MurphyA/hacker-news huggingface dataset:
by lapcat | 2025-12-17 22:09:43+00:00
> You're quoting the first post of a long discussion

"You absolutely should be preventing users from being able to copy a private key!" is the 8th post in the discussion.

Do you stand by these words, or are you now repudiating them?

> You're choosing to use an app that doesn't meet your needs

I am using an app that meets my needs. I don't need passkeys. It's just other people telling me that I need passkeys.
by Bengalilol | 2025-12-17 22:10:24+00:00
Nor does the developer’s (or publisher/financier/co-developer?) website provide any additional details or information. In fact, as far as I know, it has not released any games yet (a 007 game is scheduled for 2026).

<https://www.delphiinteractive.com>

EDIT: the delphi website stores all files on website-files.com which is owned by Webflow (a no-code website builder).
by hirenj | 2025-12-17 22:10:44+00:00
That is really insightful regarding the ritual improving outcomes through better communication - something I see reflected in many meetings I turn up to now which involve an introduction round between participants, and anecdotally improves participation in the meeting.

It would be amazing if someone had a link to a page with the MSF story, as that is a great reference to have! My google-fu hasn’t helped me in this case.
by mmaunder | 2025-12-17 22:11:06+00:00
Used the hell out of Gemini 3 Flash with some 3 Pro thrown in for the past 3 hours on CUDA/Rust/FFT code that is performance critical, and now have a gemini flavored cocaine hangover and have gone crawling back to Codex GPT 5.2 xhigh and am making slower progress but with higher quality code.

Firstly, 3 Flash is wicked fast and seems to be very smart for a low latency model, and it's a rush just watching it work. Much like the YOLO mode that exists in Gemini CLI, Flash 3 seems to YOLO into solutions without fully understanding all the angles e.g. why something was intentionally designed in a way that at first glance may look wrong, but ended up this way through hard won experience. Codex gpt 5.2 xhigh on the other hand does consider more angles.

It's a hard come-down off the high of using it for the first time because I really really really want these models to go that fast, and to have that much context window. But it ain't there. And turns out for my purposes the longer chain of thought that codex gpt 5.2 xhigh seems to engage in is a more effective approach in terms of outcomes.

And I hate that reality because having to break a lift into 9 stages instead of just doing it in a single wicked fast run is just not as much fun!
by siliconc0w | 2025-12-17 22:11:23+00:00
"AI will replace software developers"

"If your seniors are resisting AI and saying it doesn't work, replace them with AI-native engineers!"

"AI will replace all junior software developers"

"AI will be a tool to help junior software developers"

Eventually we will get to:

"AI requires and will likely to continue to require pretty heavy hand holding and is not a substitute for building and maintaining independent subject matter expertise"
by lern_too_spel | 2025-12-17 22:11:41+00:00
Definition of bigot from Oxford Languages: a person who is obstinately or unreasonably attached to a belief, opinion, or faction, especially one who is prejudiced against or antagonistic toward a person or people on the basis of their membership of a particular group.

Explain how the word isn't being used according to its definition.

> Nick Fuentes openly said he's a racist.

Do you doubt him? In March 2025, he said, "Jews are running society, women need to shut the fuck up, Blacks need to be imprisoned for the most part, and we would live in paradise ... White men need to run the household, they need to run the country, they need to run the companies. They just need to run everything, it's that simple. It's literally that simple."

> I suspect he lost 0 supporters by doing this.

You seem to believe that his supporters think he isn't actually racist.
by Workaccount2 | 2025-12-17 22:11:46+00:00
I desperately want to be able to real-time dictate actions to take on my phone.

Stuff like:

"Open Chrome, new tab, search for xyz, scroll down, third result, copy the second paragraph, open whatsapp, hit back button, open group chat with friends, paste what we copied and send, send a follow-up laughing tears emoji, go back to chrome and close out that tab"

All while being able to just quickly glance at my phone. There is already a tool like this, but I want the parsing/understanding of an LLM and super fast response times.
by wmorgan | 2025-12-17 22:12:17+00:00
Everybody grew up among, and got their culture from, lots of different kinds of people. You are right about the culture of Massachusetts, where I live. It’s a special place, but it’s a counterexample to your point. MA has one of the highest rates of foreign-born population in the country, and it has been that way for a long time. When I was growing up, there was a big influx of people from China. Today it’s India. A couple of generations ago, Italy/Ireland/Poland. “Eat to live, don’t live to eat” my mother told me, but her mom was born in Germany and her dad was Irish. Massachusetts — by the way also consistently one of the most Catholic states — shows you can have the Puritan culture without the Puritans.
by apercu | 2025-12-17 22:12:48+00:00
When I was first learning Perl after being a shell scripter/sysadmin I produced a lot of code. 2-3 years later the same tasks would be way less code. So is more code good?

Also, my anecdotal experience is that LLM code is flat wrong sometimes. Like a significant percentage. I can't quote a number really, because I rarely do the same thing/similar thing twice. But it's a double digit percentage.
by measurablefunc | 2025-12-17 22:14:07+00:00
They have even better psychometric profiles on everyone now than they did previously. This is why Zuckerberg can confidently tell people during an interview that he knows they want at least 15 friends¹ & he is going to deliver those friends to them w/ his data centers.

¹https://www.linkedin.com/pulse/why-mark-zuckerberg-thinks-yo...
by palata | 2025-12-17 22:14:27+00:00
My understanding is that you say "someone could make an alternative to X and that would kill Microsoft because everybody hates Microsoft".

My answer is "there have been examples of alternatives to Microsoft products for decades, and it hasn't killed Microsoft at all, so I don't see why it would be different for another service (in your case, email)".

Did I misunderstand your point?
by IshKebab | 2025-12-17 22:15:56+00:00
Not in my experience. For example models often say "no you can't do that" now whereas they used to always say you could do things and just hallucinate something if it was impossible. Of course sometimes they say you can't do things when you can (e.g. ChatGPT told me you can't execute commands at the top level of a Makefile a few months ago), but it's definitely less.

> They're just not as egregious.

Uhm yeah, that's what I'm saying. The hallucination situation has improved.
by throwway120385 | 2025-12-17 22:15:57+00:00
It depends a lot on the language, but in my field libraries that have their own logging implementation and that don't provide hooks to override it cause big problems for me because I send all the logs to the same central logging client that forwards it to the same central logging server for aggregation. Your logging probably dumps it to a file, or it writes it to STDOUT, or something similar, in which case now I have to pipe all of that data in two places by doing something hacky.

There are some language ecosystems that have good logging systems like Java which I would be totally fine with. But systems languages like C/C++ that don't have a core concept of a "log message" are a pain to deal with when the library author decides to stream some text message somewhere. Which is probably a good argument for not using those languages in some circles, but sometimes you have to use what you have.

So it's not really a blanket "don't do it" but you should carefully consider whether there's some well-known mechanism for application authors to intake and manage your logging output, and if that doesn't exist you should provide some hooks or consider not logging at all except with some control.
by llm_nerd | 2025-12-17 22:16:02+00:00
Which is literally the point of the post. They have the = in >= at an opacity of 0 and a font-size of 1, which means it doesn't appear if styles are used properly. And their point is that candidates that copy/paste such trivial code into an AI/interpreter will get -11 because it just sees the >=.

Though a gap in their process is that, as you mentioned, various reading modes also remove styles and likewise might see it. Though a reader should filter out opacity:0 content.
by phito | 2025-12-17 22:16:07+00:00
Ah, I've actually built one myself recently and it works great for plant tissue culture. Been using it for years now. Just used a commercial HEPA filter, a centrifugal fan, and a wooden box to equalize the pressure. Then it's a matter of regulating the voltage to the fan until you get the right amount of pressure to get laminar flow.
by wiredpancake | 2025-12-17 22:16:21+00:00
This problem is really bad at my work.

We commonly run into finance issues about half way through the year. We get to the point where 10x HDMI cables get declined from Finance and we get reprimanded for not tracking where each HDMI or Ethernet Cable go. Near to the end of the year, the budget refreshes and finance (without consultation to us) ends up buying a bunch of random stuff.

"Guys, we brought 11 iPad Minis that need to be setup"

Oh so we can also get the HDMI cables now?

"No sorry, we just spent all the remaining money, have you audited the cables recently?"
by timmyc123 | 2025-12-17 22:16:37+00:00
Hi, Tim Cappalli here.

Not sure how stating that my (an individual) opinions on a topic are evolving is interpreted as "threatened the KeypassXC developers".

If you've been following along, you'll have seen that I am actually one of the biggest advocates of the open passkey ecosystem, and have been working really hard to make sure all credential managers have a level playing field.

Always happy to chat directly if you have concerns!
Ask HN: Can upside down faces solve face recognition while wearing N95 masks?
by amichail | 2025-12-17 22:16:41+00:00
Imagine an N95 mask worn normally, but above it you wear an upside down replica of your own face. The nose would appear above the eyes and the mouth above the nose because the face is upside down. There are no fake eyes involved, just your real eyes looking through holes.

The replica sits entirely above the mask, so it does not interfere with the seal or function of the N95. From a distance, people could still identify you because the facial structure is there, just upside down.

It would obviously look uncanny, but it preserves identity cues without compromising the mask.

What do you think of this idea?
by gretch | 2025-12-17 22:16:53+00:00
Well I can list some things which are completely irrelevant (happens even in online ads despite the advancements).

I got an offer for life insurance for US veterans - I’m not a US veteran so this has nothing to do with me.

I got an ad for women’s hygiene products, but I’m not a woman. So that’s completely wasted on me.

I just bought a mattress, and I don’t need a 2nd mattress, so all of those are irrelevant.
by ErroneousBosh | 2025-12-17 22:17:02+00:00
There's a company in England called "Cascode" who make firefighter alerters. These are really basic "beeper" pagers, which you can program to have a bunch of different tones and LED patterns based on the RIC and Subcode.

I look after several thousand of these across several hundred paging sites.

They're relatively inexpensive (70 quid or so in quantity) and they last about six weeks on a commonly-available AA battery. The batteries go flat enough to trigger the "low battery" beep at about 3am, for some reason. I don't know why.

There's no messaging involved, although the encoders are capable of sending a text string. The message is "get up and get down to the fire station right now", which generally needs no further explanation. POCSAG is unencrypted, so there would be privacy concerns with sending actual incident information in the clear with it.

While we're on the subject of old tech, until BT finally cut the last of them off, we use dialup modems to control the encoders (not dialup internet, just a hundreds-of-miles serial cable) as a backup, and dot-matrix printers to print out a hardcopy message for the crews to pick up.

All very low-tech. All very fixable. All stays working if you don't mess with it.

https://cascode.co.uk/products/2ar2-and-2ar3/
by jakelsaunders94 | 2025-12-17 22:17:19+00:00
Yeah I did consider just killing it, I'm going to keep an eye on it for a few days with a gun to it just in case.

I was lucky in that my DB backups were working so all my persistence wax backed up to S3. I think I could stand up another one in an hour.

Unfortunately I didn't keep an image no. I almost didn't have the foresight to investigate before yeeting the whole box into the sun!
by refulgentis | 2025-12-17 22:17:21+00:00
If you wait here long enough, it happens again, and again, and again, and again...to the point you start wanting to skewer it. :)

EDIT: Haskell was early 2010s Zig, and Zig is in the traditional ~quarter-long downcycle, after the last buzzkill review post re: all the basic stuff it's missing, ex. a working language server protocol implementation. I predict it'll be back in February. I need to make a list of this sort of link, just for fun.
by antognini | 2025-12-17 22:17:22+00:00
Mark-to-market can create liquidity crises when coupled with capitalization requirements, though. This can happen in, e.g., bond markets.

Say a bank is sitting on a pile of very safe bonds. If the interest rate suddenly increases, the mark-to-market value of the bonds goes way down. The bank would still expect to get the full value of all the bonds at maturity. But if the bank has to mark-to-market, the current value may be low enough that capitalization requirements force the bank to sell all the bonds in a fire sale. So even though the bank in theory could have held onto the assets and gotten exactly what it had expected from the start, it instead ends up taking a big loss.
by michaelt | 2025-12-17 22:17:35+00:00
Firstly, the attacker just wants to mine Monero with CPU, they can do that inside the container.

Second, even if your Docker container is configured properly, the attacker gets to call themselves root and talk to the kernel. It's a security boundary, sure, but it's not as battle-tested as the isolation of not being root, or the isolation between VMs.

Thirdly, in the stock configuration processes inside a docker container can use loads of RAM (causing random things to get swapped to disk or OOM killed), can consume lots of CPU, and can fill your disk up. If you consider denial-of-service an attack, there you are.

Fourthly, there are a bunch of settings that disable the security boundary, and a lot of guides online will tell you to use them. Doing something in Docker that needs to access hot-plugged webcams? Hmm, it's not working unless I set --privileged - oops, there goes the security boundary. Trying to attach a debugger while developing and you set CAP_SYS_PTRACE? Bypasses the security boundary. Things like that.
by CharlieDigital | 2025-12-17 22:17:50+00:00
What most interviews get wrong is that there are usually just a few "bullet points" that if you see them, you instantly know that the the candidate at least has the technical chops.

Instead of creating a test that specifically aims for those bullet points, many technical assessments end up with convoluted scaffolding when actually, only those key bullet points really matter.

Like the OP, I can usually tell if a candidate has the technical chops in just a handful of really straightforward questions for a number of technical domains.
by IshKebab | 2025-12-17 22:18:01+00:00
Oh I see what you're saying. It was slightly ambiguous.

But in any case, I didn't read a single textbook at uni; it was all lecture notes provided by the lecturers (fill-in-the-gaps actually which worked waaaay better than you'd think). So the answer is still no - I didn't fact check them and I didn't need to because they didn't wildly hallucinate like AI does.
by tim333 | 2025-12-17 22:19:08+00:00
I would have prefered the US to be a bit firmer about Russia not invading in 2022 like don't do it or we'll send jets.

Still here we are and like you say 600m+ of us wanting 300m+ Americans to defend against Russia is a bit odd although you can see how it got that way - after WW1 and WW2 it seemed quite a good idea not to rearm Europe and the US was quite keen to confront the Soviets. It's changing now due to Trump being a bit useless and Europe not wanting to be next on the list after Ukraine.
by dragonwriter | 2025-12-17 22:19:16+00:00
That's a soft cap, you get the full benefit if the value difference is up to $1m (in 2021, adjusted biennally for inflation since) or less, and if its greater you get the amount of value increase beyond the limit is added at full value (but the amount below the limit is still waived) in setting the tax basis value at transfer.
by minitech | 2025-12-17 22:19:38+00:00
If you didn’t mount docker.sock or any directory above it (i.e. / or /run by default) or run your containers as --privileged, you’re probably fine with respect to this angle. I’d still recommend rootless containers under unprivileged users* or VMs for extra comfort. Qubes (https://www.qubes-os.org/) is good, even if it’s a little clunkier than it could be.

* but if you’re used to bind-mounting, they’ll be a hassle

Edit: This is by no means comprehensive, but I feel compelled to point it out specifically for some reason: remember not to mount .git writable, folks! Write access to .git is arbitrary code execution as whoever runs git.
by hibikir | 2025-12-17 22:19:39+00:00
Where the AI makes a difference here isn't regular personalized advertisement (which already isn't all that great, based on the percentage of ads I get for products I would never consider at all, or are downright offensive to me), but in understanding your existing consumers, and attempting to do habituation effects.

So imagine you have a bunch of money, watch sports while drinking and are bad at math, and therefore are considered to be a great target for sports betting companies. Making sure you get used to betting most of the time you watch a game is very valuable for the company, so just realizing what teams you like, when they play, and what kind of bets might look good to you, but are really pretty iffy is very valuable to them. Just like they would love to know when you are bored, or depressed, and maybe betting on the game that is going on right now would be appealing: A level of access to you that, say, a casino, or a bar that you haven't visited in a while just doesn't have. And habituation models are simple, you don't need a very expensive system to know when offering you a discount to entice you to don't break a gambling streak will pay off

Now that is using AI in ways that are quite antisocial by most standards: the current advertisement that tries to sell me hair growth when I have all my hair isn't all that scary.
by gs17 | 2025-12-17 22:20:52+00:00
> into an AI solver

Not just an "AI solver", a Python interpreter will also do it "wrong". The idea is that it's so simple that anyone qualified should be able to do it in their head, so they get the answer without the equals sign (but IMO a qualified applicant might also know it takes 5 seconds to run it in the repl and it'd be better to be correct than to use the fewest tools, or might be using a screen reader).
by ike2792 | 2025-12-17 22:20:53+00:00
The problem is that Congress has delegated a lot of its traditional law making power to the Executive Branch. Laws are written in vague ways with executive agencies given liberty to implement as they see fit. This gives a lot of additional power to the President (who can at least be dealt with by impeachment or being voted out in the next election) as well as independent executive agency heads (who can't be directly fired by anybody). I agree that Congress should be the ones passing laws as the excessive delegation of lawmaking by Congress is what's gotten us into the current situation
by stephen_g | 2025-12-17 22:21:15+00:00
Yeah, otherwise it’d weird the new CEO had such a precise idea of the amount of money it could bring in. It makes it sound like Mozilla definitely had either considered offers from advertisers or done the maths themselves to work out potential revenue.

And for the record, as a Firefox user, count me in with the others who would switch and just use Safari on my Mac if they went through with it!
by mrkeen | 2025-12-17 22:21:16+00:00
It's Strings. They go somewhere. The interface writes itself: Consumer<String>.

At my absolute fanciest, I use a Queue, some terminal colouring, separate stderr from stdout, and write some short-hand functions (warn, err, info, etc.).

These are the bugs I don't have: https://github.com/apache/logging-log4j2/issues
by antonymoose | 2025-12-17 22:21:28+00:00
I’d love for you to elaborate :)

But along that thought, I’ve always held that a human conversation is the best filter. I’ll ask you what do you work on recently, what did you learn, what did you mess up, what did you hate about the tool / language / framework.

I strongly believe your ability to articulate your situation corresponds with your ability to do the job.
by consumer451 | 2025-12-17 22:21:43+00:00
My issue is that we have nukes... a lot of countries have nukes. We are just a swiss cheese model alignment from the end of all that we love.

If Trump traded 1/3 of Ukraine for RU and USA disarming, then even I would happily hand him the Peace Prize.

That is the opposite of what happened. I am curious what the future archeologists will see when they dig through the ashes.
by reaperducer | 2025-12-17 22:21:52+00:00
Were they global or local? I made that distinction intentionally.

Either or both, depending on the SYSOP's resources. I ran a BBS that did store-and-forward between the U.S. and Europe.

The ones with global connections could take a day to a week to forward messages, but that turned out to be a feature. We went outside in the real world instead of staying online arguing with strangers.
by pxc | 2025-12-17 22:22:04+00:00
Your username is vaguely familiar. You're a CUE enthusiast, right? I think I've read (and enjoyed and benefited from) some documentation you've written!

Yeah, I think it makes sense to also let people point to arbitrary OCI registries. I'd bet support for that is coming, especially since the execution environment is Dockerized anyway.

> Pushing nix as the DX for GHA equivalent

I think something like Nix actually makes more sense than YAML for this kind of thing. You want a DSL that is purpose-built so that configurations are declarative, simple configurations are simple to write, and configurations are composable. YAML is too much of a straightjacket. Some kind of built-in support for deep merges is a must, imo.

How powerful/expressive the language should be is debatable, I think. I'm interested in Turing-complete DSLs like Nix and Nickel, but CUE could be a good fit here, too.

Anyway I'm sure they'll add first-class support for using some OCI artifact to define a CI environment. Looks like their CI implementation only recently entered the first alpha.
by dfsegoat | 2025-12-17 22:22:21+00:00
> it’s more performant than Claude Opus 4.5 or GPT 5.2 extra high

...and all of that done without any GPUs as far as i know! [1]

[1] - https://www.uncoveralpha.com/p/the-chip-made-for-the-ai-infe...

(tldr: afaik Google trained Gemini 3 entirely on tensor processing units - TPUs)