MurphyA/hacker-news huggingface dataset:
by nodesocket | 2025-12-04 00:52:23+00:00
I'm looking at deploying SeaWeedFS but the problem is cloud block storage costs. I need 3-4TB and Vultr costs $62.50/mo for 2.5TB. DigitalOcean $300/mo for 3TB. AWS using legacy magnetic EBS storage $150/mo... GCP persistent disk standard $120/mo.

Any alternatives besides racking own servers?

*EDIT* Did a little ChatGPT and it recommended tiny t4g.micro then use EBS of type cold HDD (sc1). Not gonna be fast, but for offsite backup will probably do the trick.
by chickensong | 2025-12-04 00:53:27+00:00
You have to start somewhere though. Security theater sucks, and it's not like compliance is a silver bullet, but at least it's something. Having been through implementing standards compliance, it did help the company in some areas. Was it perfect? Definitely not. Was it driven by financial goals? Absolutely. It did tighten up some weak spots though.

If the options mainly consist of "trust me bro" vs "we can demonstrate that we put in some effort", the latter seems more preferable, even if it's not perfect.
by ewoodrich | 2025-12-04 00:54:07+00:00
I went from:

1. using Claude Code exclusively (back when it really was on another level from the competition) to 2. switching back and forth with CC using the Z.ai GLM 4.6 backend (very close to a drop-in replacement these days) due to CC massively cutting down the quota on the Claude Pro plan to 3. now primarily using OpenCode with the Claude Code backend, or Sonnet 4.5 Github Copilot backend, or Z.ai GLM 4.6 backend (in that order of priority)

OpenCode is so much faster than CC even when using Claude Sonnet as the model (at least on the cheap Claude Pro plan, can't speak for Max). But it can't be entirely due to the Claude plan rate limiting because it's way faster than CC even when using Claude Code itself as the backend in OC.

I became so ridiculously sick of waiting around for CC just to like move a text field or something, it was like watching paint dry. OpenCode isn't perfect but very close these days and as previously stated, crazy fast in comparison to CC.

Now that I'm no longer afraid of losing the unique value proposition of CC my brand loyalty to Anthropic is incredibly tenuous, if they cut rate limits again or hurt my experience in the slightest way again it will be an insta-cancel.

So the market situation is much different than the early days of CC as a cutting edge novel tool, and relying on that first mover status forever is increasingly untenable in my opinion. The competition has had a long time to catch up and both the proprietary options like Codex and open source model-agnostic FOSS tools are in a very strong position now (except Gemini CLI is still frustrating to use as much as I wish it wasn't, hopefully Google will fix the weird looping and other bugs ... eventually, because I really do like Gemini 3 and pay for it already via AI Pro plan).
by j45 | 2025-12-04 00:54:08+00:00
Why did OP have to mention AI and just ask for feedback on the solution itself and let anything come up organically?

Big tech workers might be perceiving writing on the wall sooner - there have already been some layoffs.

I also find a lot of technpeollemsurprisinglynhabent spent as much time with AI over the past 3 years compared to other techs.
by vgeek | 2025-12-04 00:54:30+00:00
Good idea. A few years back I built https://originationdata.com that compares mortgage lenders (both FDIC & FCUA members) using HMDA data. I modeled rates by lender, product type as well as by facets like MSA (as well as STL FRED data, too). It grew for a few years and I was ecstatic-- getting backlinks organically from some impressive sites (e.g. larger banks themselves, consumer publications) as well as positive user feedback. Then Google pushed their "Helpful Content Update" and Google search traffic absolutely tanked, so I kind of abandoned it and moved onto other projects that won't be SEO oriented, since Google's view of quality is unbeknownst to me.
by UniverseHacker | 2025-12-04 00:54:43+00:00
> You can do that and still acknowledge that pickups are a massive problem

I never said they aren't, you seem to be trying to have an argument against a position that I have never stated or held. I was explaining how these vehicles can be practical when used for their intended and engineered purpose, and your rebuttals are targeted as some other assumed perspective or position that I simply don't have. Please drop the insults- that isn't how we discuss things on HN.

My acknowledgement of the practical utility of American pickups for their engineered purpose doesn't come from any kind of emotional attachment, or affinity for them, nor any delusion that most of their owners actually need or use them properly- that's all coming from you. I'm a European car nerd/snob and wouldn't personally be caught dead driving any American vehicle, I just really don't like them. I own a fuel efficient diesel German SUV that I tow a flatbed utility trailer behind, so I can do some of the things one would usually do with a pickup, without having to own one.
by ivape | 2025-12-04 00:54:53+00:00
"... treating the whole job as a black box"

Yes, that is exactly what I mean. You ask the Wizard of Oz for something, and you hear some sounds behind the curtain, and you get something back. Validate that, and if necessary, ask Oz to try again.

"The obvious answer to this is that it is not feasible to retry each past validation for each new change"

It is reasonably feasible because the job of Production Development and QA has existed, developers just sat in the middle. Now we remove the developer, and move them over to the role of combined Product + QA, and all Product + QA was ever able to even validate was developer output (which, as far as they were ever concerned, was an actual black box since they don't know how to program).

The developer disappears when they are made to disappear or decide to disappear. If the developer begins articulating ideas in language like a product developer, and then validates like a QA engineer, then the developer has "decided" to disappear. Other developers will be told to disappear.

The existential threat to the developer is not when the company mandate comes down that you are to be a "Prompt Engineer" now, it is when the mandate comes down that you need to be a Product Designer now (as in, you mandated not to write a single. line. of. code.) . In which case vast swaths of developers will not cut it on a pure talent level.
by pjbk | 2025-12-04 00:55:28+00:00
Indeed you can use symmetry, but it feels more like a mathematical hack, and the fact that it agrees with reality could be a coincidence. You can state that, and there is a lot of evidence for, that nature follows some basic geometrical rules. Applying that through a Lie theory framework on a symplectic manifold to see how charges behave differentially will eventually get you to Maxwell equations because of how those Lie algebras operate. However for me the real revelation was just using the Lienard–Wiechert approach to calculate how charged particles should behave in a relativistic field, which is as simple as it gets, and then see that you can build the full electromagnetic theory on top of that, with the bonus that the formulation is already relativistic. The same resulting symmetry in a corresponding Lie group is consequence of that (nicely captured by Hodge's equation), and invariance or operator rules don't need to be forced.
by simonw | 2025-12-04 00:55:49+00:00
The title of this post is misleading - this was jailbreaking, not prompt injection. The Wired article doesn't mention prompt injection, that was an editorial note in the submitted title.

Prompt injection and jailbreaking are not the same thing: https://simonwillison.net/2024/Mar/5/prompt-injection-jailbr...
by dryark | 2025-12-04 00:56:54+00:00
The initial input is high resolution images using a DSLR and a macro lens, or at least it will be soon. Initial testing of the method has been done using 200mp images taken casually with a standard modern cell phone.

The underlying new computational geometry method can be extended to 3d but that isn't necessary for this application unless we also extract a 3d image of the page itself. For now at least we are not doing that as it would be even more complicated and finicky. Possibly for soft enough pages the letterpress imprint will deform the page enough that the deformation can be detected and help figure out where the original metal pressed and where the ink is due to page bleed.

Essentially what we are doing is taking high resolution photos, using computational geometry methods on those to extract the shapes, and then refining those shapes through a mixture of automation and manual labor.

The entire thing is called "Donkey Free" and will have information online in the near future. I just bought the domain ( donkeyfree.com ) for this 2 days ago; this is all extremely new. I'd like to release the resulting fonts under a license allowing free use for many purposes but we still need to think through that to figure out how to make that sustainable.
by fasterik | 2025-12-04 00:57:20+00:00
I don't think any of that is an argument against the use of procedural generation, it's just an argument for the tasteful use of it. Partly it also depends on what works in your own workflow. I find that it's an essential component in the creative process of lot of the artists I admire. Autechre is a great example. I think a lot of the pioneers of early IDM like Autechre and Aphex Twin have found ways to incorporate randomness at the micro level, while maintaining control at the macro level over the shape and direction of the composition. I don't see this as competing with traditional composition methods, it's just leveraging code-based tools to give the artist more control over which elements are random and which ones they control.
by axiolite | 2025-12-04 00:57:45+00:00
I've seen things going the opposite way. It's only recently that an average person could jump on eBay and get assembled low-level electronic module/boards for cheap, and assemble into their project.

Yes, you'll probably have difficulty walking into a STORE to buy PC components, but only because online shopping has been killing local shops for decades now. You'll find it easy to get that stuff online, for better prices.

PCs, since the very start, have been going through a process of being ever more integrated each generation. Not too many people install sound cards, IDE controllers, etc., anymore. CPUs, GPUs, and RAM are about the only holdouts not integrated on the motherboard these days. It's possible that could change, if CPUs and GPUs becomes fast enough for 99% of people, and RAM gets cheap enough that manufacturers can put more on-board than 99% of people will need. And while you might not be happy about that kind of integration, it comes with big price reductions that help everyone. But we're not there yet, and I can't say how long down the road that might be.
by tooltalk | 2025-12-04 00:58:00+00:00
>> Your theory doesn't work in real world timeline where we have to factor in actual execution time. ... That stuff takes years,

(no "reply" button in your last comment)

Sure, doesn't really matter. I just have to demonstrate that your "local competition" theory in pre-Xi era doesn't hold water and the real world data don't bear that out, which I already have.

Whether Samsung China's sudden sales collapse came 1 day, or 1 year after Xi? not very relevant. That being said, in Apple's case, the Chinese media's coordinated attack started on Consumer Day in March 2013, just a day after Xi became president, but because of Apple's quick response and bold risky bet, suffered no damage. Samsung China's first sales decline since 2009 on the other hand became evident in Q1 2014 and after, or some 3 quarters after Xi. Or roughly equal to a 50% drop in market share and unit sales for the entire year 2014 and more significant drops in subsequent years. So we are talking 4+ years to go from 20% to less than 1%, so there goes your timeline arg out the window, too -- it's plenty time to implement informal anti-market policies and destroy a foreign competitor completely.

Again, this dramatic drop was not seen elsewhere, but in only China, indicating that the problem wasn't inherent to Samsung's product offering, competitiveness, or market. In open markets, such as EU, Samsung maintained a steady ~32+% market share post-Xi and wasn't affected at all by the rise or fall of Huawei, before or after the ban. Samsung EU's market share dipped below 30% in 2021 for the first time in 8+ years, after Huawei's ban which further undermines the narrative that Samsung somehow benefited from it.
by tharkun__ | 2025-12-04 00:58:23+00:00
That is definitely true and why I compared idle watts. That Athlon uses the same idle watts as modern mobile CPUs. So no reason to replace during the mostly idle times. Spot on. I can't have this system off during idle time as it wouldn't come up to fulfill its purpose fast enough when needed and it would be a pain to trigger that anyway (I mean, really, port knocking to start up that system type thing). Else I would. That I do do with the HTPC which has a more modern Intel core i3.

The "nothing" here was exactly meant more for the times when it does have to do something. But even then at 45W TDP, as long as it's able to do what it needs to, then the newer CPUs have no real edge. What they gain in performance due to multi core they loose in being essentially equivalent single core performance for what that machine does: HTPC file serving, email server etc.
by layer8 | 2025-12-04 00:58:35+00:00
Maybe you missed this part: “That seemed like a lot of thinking, you might object. It probably was if you’re not familiar with Program Construction yet, but once you’ve derived a couple of these theorems, you’ll find that there is no thinking involved. Not in the sense that once you’re good at something, you can do it almost mechanically, but in the sense that there’s only one way this could have gone. Starting from that post-condition, the theorems we proved fall out automatically as we continue expanding our model, and the same can be said for our loop body. Program construction is really easy in that way, because all you’re doing is following the program derivation to its logical end.”
by johnnyanmac | 2025-12-04 00:58:38+00:00
I don't really get it myself. I personally don't give Steam credit for weakly saying 'hey you need to label something'. Let me know when really enforce it. Heck, let me know when they at least add a filter. That's when you can really impact the behaviour (or prove consumers really don't care).

But yew ,both private companies do their own forms of evil.
by mhashemi | 2025-12-04 00:59:06+00:00
Oh snap! I was just looking at originationdata.com this week! So awesome. I had originally hoped HMDA data was more than annual, but no luck. It's also a shame that the current admin turned off the data stream here: https://www.consumerfinance.gov/owning-a-home/explore-rates/

I thought maybe you'd been hit by that update, but even more bummed to hear Google enshittification struck again.
by stavros | 2025-12-04 00:59:11+00:00
Let's Encrypt did more for privacy than any other organization. Before Let's Encrypt, we'd usually deploy TLS certificates, but as somewhat of an afterthought, and leaving HTTP accessible. They were a pain to (very manually) rotate once a year, too.

It's hard to overstate just how much LE changed things. They made TLS the default, so much that you didn't have to keep unencrypted HTTP around any more. Kudos.
by jacquesm | 2025-12-04 00:59:19+00:00
But once that particular design decision is made it is a question of time before that happens. The one enables the other.

The fact that React embodies an RPC scheme in disguise is quite obvious if you look at the kind of functionality that is implemented, some of that simply can not be done any other way. But then you should own that decision and add all of the safeguards that such a mechanism requires, you can't bolt those on after the fact.
by jyunwai | 2025-12-04 01:00:50+00:00
More context: 501(c)(3) orgs are non-profits that include charities, whereas 501(c)(6) orgs are non-profits with less strict requirements. Both are tax-exempt federally, but 501(c) orgs have higher financial transparency requirements and higher restrictions on political activity (which qualifies donations to 501(c)s as tax-deductible).
by habosa | 2025-12-04 01:00:51+00:00
They took a month to fix this? That’s beyond inexcusable. I can’t imagine how any customer could justify working with them going forward.

Also … shows you what a SOC 2 audit is worth: https://www.filevine.com/news/filevine-proves-industry-leade...

Even the most basic pentest would have caught this.
by avianlyric | 2025-12-04 01:01:09+00:00
It’s not even close. Samsung alone ships around 400 million phones a year, that’s 400 million ARM devices a year from a single manufacturer. The number of total consumer ARM devices sold each year is in the billions.

RISC-V total total estimated market value is only around $10 billion, and I strongly suspect a single RISC-V chip cost more than a dollar. RISC-V manufacturing needs to increase something in the order of 1000X just to match ARM volumes, and even then it’ll be half a decade for RISC-V devices to build up meaningful market share of actual in-use devices, given there’s many billions of ARM devices out there which will remain perfectly usable for many years.
by venturecruelty | 2025-12-04 01:01:43+00:00
"You can run JavaScript on the frontend and the backend!" always struck me as the weakest marketing ever. I've been around the block, and which language the web application uses is hardly any sort of limiting factor in ease of development. (And ideally, your frontend has as little JavaScript as possible anyway.) There is very little that can't be programmed in a more web-friendly way, like POSTing forms and rendering HTML templates. Sure, I guess Google Maps can just be a fat application, but like... every eCommerce site doesn't need to be some big ball of React mud, I promise.
by vpShane | 2025-12-04 01:02:04+00:00
tell that to salt typhoon who collected copious amounts of data on all of us.

https still uses unencrypted client hello's (ECH) across the vast majority of the internet, showing which domain the client is visiting in plaintext for multi-site servers to do SNI. DNS is still plaintext on most consumer routers/models provided by ISPs, stingray technology exists in the wild and is widely used to mimic cell towers. E2EE is not popular in consumer applications, even Telegram isn't E2EE and the main ones that claim they are like X's new Chat they have the keys on; Matrix having E2EE still shows meta data in plain text, room names in plain text.

While iMessages, RCS, Signal are mostly mainstream, most people are unaware of the need for E2EE. RCS is its own set of issues.

Pegasus, Cellbright, I can go on and on with the spyware companies that can just send a text message and infect devices with 0click exploits.

We can have E2EE but if they can just see the screen or hook in to the messaging app's memory doesn't mean much.

Pick up your cell phone, is it connected to Wifi? Can it see other Wifis? Apps track those nearby SSIDs and report to major databases to have accurate geo-location data down to the spot we stand.

Don't get me started on Ad-Tech.

The EU wants to install backdoors on everybody's devices and get rid of encryption entirely.

Zero Trust Technologies are a fun thing to read in to, especially the need for them.
by wakawaka28 | 2025-12-04 01:02:28+00:00
I know that. But presumably, Let's Encrypt could participate in a MITM attack since they can sign another key, so that even the visitor who knows that you use them as a CA can't tell there is a MITM. Checking multiple signatures on the same key could raise the bar for a MITM attack, requiring multiple CA's to participate. I can't be the first person to think of this. I'm not even a web security guy.

It might be interesting for ACME to be updated to support signing the same key with multiple CA's. Three sounds like a good number. You ought to be able to trust CA's enough to believe that there won't be 3 of them conspiring against you, but you never really know.
by JumpCrisscross | 2025-12-04 01:02:54+00:00
The Constitutionality of the attacks is orthogonal to their status as war crimes. (The Constitution doesn't concern itself with war crimes beyond the fact that they're crimes. Its writing almost predates the concept.)

What Trump can do without Congressional approval is a constitutional question. Whether it's a war crime is a legal one. I'm not sure how much Palantir can help with the first. I'm fairly certain it would be useful with the latter; Helen Mirren starred in a film that was essentially about this [1].

[1] https://en.wikipedia.org/wiki/Eye_in_the_Sky_(2015_film)
by energy123 | 2025-12-04 01:04:00+00:00
Sure but it's just being morally lucky. They found themself in a situation where there was temporary and situational alignment, why give them any credit for that? They didn't create that situation.

It's like AMD open sourcing FSR or Meta open sourcing Llama. The outcome itself is good, but if they ever become leaders in these verticals, they will pivot to closed source quicker than you can blink, because the reason they're doing it is just coincidental to the public good, not because of a genuine motivation to do good.
by mikestorrent | 2025-12-04 01:04:19+00:00
I think, if anything, in this age of AI coding we should see a resurgence in true open-source projects where people are writing code how they feel like writing it and tossing it out into the world. The quality will be a mixed bag! and that's okay. No warranty expressed or implied. As the quality rises and the cost of AI coding drops - and it will, this phase of $500/mo for Cursor is not going to last - I think we'll see plenty more open source projects that embody the spirit you're talking about.

The trick here is that people may not want to be coding MinIO. It's like... just not that fun of a thing to work on, compared to something more visible, more elevator-pitchy, more sexy. You spend all your spare time donating your labour to a project that... serves files? I the lowly devops bow before you and thank you for your beautiful contribution, but I the person meeting you at a party wonder why you do this in particular with your spare time instead of, well, so many other things.

I've never understood it, but then, that's why I'm not a famous open-source dev, right?