MurphyA/hacker-news huggingface dataset:
by jama211 | 2025-12-26 18:07:55+00:00
“The perps” gives away a huge flaw in your thinking, that people are inherently good or inherently bad and that “bad” people are motivated to do bad things always and will always find a way to do them and “good” people don’t. This is entirely incorrect and has been proven so false for so long that any further point made without understanding this should be dismissed out of hand.
by Forgeties79 | 2025-12-26 18:07:57+00:00
>appeal to authority

How so? He’s talking about what happened to him in the context of his professional expertise/contributions. It’s totally valid for him to talk about this subject. His experience, relevance, etc. are self apparent. No one is saying “because he’s an expert” to explain everything.

They literally (using AI) wrote him an email about his work and contributions. His expertise can’t be removed from the situation even if we want to.
by yegle | 2025-12-26 18:08:08+00:00
It's still valuable. You can access your server with your own VPN set up, but what if you want to share a server to a friend or a family member (examples includes VaultWarden/Bitwarden, Plex, Jellyfin)?

If this is on Tailscale, you can just ask people to install tailscale client and login using one of the IdP, then ask them to accept the node you shared to them, and they can immediately access the server.

The alternative would be 1) sending VPN configs over and maybe also configure their VPN client for them, or 2) expose the service on the Internet protected by some OAuth proxy which really only works for web apps. Neither is easy/trivial.
by tomrod | 2025-12-26 18:08:10+00:00
Yes. Arresting people for civil infractions (such as overstaying a visa, or even citizens caught in drag nets or protests) and taking them to 3rd party nations for detention is definitely a tactic a totalitarian police state would employ.

Public health is equivocally one of the few places the constitution is defined for (general welfare of the people). This is something they used to teach in civics classes, I wonder when that stopped?
by thway15269037 | 2025-12-26 18:09:08+00:00
ChatGPT to this day does not have a single simplest feature -- fork chat from message.

That's the thing even the most barebones open-source wrappers had since 2022. Probably even before because ERP stuff people played with predates chatgpt by like two years (even if it was very simple).

Gemini btw too.
by mook | 2025-12-26 18:09:26+00:00
Is there a reason the users must see all of the historic data too? Why not just have a post-commit hook render the current HEAD to static files, into something like GitHub Pages?

That can be moved elsewhere / mirrored later if needed, of course. And the underlying data is still in git, just not actively used for the API calls.

It might also be interesting to look at what Linux distros do, like Debian (salsa), Fedora (Pagure), and openSUSE (OBS). They're good for this because their historic model is free mirrors hosted by unpaid people, so they don't have the compute resources.
by WarOnPrivacy | 2025-12-26 18:09:30+00:00
What isn't shown on the video link is the agenda behind the video. It's a conclusion-first, craft evidence later fare that is useful for generating outrage against unliked people.

About the creator (Reuters):

One late afternoon in mid-May, a half dozen Hispanic day laborers
were paid $20 each to parade in front of the White House on camera,
holding signs with slogans like "I Love Biden" and "I Need Work
Permit for My Family."

The stunt was orchestrated by Nick Shirley, a pro-[now potus] online
influencer who often asks migrants on camera if they support
Democratic President Joe Biden or think he made it easier for
them to come to the U.S.

ref: https://www.reuters.com/world/us/pro-trump-influencers-fire-...
by mrinterweb | 2025-12-26 18:10:15+00:00
I too feel the type safety concern people have with ruby is overblown. The number of actual wrong type related issues I encounter is hardly enough to justify the costs of strong typing. The biggest type issue is with `nil` values and `NoMethodError` on `nil`. Guard clause or safe nav operator is usually sufficient protection for that. That said, I usually don't find myself needing to write that much defensive code for those cases.
by DemocracyFTW2 | 2025-12-26 18:10:53+00:00
> Using the second law of information dynamics and the mass–energy–information equivalence principle, we show that gravitational attraction manifests as a requirement to reduce the information entropy of matter objects in space

Using the second law of squirrel dynamics and the mass–energy–squirrel equivalence principle, we show that gravitational attraction manifests as a requirement to reduce the squirrel entropy of matter objects in space
by polotics | 2025-12-26 18:11:02+00:00
I agree to strongly disagree.

There are strong ethical rules around including humans in experiments, and adding a 60+ year old programming language designer as unwitting test subject does not pass muster.

Also this experiment is —please tell me if I'm wrong— not nowhere near curing cancer right?

I don't expect an answer: "You're absolutely right" is taken as a given here sorry.
by solatic | 2025-12-26 18:11:07+00:00
> almost everyone I know quickly gets sick of touching the yubikey for every git remote operation and just generates their own local SSH key to use for git since doing so is not forbidden

Yes, that's the exact problem at hand. If you generate your own local SSH key, the private key sits on the disk, and it can be stolen by malware (see article).

I'm asking how people set up the controls such that only hardware-based keys are signed by the CA.
by mergesort | 2025-12-26 18:11:28+00:00
Heya, author here! I completely agree with you — and why the post is titled Codex vs. Claude Code (Today). I also have this very specific disclaimer in the second paragraph to note that this post is a reflection of a moment in time. :D

> Before we continue, I need to make a disclaimer: This post is about the Claude Code and Codex, on December 22, 2025. Everything in AI changes so fast that I have almost no expectations about the validity of these statements in a year, or probably even 3-6 months from now.

That said I do what you do and try different models when I want to see if things have changed. I run my own private little benchmarks with a few complex real world tasks, and I really love seeing how things are progressing — both in terms of quality but also the novel quirks that are introduced, changed, or removed. :)
by anthk | 2025-12-26 18:11:34+00:00
> The conquistadors and chroniclers all saw the Americas through the lens of the chivalric literature they loved.

More like the opposite. The Golden Age of Spain was all about making fun on the knight from the "New Man" making wealth from the Americas.

Heck, it's the main theme from Don Quixote. The old, idealistic, outdated, Medieval wannabe-knight (hidalgo meant hijo-de-algo, son of something, hereditary titles) vs the simpleton but grounded peasant from the New World era. Also tons of peasants tried to travel overseas to make good money, and maybe scaled up their status to the ones from a merchant.

As Cervantes itself was a limp from a war which was something reminiscing old romantic but bullshit times, with Don Quixote you have the clear message that the warrior/knights were looked down against the traveler making wealth from overseas.

Kinda like a far west outdated "Justiciero" in the US from an aristocratic background compared to some middle-level educated hick but with a prosperous job in the 50's thanks to making good money from trade in a fish port.
by ux266478 | 2025-12-26 18:12:03+00:00
That's not how it works. The demand for engineering hours is an order of magnitude higher than the supply for any given game, you have to pick and choose your battles because there's always much, much more to do. It's not bizarre that nobody verified texture storage was being done in an optimal way at launch, without sacrificing load times at the altar or visual fidelity, particularly given the state the rest of the game was in. Who the hell has time to do that when there are crashes abound and the network stack has to be rewritten at a moments notice?

Gamedev is very different from other domains, being in the 90th percentile for complexity and codebase size, and the 99th percentile for structural instability. It's a foregone conclusion that you will rewrite huge chunks of your massive codebase many, many times within a single year to accomidate changing design choices, or if you're lucky, to improve an abstraction. Not every team gets so lucky on every project. Launch deadlines are hit when there's a huge backlog of additional stuff to do, sitting atop a mountain of cut features.
by bitvaulty | 2025-12-26 18:12:03+00:00
I’m working on BitVault, a security layer that sits on top of existing Bitcoin wallets or exchange accounts. It’s solving a simple problem: if someone compromises your device, seed, or session, withdrawals shouldn’t be instant. You should have a window to react.

What BitVault does:

2-of-3 multisig where the user holds two keys, and a “convenience signer” co-signs after a time delay.
Time-locked withdrawals (CSV) you can configure from 2 hours to ~15 days.
A fallback path: if the co-signer refuses or disappears, funds move via a pre-authorised route after the delay.
No custody. No pooled funds. No API dependency for signing.
Works with Keystone, Jade, Jade+ (QR flow). Rust SDK for integration.

What this is not:

Not a custodial service.
Not magic bullet security. If your device is compromised , you don't see the secret notification, and the attacker waits out the delay, you lose. The point is to shift the attack surface from “instant theft” to “theft that has to survive for days under scrutiny.”
Not a marketing play. The beta exists; we’re testing with 300+ users.

Why we built it:
Multisig is good, but it still signs instantly once keys are compromised. Hardware wallets help, until someone gets physical access. Adding mandatory time between click and broadcast gives users a last line of defense: panic window, device recovery, rotating to a safe wallet, or nuking the keys.

Architecture at a glance:

Key A: user (primary)
Key B: user (offline device or hardware wallet)
Key C: convenience signer (self-hosted or BitVault-hosted)
Time lock enforced at policy level; delays can’t be bypassed without waiting the same period.
Optional Telegram / email alert before the broadcast (not required for wallet function).

Asking the HN crowd:
Is time-delayed multisig actually useful for you, or is this a niche? Where does it break?
Would you self-host the third signer, or outsource it?
Is the trust model understandable as written, or does it need to be simplified?
If you’re building a wallet/exchange, would you integrate a Rust SDK for this?

Links:

Background + beta info: https://www.bitvault.sv/
Docs + SDK draft (still rough): available if anyone wants to review, DM me

Happy to answer technical questions, threat models, or “this is dumb because…” replies. The most useful thing right now is blunt feedback from people who’ve actually built wallets or handled security incidents.

If this sounds interesting, I’m here. If it sounds flawed, point to the exact flaw. Thanks
by wkat4242 | 2025-12-26 18:13:51+00:00
Oh yeah I didn't know that one. I do know Logitech has some ultra-thin ones too though. Very good keyboards too. They'd do nice in a laptop as well.

I'd very gladly sacrifice thinness for a decent keyboard. The Thinkpads had an OK compromise for a while but since the Thinkpad T14s gen2 or so they have been horrible as well. My old T490s was still serviceable.
by gritzko | 2025-12-26 18:14:01+00:00
Let’s make a thought experiment. Suppose that I have a data format and a store that resolves the issues in the post. It is like git meets JSON meets key-value. https://github.com/gritzko/go-rdx

What is the probability of it being used? About 0%, right? Because git is proven and GitHub is free. Engineering aspects are less important.
by solatic | 2025-12-26 18:14:21+00:00
How do you prevent malware running on the pwned laptop from asking for an ephemeral cert to be issued? How do you know a human being is in the loop? Usually ephemeral sessions are up to 15 minutes (also to deal with misaligned clocks and unhappy users) - plenty of time for malware to ship the cert back to a command-and-control server.

This is the key advantage of hardware keys, the fact that the physical press is required prevents the keys from being exfiltrated from the machine by malware.
by arw0n | 2025-12-26 18:14:21+00:00
> MANDATORY: Get more intimate with my Neovim. I've always kind of half-arsed my editors / IDEs, I always found it annoying to become a deep expert. This must change; surface-level skills rob you of productivity.

I'm actually not that convinced of these productivity gains in the context of IDE tricks. The cost of learning + tool-lock seems steep compared to the actual productivity gains. I'm switching fairly regularly between IDE's, and even if VS Code is the default, the only reason I'm considering learning it in depths is because some people incessantly comment on these things during pair programming.
by Lord-Jobo | 2025-12-26 18:14:29+00:00
And EFT has gone through some hilarious patches where stamina was very unrealistic. Some things are still very silly.

If you load up too much stuff in your backpack, you go from normal to overweight to tankmode. Overweight penalties are reasonable and progressive from normal weight. Tank mode is not. Walking, at a snails pace, now costs stamina. You cannot recover stamina unless you are standing still. OR, unless you go prone and crawl forwards at roughly the same speed as walking.

Idk if you’ve ever put 25 lbs + in a backpack and prone crawled, but that’s very much the opposite experience In real life. Same with crouch walking not costing any more stamina in the game.
by devnonymous | 2025-12-26 18:14:52+00:00
I claim that the new code, music or documents have not added anything significant/noteworthy/impactful to society except for the self-perpetuating lie that it would, all the while regurgitating, at high speeds, what was stolen.

And all at significant opportunity cost (in terms of computing and investment)

If it was as life altering as they claim where's that novel work of art (in your examples..of code, music or literature) that truly could not have been produced without GenAI and fundamentally changed the art form ?

Surely, with all that ^increased productivity^ we'd have seen the impact equivalent of linux, apache, nginx, git, redis, sqlite, ... Etc being released every couple of weeks instead of yet another VSCode clone./s
by mergesort | 2025-12-26 18:15:22+00:00
Heya, author of the post here! I think you're right in everything you've said, but I want to note that the programming language comparison was meant to be metaphorical more than literal. Everything is changing so fast (as I mention in the post a few times), but I have seen some (far from all) people get locked into Claude Code or Codex in a way where they won't even consider alternatives the same way people they chose Ruby to start their career and now identify as Ruby developers.

My goal was to open people's minds just a little bit by saying exactly what you're getting at — everything is moving fast and we should be reassessing often. A meaningful difference is that you can start a codebase with Claude Code and then switch to Codex with almost no friction, while you can't just migrate a TypeScript app to Python in 15 minutes.

All that's to say, we agree!
by TeMPOraL | 2025-12-26 18:15:38+00:00
> That seems to assume some sort of… maybe unfounded linearity or something

Not linearity but continuity, which I think is a well-founded assumption, given that it's our categorization that simplifies the world by drawing sharp boundaries where no such bounds exist in nature.

> The idea of the tragedy of the commons relies on this feedback loop of having these unsustainably growing herds (growing because they can exploit the zero-cost-to-them resources of the commons)

AIUI, zero-cost is not a necessary condition, a positive return is enough. Fishermen still need to buy fuel and nets and pay off loans for the boats, but as long as their expected profit is greater than that, they'll still overfish and deplete the pond, unless stronger external feedback is introduced.

Given that the solution to tragedy of the commons is having the commons owned by someone who can boss the users around, GitHub being owned by MS makes it more of a commons in practice, not less.
by tpmoney | 2025-12-26 18:15:46+00:00
My lived experience with human drivers and outages at intersections is most people get it very wrong. If you're lucky and the lit intersection is 1 lane in each direction, more often than not everything works out well. But any intersection with multiple lanes or especially an intersection that is one primary road and a lower traffic secondary is going to be full of people just flying through as if they were on green the whole time.
by toomuchtodo | 2025-12-26 18:16:03+00:00
I'm aware of the below efforts:

https://www.realtimefascism.com/ice-sight (appears to be inactive as of this comment)

https://wiki.icelist.is/

https://deportationdata.org/

https://themarkup.org/tools/2025/04/16/law-enforcement-ice-c...
by threethirtytwo | 2025-12-26 18:16:20+00:00
I couldn’t care less. It always pisses me off when a reviewer of my PR just flags the entire thing because of inconsistent capitalization. It’s the right correction and I always follow through but it’s also pedantic.

It’s technically more correct. But it’s also not a very big deal. Actually it matters more in code for search-ability but for documentation and comments? Give me a fucking break.
by trinsic2 | 2025-12-26 18:16:26+00:00
My take on the above, and I might be taking it out of context is that I think what is being said here is that the exploitation and grift needs to stop. And if you are working for a company that does this, you are part of the problem. I know that pretty much every modern company does this, but it has to stop somewhere.

We need to find a way to stop contributing to the destruction of the planet soon.

I don't work for any of these companies, but I do purchase things from Amazon and I have an apple phone. I think the best we can do is minimize our contribution to it. I try to limit what services I use from this companies, and I know it doesnt make much of a differnce, but I am doing what I can.

I'm hoping more people that need to be employed by tech companies can find a way to be more selective on who they employ with.
by jarofgreen | 2025-12-26 18:16:31+00:00
I'm not OP but I'll guess .... lock files with old versions of libs in. The latest version of a library may be v2 but if most users are locked to v1.267.34 you need all the old versions too.

However a lot of the "data in git repositories" projects I see don't have any such need, and then ...

> Why not just have a post-commit hook render the current HEAD to static files, into something like GitHub Pages?

... is a good plan. Usually they make a nice static website with the data that's easy for humans to read though.
by wkat4242 | 2025-12-26 18:16:37+00:00
> It’s like asking that all car buyers unite and demand manual transmissions in every car. I love manual cars, but I recognize most people do not want that for most of their driving. So why would the majority demand this feature that they don’t actually want, and which would not be a better experience for most?

Um that's like the status quo in Europe lol. We all drive manual here. it's not that unlikely. Automatics are the exception here (and you must learn to drive manual otherwise you get a restricted license)
by toomuchtodo | 2025-12-26 18:16:49+00:00
ICE has arrested US citizens, violently assaulted them, and have held them even when US citizenship proof was provided.

We Found That More Than 170 U.S. Citizens Have Been Held by Immigration Agents. They’ve Been Kicked, Dragged and Detained for Days. - https://www.propublica.org/article/immigration-dhs-american-... - October 16th, 2025
by phlipski | 2025-12-26 18:17:21+00:00
I've had a Framework 13 for 20 months now. AMD Ryzen™ 5 7640U w/ 32GB DDR4. Running Ubuntu. I love it. My only complaint/request: USB-C for power should be build into the chassis and not require a modular port. You get 4 ports to mix things like usb/hdmi/sd-card, etc... 1 of the 4 is always using the usb-c for power.
by SimianSci | 2025-12-26 18:17:23+00:00
I see this as a downstream issue of a greater issue needing to be solved.

Many American's risk homelessness and violence outside of the corporate world. The control over money used for housing and healthcare lies entirely within the hands of corporate intrests driven by these executives.
Until a viable alternative can be discovered for addressing housing and healthcare issues, no reasonable resistance amongst tech workers can be organized.

Many within the tech world, would love to build and produce technology that competes with the corporate interests you described, but lack secure housing or healthcare to do so.

Please note, that this does not require a 'solution' to the problem, but rather an alternative.
Show HN: An authority gate for AI-generated customer communication
by bhaviav100 | 2025-12-26 18:17:44+00:00
Hi HN,

As more teams let AI draft or send customer-facing emails (support, billing, renewals), I’ve been noticing a quiet failure mode:

AI-generated messages making commitments no one explicitly approved.
Refunds implied. Discounts promised. Renewals renegotiated.

Not hallucinations but AI doing its job with no authority boundary.

I built a small authority gate that sits between AI-generated messages and delivery.

It does not generate content or replace CRMs or support tools.

It only answers one question before a message is sent=> Is this message allowed to promise money, terms, or actions to a customer?

The system inspects outbound messages, detects customer-facing commitments (refunds, billing changes, renewals, cancellations), blocks delivery or requires human approval, logs every decision for auditability

I’ve made a public sandbox available for teams experimenting with AI-driven customer communication.

I’m not sure yet whether this is a niche edge case or an inevitable new infrastructure layer as AI adoption increases, so I’m especially interested in hearing:

a) whether you’ve seen similar failures

b) how you’re currently handling authority and approvals or why you think this problem won’t matter in practice

Sandbox + docs here:
https://authority.bhaviavelayudhan.com

Happy to answer technical questions.
by skybrian | 2025-12-26 18:17:46+00:00
This varies. The lawyers for risk-adverse companies will make sure they follow the licenses. There are auditing tools to make sure you're not pulling in code you shouldn't. An example is Google's go-licenses command [1].

But you can be sure that even the risk-adverse companies are going to go by what the license says, rather than "community norms."

Other companies are more careless.

[1] https://github.com/google/go-licenses
by azakai | 2025-12-26 18:18:57+00:00
ES-1 is the most important figure, though? As you say, it is a summary, and the authors consider it their best estimate, hence they put it first, and in the executive summary.

Figure 1.1 does show a single source from 2018 (Shehabi et al) that estimates almost flat growth up to 2017, that's true, but the same graph shows other sources with overlap on the same time frame as well, and their estimates differ (though they don't span enough years to really tell one way or another).
by wkat4242 | 2025-12-26 18:19:04+00:00
Yes. Windows 8 was completely ridiculous. And the worst part was they doubled down for about a year. At that point businesses started stopping upgrade plans and they had to cave in with 8.1.

For some reason they thought the tablet would be the next major computing form factor rather than the niche it has become and they were afraid losing it all to Apple. Kinda can imagine that but I never understood why the desktop had to suffer for it.