MurphyA/hacker-news huggingface dataset:
by benzesandbetter | 2025-12-08 09:17:08+00:00
Hi Peter, thanks for doing this AMA!

I'm a US citizen and my girlfriend is Iranian. She's been in the states for 7 years, first on a student visa then applied for her green card 1.5 yrs ago on NIW, currently "pending status change".

She's a jeweler and metal artist and owns a jewelry brand in the US. Never had any legal problems in the US, and nothing in her background of social media that would be a detriment to her review process.

Curious about your thoughts on the outlook for green card processing for Iranian citizens in general, given the administration's recent movements.

In her specific situation, would marriage provide a more robust chance of having her GC application approved? Is it even possible to re-apply for the GC while she's in the current "pending status change" state?
by 123malware321 | 2025-12-08 09:17:13+00:00
nice read but i think i dont agree really on the higher thinking part.

it says higher thinking is the key to not be outpaced by AI, but they are designing now systems with AI that do just that... you will not be able to outpace it.

I think ultimately, either a large part of jobs will completely disappear, or drastically change shape.

You can see the same in factories, where new equipment replaces workers, now that equipment needs maintenance / operators etc. , which also get automated, and changes again the jobs in the factory, on and on.

It might be hard to accept, but ultimately a lot of jobs will disapear and that means there will be much less jobs. A solution would be not to be required to have a job, but in our current economic / political system this is not possible in 90+% of communities. (some places have the right culture for this... but its usually remote and harsh places...).

If you want to keep having 'value' in this sense, hard skills are likely going to be more useful. handicrafts too. manual labor that still needs to be done manual or has added quality if done manually by a human.

robots are much harder to build to replace your intricate skills than say a piece of software that automates your daily office tasks, whatever that office job might be.

Also ofcourse which, i think, won't go away, is a lot of social work. that might even become more and more. why? people will get depressed being out of a job in massive scales. people will feel useless because the world is changing from a 'person has value because they can provide xyz' to a totally different paradigm (maybe we'll need to be nice to eachother for one?? YUCK). And ofcourse, a lot of social work, works because its done by humans. there are many things a human can offer which a robot or AI cannot. like closeness, holding someones hand if they are about to cry, yada yada.

I hope, that humans will accept that most work will be done by software and drones. and that it will lead people to look at other ways of putting value to themselves and others.

maybe then there is a chance that humans will become more human again - and drones can be drones. like it should be. (a lot of humans are drones now because they do the work of drones!)
by wiseowise | 2025-12-08 09:17:23+00:00
It might be true, but it is extremely reductive and used pejoratively.

> That’s not a book, that’s just a soup of letters! That’s not an art, that’s just paint on a sheet! That’s not an instrument, that’s just a bunch of crap glued together!

If you’re edgy cynic and treat anything this way, that’s fine. But if you’re singling out LLMs just because you don’t like them, then you’re a hypocrite.
by teekert | 2025-12-08 09:17:45+00:00
As OP says: He was radicalized.

I like some aspects of Ayn Rand, I like some aspects of crypto. I like some things Elon did.

One takes in info, incorporates it into ones world view. One does not go nuts following just one gospel as absolute truth.

This piece has nothing to do with Ayn Rand, or Crypto. It's just another example of how, when you're young, some oversimplifications can make you feel like you really understand the world. It's important to guide the young ones through this phase. I also remember putting down Atlas Shrugged thinking I'd find THE WAY. But it's the start of a learning process. Models (as in the models of the world we build in our heads) are useful, but always approximations. One needs to learn to appreciate that. For me that came with age, OP is going through something similar.
by _jzlw | 2025-12-08 09:18:09+00:00
Take a look at AdGuard Home. It's functionally similar to pihole but overall better made / easier to use (IMO). I only use the first AdGuard DNS Filter and have only need to allow one domain to unbreak a site, but I also combine it with the browser extension (DNS-level blocking isn't going to remove all ads no matter what you do). You can check the query log to see what's getting blocked.
by simgt | 2025-12-08 09:18:30+00:00
Sails [0] [1] [2] are obviously more sustainable than the gigantic industry needed around batteries this size. That'd of course massively increase the cost of shipping and suddenly producing most things locally would make more economical sense. Bye bye £2 jeans from Shein.

[0] https://www.towt.eu/en/home/

[1] https://www.neoline.eu/

[2] https://graindesail.com/fr/voilier-cargo-grain-de-sail-3/
by guttural | 2025-12-08 09:18:33+00:00
I bet these batteries would be standard container sized and they could be shipped as normal containers would be wherever cheap power is available from nuclear or solar or maybe water. Australia could be huge here, back in 2024 there were news of a six gigawatt solar farm in remote Northern Australia. Based on my very vague knowledge of the geography I presume there's plenty more desert to build solar there. Charge the battery-containers, ship them to China.
by kragen | 2025-12-08 09:19:11+00:00
Fraud detection is a Red Queen's race. If the amount of resources that goes into fraud detection and fraud commission grows by 10×, 100×, 1000×, the resulting increase in human capacities and improvement in human welfare will be nil. It may be technically challenging but it isn't technology.

Operations research is technology, but Uber isn't Gurobi, which is a real tech company like Intel, however questionable their ethics may be.
by lsth | 2025-12-08 09:19:52+00:00
There is a third option besides replacing your window manager with EXWM or a simpler tiling window manager: to manage desktop windows from within Emacs using your existing X11 window manager or Wayland compositor. This means - you can position and resize all desktop windows, - you can switch between Emacs and desktop windows by moving to the left, right, up, down window and - you can switch back and forth between a named desktop app like Firefox, okular etc. and Emacs.

You need to install just the Emacs package Emacs Desktop Window Manager (dwin) https://github.com/lsth/dwin, for example from MELPA. Currently it works with X11 window managers as well as with KDE/KWin on Wayland or X11 (using xdotool and kdotool, resp.). I am using it all day myself on KDE/KWin Wayland in my standard setup and there it works fine.

(I am the author.)
by jonathanlydall | 2025-12-08 09:20:14+00:00
Interesting.

I regularly download our signed installer often within a minute of it being made available, never noticed a delay.

Maybe it’s very the first time Windows Defender sees a particular org on a cert.

I renewed our cert literally on Friday, tested by making a new build of our installer and could instantly install it fine.

You sure there was no other non Windows default security software on your bosses machine?
by matsemann | 2025-12-08 09:20:14+00:00
So your lack of technical knowledge or curiosity means Java wasn't incredible? That's certainly... a take. I'm almost curious: why did you end up holding strong beliefs like these, instead of actually investigating? As a curious person, when I hear something I don't know I like to learn - not just dismiss it. FYI, your .jar complaint is almost a decade out of date.
by adrian_b | 2025-12-08 09:20:35+00:00
Many decades ago I have written some MS-DOS GPIB device drivers.

In MS-DOS there was no memory protection or I/O port protection, so the separation between kernel and user was not a concern when writing a device driver.

The implementation of the communication protocols of the various GPIB instruments is something that should be done by a library in user space, and this will be the bulk of the code required by a GPIB application.

There are however a few functions that must access protected resources, e.g. I/O ports on the GPIB interface card, DMA channels and interrupt handling, and these protected resources will vary between interface cards.

Those functions must be contained in a kernel-mode device driver, but it should be relatively small and it would contain the code that is specific to the different kinds of GPIB interface cards, but which is the same for any kind of GPIB instrument that could be attached to the computer (while the user-space library should not depend on the GPIB interface card, but it should contain all code specific to various classes of GPIB instruments).

It would possible to have a GPIB device driver working in non-privileged user mode, but this is something that Linux unfortunately does not implement. For such a non-privileged device driver, the kernel would have to map with allowed access any memory-mapped I/O resources from the interface card and it would also have to create an I/O port permission bit map allowing direct access to the I/O ports of the interface card.

Then the GPIB application would link the library that implements the GPIB communication protocols and it would use IPC to communicate with the user-mode GPIB device driver, which could access the GPIB interface card.
by jeroenhd | 2025-12-08 09:20:41+00:00
> Windows used to be "just post the exe on your web site, and you're good to go."

That's also one of the main reasons why Windows was such a malware-ridden hellspace. Microsoft went the Apple route to security and it worked out.

At least Microsoft doesn't require you to dismiss the popup, open the system settings, click the "run anyway" button, and enter a password to run an unsigned executable. Just clicking "more details -> run anyway" still exists on the SmartScreen popup, even if they've hidden it well.

Despite Microsoft's best attempts, macOS still beats Windows when it comes to terribleness for running an executable.
by Lio | 2025-12-08 09:22:01+00:00
We don't know who the perpetrators were. There's speculation that it was carried out by Russia itself.

Your blaming it on Ukraine and US without proof, much like your suggestions that Ukraine should surrender to stop the war, is suspcious.

Face facts, Russia could stop the war anytime they like because they started it. Where as for Ukraine surrending doesn't stop the mass killings or the kidnapping of their children.

We know that because in areas that have been conquered by Russia these things have continued.
by jackfranklyn | 2025-12-08 09:23:03+00:00
The real kicker is that LLMs were trained on modern web dev content where "tables for layout" is a cardinal sin. So you're asking it to do something its training data actively told it NOT to do for years.

Email HTML development is the last bastion of table-based layouts and it's wild that it's still necessary in 2024. Every time I touch email templates I feel like I'm time traveling.
by paganel | 2025-12-08 09:23:14+00:00
If you continue with the idea of transfers, which is, in effect, the current government buying off parts of its constituents, then "democracy", whatever has remained of it in the West, will die for good. What happens if I receive money from the Government but in the same time I'm also actively opposed to said Government's actions? Will I be allowed to speak against the Government that is, as a matter of fact, paying me? Will I have second thoughts of doing it? Will the Government cut off aid to me if I'm too vocal against said Government's actions?

All this to say that all we're doing is turning most of our countries' citizens into de facto slaves, people with no political free-will and who are well-aware that if they were to speak out against the powers that be they risk destitution.
by amluto | 2025-12-08 09:24:34+00:00
> The researchers identified four fundamental security properties that CI/CD systems need: admittance control, execution control, code control, and access to secrets.

Why do CI/CD systems need access to secrets? I would argue need access to APIs and they need privileges to perform specific API calls. But there is absolutely nothing about calling an API that fundamentally requires that the caller know a secret.

I would argue that a good CI/CD system should not support secrets as a first-class object at all. Instead steps may have privileges assigned. At most there should be an adapter, secure enclave style, that may hold a secret and give CI/CD steps the ability to do something with that secret, to be used for APIs that don’t support OIDC or some other mechanism to avoid secrets entirely.
by mpeg | 2025-12-08 09:24:58+00:00
That’s not correct, the accent is simply there to know how to pronounce the word, and while in some specific cases (diacritic accent) it is there to avoid confusion in words that are pronounced the same with different meaning, the presence or lack of accent does not as a rule change the meaning of a word.

In this case, catala and català mean the same thing, one is simply misspelled as all words with the strong syllable being last will always have an accent mark if they end in a vowel.
by bigfatkitten | 2025-12-08 09:24:58+00:00
I worked for a large financial institution in the early 2010s.

They ran Windows XP, IE 8, and they stuck with a 3-4 year old JRE to support one piece of shit line of business app that was used only by about 100 (out of 50,000) users internally.

That institution had endpoints popped by drive-by exploit kits dropping banking trojans like Zeus daily.
by avereveard | 2025-12-08 09:25:04+00:00
It mostly was politics. Browser crashes and slowness were almost always traced down to microsoft own java plugin that strongarmed proper java plugin install out of the way every update and every now and then to be sure, with a semi compatible runtime and a classloarlder that insisted fronting the dow load of all resources.

It created so much uncertainty across the ecosystem even today people repeat the "applet crashes browser line, god riddance" line

But it was deliberate action by microsoft.

So yeah 100% politics because without a court document in modern society we cannot call this anything else.
by aloha2436 | 2025-12-08 09:25:05+00:00
> It's for doing the things where the existing system fails you, not the things where it works. But it can do those things too.

Only as long as its use for the former doesn't outweigh its use for the latter. Trying to resist a government by using a digital currency is putting the cart before the horse. The dollar is an abstraction and an accounting convenience over the genuine temporal powers of the consensus that issues it.
by cyberax | 2025-12-08 09:25:18+00:00
Yep. I'm switching our workflows to instead use regular utilities running inside a Docker container.

This works well for _most_ things. There are some issues with doing docker-in-docker for volume mapping, but they're mostly trivial. We're using taskfiles to run tasks, so I can just rely on it for that. It also has a built-in support for nice output grouping ( https://taskfile.dev/docs/reference/schema#output ) that Github actions can parse.

Pros:

1. Ability to run things in parallel.

2. Ability to run things _locally_ in a completely identical environment.

3. It's actually faster!

4. No vendor lock-in. Offramp to github runners and eventually local runners?

Cons:

It often takes quite a while to understand how actions work when you want to run them in your own environment. For example, how do you get credentials to access the Github Actions cache and then pass them to Docker? Most of documentation just tells: "Use this Github Action and stop worrying your pretty little head about it".
by Havoc | 2025-12-08 09:25:32+00:00
Just finished my first fully vibe coded app. A proxy for Claude code to transparently switch between providers on the fly. Zero lines written by me

It works, but I wouldn’t give it to someone else to use because I have little idea how to fix or troubleshoot it beyond shouting at an LLM.

It’s weird.

I don’t think the authors thesis about „radical“ apps is right though. You can definitely arrange simple vibe coded components in novel ways. Much of the business logic out there powering billion dollar companies isn’t exactly mind bending innovative code
by theahura | 2025-12-08 09:26:13+00:00
I was able to get Claude to do this, though it kinda sorta cheated. Blog post describing the output here: https://theahura.substack.com/p/i-successfully-recreated-the...

TLDR:

"The plan is designed to ‘autoformalize’ the problem by using Test Driven Development (TDD). TDD is incredibly important for getting good outputs from a coding agent, because it helps solve the context rot problem. Specifically, if you can write a good test when the model is most ‘lucid’, it will have an easier time later on because it is just solving the test instead of ‘building a feature’ or whatever high dimensional ask you originally gave it.

From here, Nori chugged away for the better part of half an hour in yolo mode while I went to do other things. And eventually I got a little pop up notification saying that it was done. It had written a playwright test that would open an html file, screenshot it, diff it with the original screenshot, and output the final result...

After trying a few ways to get the stars to line up perfectly, it just gave up and copied the screenshot in as the background image, then overlaid the rest of the HTML elements on top.

I’m tempted to give this a pass for a few reasons.

This obviously covers the original use case that tripped up Jonah.

It also is basically exactly what I asked the model to do — that is, give me a pixel perfect representation — so it’s kind of my fault that I was not clearer.

I’m not sure the model actually can get to pixel perfect any other way. The screengrab has artifacts. After all, I basically just used the default linux screenshot selection tool to get the original output, without even paying much attention to the width of the image.

If you ask the model to loosen the requirements for the exact screengrab, it does the right thing, but the pixel alignment is slightly off. The model included this as index_tiled.html in the repo, and you can see the pixel diff in one of the output images..."
by AnthonyMouse | 2025-12-08 09:26:28+00:00
It's a single-member LLC. The person doing the labor and the person who owns the company are the same person and whether they pay themselves the money as wages or dividends is not really the issue.

A thousand employees is a business on the scale of a mid-sized bank or companies like VeriSign or LendingTree or Iridium Communications. Companies with something like a billion dollars in revenue. $10M in revenue is a small business.
by diziet | 2025-12-08 09:27:09+00:00
"You will get less leads with the 'enterprise style' contact page. You don't have enough leads right now. You don't have low value self-serve users you want to turn away. Your BDR team is not overflowing with leads you need to turn away. You can make money from having more leads. Less leads will generate less revenue. Here are some potential metrics from the two styles of contact pages. Here is how these metrics tie into revenue."

I think an honest message like this, at least communicated via email to the budget owners would abscond... or at least absolve one of any guilt.

Also, thank you for having the option to toggle the font. I wrote a css rule, but found it later.
Show HN: SimpSave – A lightweight Python KV store with read‑and‑use persistence
by WaterRun | 2025-12-08 09:27:18+00:00
How do you persist data in Python? The most standard way is, of course, using a database. But for many small scripts or student assignments—where the data size might be just a few thousand entries, a few dozen, or even just a handful—not to mention SQLite, even something as light as tinydb might feel “not portable enough.”

simpsave, as the name suggests, is an extremely lightweight Python library that is very simple to use and ideal for Python beginners. It provides a minimal functional-style API to persist Python’s basic data types, and it supports true read‑and‑use behavior: the type you write in is exactly the type you get back out. You can even skip type checking and conversion entirely.

simpsave 10 update supports multiple storage engines. You can choose how your data is stored: XML, YML, TOML… or even SQLite (which offers somewhat “production‑level” performance, although the functional API creates a new connection each time). simpsave also supports the unique :ss: mode—files beginning with :ss: are stored in the package’s installation directory, allowing scripts in different directories to easily share the same database.

As a Python library, you naturally install it via pip: pip install simpsave

A simple usage example:

import simpsave as ss ss.write('name', 'Alice') ss.write('age', 25) ss.write('scores', [90, 85, 92]) print(ss.read('name')) print(ss.read('age')) print(ss.read('scores')) print(ss.has('name')) print(ss.has('email')) ss.remove('age') print(ss.has('age')) ss.write('user_admin', True) ss.write('user_guest', False) print(ss.match(r'^user_')) ss.write('theme', 'dark', file='config.yml') print(ss.read('theme', file='config.yml')) ss.write('key1', 'value1', file=':ss:config.toml') print(ss.read('key1', file=':ss:config.toml')) ss.delete() ss.delete(file='config.yml')

You can read the full documentation at: https://github.com/Water-Run/SimpSave/blob/master/source/REA...

If this project is helpful to you, feel free to visit GitHub and leave a star to support it :-)
by cyberax | 2025-12-08 09:27:23+00:00
You might want (or _need_) to sign your binary, for example. Or you might want to trigger a deployment.

Github actually is doing something right here. You can set it up as a trusted identity provider in AWS, and then use Github to assume a role in your AWS account. And from there, you can get access to credentials stored in Secret Manager or SSM.
by putna | 2025-12-08 09:27:27+00:00
Harvis is a vibe coding agent to build on top of Cloudflare workers.

Harvis HUB is a tool to build a super prompt for vibe coding and get final result in one shot.

Many engineers can imagine the app if they see the data model upfront - this does exactly that. You model the data with dbml, add enum values and relations. Then select the frontend design and AI optimize the final prompt. Copy/Paste final prompt to harvis.io and you will get final app with first try.

Please let me know what you think of this approach. Andrius Putna.
by writebetterc | 2025-12-08 09:27:31+00:00
> A stack based machine? Why?

The JVM being a stack-machine is probably the least controversial thing about it. Wasm, CPython and Emacs all also have a stack-based bytecode language. The value, of course, comes from having a generic machine that you can then compile down into whatever machine code you want. Having a register machine doesn't seem very useful, as it's completely unnecessary for the front-end compiler to minimize register usage (the backend compiler will do that for you).

Specifying classpath isn't fun, I agree with that. Launch performance isn't good, and is generally a consequence of its high degree of dynamicism and JIT compiler, though of course there are ways around that (Leyden).

> I've written entire programs in JVM bytecode, without a compiler, and I see very little of value in it

I agree, I also see very little value in manually writing JVM bytecode programs. However, compiling into the JVM classfile format? Pretty darn useful.