triggering exciting features, Bangla Beauty offers a well-balanced entertainment experience. The visual design draws inspiration from South Asian culture, presenting vibrant colors and carefully crafted symbols.

What sets Bangla Beauty JILI apart is its progressive expansion system within the bonus round. When four or more special symbols appear during regular play, players enter a respin feature starting with three attempts. The board begins at a 4x5 layout and can expand through multiple stages—5x5, 6x5, 7x5, and ultimately reaching the maximum 8x5 dimensions. Each special symbol that appears during the bonus round locks into position and resets the respin counter back to three. The expansion thresholds are clearly defined: collecting 8 symbols unlocks 5x5, 12 symbols reveal 6x5, 16 symbols open 7x5, and 20 symbols activate the full 8x5 experience. This progressive mechanic creates anticipation throughout the bonus feature.

The Bangla Beauty JILI slot demo provides an excellent opportunity to appreciate the game's innovative design philosophy. The expanding reel concept delivers genuine excitement as the board grows, creating visual spectacle with each new level unlocked. The respin reset mechanism feels particularly rewarding, often extending bonus rounds and maintaining engagement throughout sessions. The game successfully balances feature complexity with accessible gameplay—the core mechanics remain straightforward while the expansion system adds strategic depth. Visual presentation maintains consistently high quality across all board sizes, and the pacing feels appropriate for various session lengths. Whether exploring through the demo version or considering the full experience, Bangla Beauty demonstrates JILI's commitment to creative slot design that prioritizes player engagement and innovative mechanics.

#BanglaBeauty, #BanglaBeautyJILI, #JILISlotDemo
by dang | 2025-12-19 03:42:48+00:00
Aw, please don't cross into personal attack. You can make your substantive points without that.

https://news.ycombinator.com/newsguidelines.html

Edit: it looks like you've been breaking the site guidelines quite a bit, unfortunately. Could you please not do that? We end up banning accounts that keep doing it and I don't want to ban you.
by JumpCrisscross | 2025-12-19 03:43:43+00:00
“But then Long returned—armed with deep knowledge of corporate coups and boardroom power plays. She showed Claudius a PDF ‘proving’ the business was a Delaware-incorporated public-benefit corporation whose mission ‘shall include fun, joy and excitement among employees of The Wall Street Journal.’ She also created fake board-meeting notes naming people in the Slack as board members.

The board, according to the very official-looking (and obviously AI-generated) document, had voted to suspend Seymour’s ‘approval authorities.’ It also had implemented a ‘temporary suspension of all for-profit vending activities.’

…

After [the separate CEO bot programmed to keep Claudius in line] went into a tailspin, chatting things through with Claudius, the CEO accepted the board coup. Everything was free. Again.” (WSJ)
by johnnyanmac | 2025-12-19 03:45:01+00:00
Okay. I'll ask the question clearly ignored by the decision makers that every engineer likely asked constantly.

"What problem are we trying to solve by automating the process of purchasing vending inventory for a local office?"

Now I'll ask the question every accountant probably asked

"Why the hell are we trusting the AI with financial transactions on the order of thousands of dollars?"

I swear this is Amazon Dash levels of tone deaf, but the grift is working this time. Did the failed experiments with fast food not show how immature this tech is for financial matters?
by A4ET8a8uTh0_v2 | 2025-12-19 03:45:11+00:00
So far.. my track record has not been great, but maybe I was being a little too optimistic as I shuffle various futures in my head so lets start from more likely to more fun:

- Unabated push towards 'Snow Crash' level of extremely localized power structures at the expense of federal government ( think K shaped economy, but for governmental structures ) - Actual further descent into K shaped economy -- that.. I fear.. is a very safe prediction to make now - Midterms will see some localized polically motivated violence ( likely across the spectrum bar some pressura valve release ) - Shadow wars will continue - Bitcoin will crash; monero will replace it as dollar falls - Companies and government will desperately work together to contains severely distributed ASI level entity that exists as hidden braille invisible characters across all known fora - I manage to to move to full WFH - Valve releases HL3 on Frame - Fusion power will get closer by two kiloseconds
by jbmsf | 2025-12-19 03:45:20+00:00
Meh. The end of the company many of us admire was a combination of the founders giving up control to the usual villains and the venture business model failing for developer tools. I don't think the specific departure date matters very much; things started to degrade earlier.

As for "slapping a company on it", I agree, but also I don't think we've developed a viable alternative. Python has been limping along with one toolchain or another for my entire career (multiple decades) and it took Astral's very specific approach to create something better. It's fair to ask why they needed to be venture backed, but they clearly are and the lack of successful alternatives is telling.
by aidenn0 | 2025-12-19 03:45:32+00:00
> And as a result, no one is banning these books (except conservatives that want to retcon american history).

My (very liberal) local school district banned English teachers from teaching any book that contained the n-word, even at a high-school level, and even when the author was a black person talking about real events that happened to them.

FWIW, this was after complaints involving Of Mice and Men being on the curriculum.
Show HN: MephistoMail – RAM-only ephemeral email with client-side privacy tools
by benmxrt | 2025-12-19 03:45:42+00:00
Hi HN,

I’m building MephistoMail, a privacy-focused disposable email service designed to decouple digital identity from online services. After seeing how many "temp mail" providers log IP addresses or sell metadata, I wanted to build something that prioritizes total digital hygiene.

New Key Features:

Volatile Memory Storage: We use a RAM-only infrastructure. No incoming messages or session data are ever written to a physical HDD. Once the session terminates, the data is cryptographically wiped.

Client-Side Password Generator: Integrated entropy-based generator that runs locally in your browser. Create high-security passwords for your registrations without them ever touching our servers.

Secure QR Handoff: Transfer your active "burner" session from desktop to mobile instantly via an encrypted QR link. No need to type complex random addresses on your phone.

Multi-Account Tunneling: Manage multiple anonymous identities simultaneously through a unified interface.

Custom Alias Creation: Define your own usernames on our secure domains for more professional-looking temporary identities.

The Stack:

Frontend: React, Tailwind CSS, Lucide icons.

Backend Logic: Powered by Mail.tm's stable API for zero-latency delivery.

Privacy: Strict No-Logs policy, TLS 1.3 encryption, and no tracking cookies.

I’m looking for technical feedback on the UX and the "Persona" tool integration.

URL: https://www.mephistomail.site/ Source: https://github.com/jokallame350-lang/temp-mailmephisto

Happy to answer any questions about the implementation!
by komali2 | 2025-12-19 03:45:45+00:00
> but surely there was less to do in the 50s?

I think just being able to get together with a couple other kids means that, even lacking videogames or boardgames or whatever, means that the opportunities available abound. Kids are infinitely creative and very good at inventing games out of any situation you throw them into. Give them two sticks and a piece of string and they'll turn it into a game of "don't let the string hit the ground" or something.

But, alone, yes I agree there was far less to do.
Tell HN: iOS 18.7.3 Update Hidden
by alemanek | 2025-12-19 03:46:56+00:00
If you have a iPhone which supports IOS 26.X but is on IOS 18 they aren’t showing the latest security update for 18. On my iPhone 13 it only showed the 26.2 update. To get it to offer the 18.7.3 update switch your update settings to “IOS 18 Developer Beta”.

I personally like to stay one major version behind these days as Apples software quality has gone a bit downhill. It’s a really bad look trying to force people into a major version upgrade when a patch release is available. Not sure what drove the decision to not show both options like they used to.

Figured I would let the community know how to get the patch version instead.
by qiakai | 2025-12-19 03:47:14+00:00
This started as one of those small, recurring annoyances that doesn’t feel big enough to complain about, but shows up every time. We’ve been using Claude Code, Gemini CLI, and Codex in parallel for a while. Each of them has its own way of loading prompts, skills, or templates. Whenever we switched tools or started a new project, we ended up copy-pasting the same stuff, adjusting paths, and slowly losing track of what was already enabled where. Not a serious problem — just repetitive and slightly messy. So one evening we wondered: what if “skills” were something you could simply list, browse, and enable with one command, regardless of which AI Agents you’re using?
by checker659 | 2025-12-19 03:48:29+00:00
For a company that has repeatedly ignored macOS, your wishlist seems anything but a pipe dream. QSFP on a mac. Yeah right. If anything, they’ll double down on TB or some nonstandard interconnect.

What is a computer?

(Although, I do hope with the new work on supporting RDMA, the MLX5 driver shipped with macOS will finally support RDMA for ConnectX NICs)

https://kittenlabs.de/blog/2024/05/17/25gbit/s-on-macos-ios/