MurphyA/hacker-news huggingface dataset:
by iLoveOncall | 2025-12-17 21:50:08+00:00
> ls -la /tmp/.XIN-unix/javae

Unless ran as root this could return file not found because of missing permissions, and not just because the file doesn't actually exist, right?

> “I don’t use X” doesn’t mean your dependencies don’t use X

That is beyond obvious, and I don't understand how anyone would feel safe from reading about a CVE on a widely used technology when they run dozens of containers on their server. I have docker containers and as soon as I read the article I went and checked because I have no idea what technology most are built with.

> No more Umami. I’m salty. The CVE was disclosed, they patched it, but I’m not running Next.js-based analytics anymore.

Nonsensical reaction.
by omneity | 2025-12-17 21:50:19+00:00
The way I understood OP’s point is that because LLMs have been trained on the entirety of humanity’s knowledge (exemplified by the internet), then surely they know as much as the entirety of humanity. A cursory use of an LLM shows this is obviously not true, but I am also raising the point that LLMs are only summoning a limited subset of that knowledge at a time when answering any given prompt, bringing them closer to a human polymath than an omniscient entity, and larger LLMs only seem to improve on the “depth” of that polymath knowledge rather than the breadth of it.

Again just my impression from exposure to many LLMs at various states of training (my last sentence was not an appeal to expertise)
by vjvjvjvjghv | 2025-12-17 21:50:23+00:00
AI is just another tool to implement a trend that has been going on for quite a while, probably starting with massive data collection through the internet. I think it’s only a matter of time until we will be seeing individualized pricing everywhere, including retail like grocery stores or gas stations

Maybe I am getting paranoid. But to me a lot of innovation in the last years feels openly hostile and primarily designed to extract maximum money while providing only little actual benefit. AI will just accelerate this trend.
by pests | 2025-12-17 21:51:15+00:00
Some random musings this reminded me of.

I graduated HS in mid 2000s and didn't start using a calculator for math classes until basically a junior in college. I would do every calculation by hand, on paper. I benefited from a great math teacher early on that taught me how to properly lay out my calculations and solutions on paper. I've had tests I've turned in where I spent more paper on a single question than others did on the entire test.

It really helped my understanding of numbers and how they interacted, and helped teachers/professors narrow down on my misunderstandings.
by lordnacho | 2025-12-17 21:51:19+00:00
It always bothered me that certain things are not marked to market. It's pretty much the point of financializing the economy, that you can then get a current value for things, instead of being able to pretend everything is fine.

The problem is that if you don't update values continuously, you are surprised when you finally are forced to. Some stock on the public market that isn't doing well goes from 100 to 90, 80, 70... etc, and people thinking about the stock have to make decisions accordingly.

A private loan against that business can sit at 100 until the company decides it can't pay, and suddenly the loan is worth 20.
by margalabargala | 2025-12-17 21:52:30+00:00
Doing that would be good policy but bad politics. The people it would hurt the worst are the ones who vote most (older people) and the people most responsible for cities being the way they are (people who have lived in one spot a long time). So it's unlikely to directly happen, for that reason.

Piecemeal reform is much easier to swallow. Especially if you start with something like commercial properties, and especially since the increased income that results can be used to create tangible community improvements.

So even if your ultimate goal is full repeal, the correct strategy to make that come about is piecemeal reform, and pushing for a full repeal is counterproductive to that happening.
by clowncubs | 2025-12-17 21:52:34+00:00
That's awesome, and I can understand what you are saying. The immediacy of the medium is very satisfying in a way that digital immediacy for me is not. Mind/body connection or something like that.

Yes, I have shared my pieces! On social media of course (instagram/facebook/youtube), personal website, and at events. One part of this journey was a kind of audacious idea - I decided one day, after about a year and half into this, to make an LLC. I figured I could try and get this hobby to pay for itself as it isn't exactly cheap when you start getting into molding and casting the pieces. That and I was getting great responses from people. A part of me just went with a feeling ("I bet I could do that") and this whole thing has taken on a life of its own. I've just started going to local events recently (a punk flea market, a comic-con, and a Krampus Con) and I've sold some of my work, have connected with new people, and made some good connections. It's a wonderful feeling and the response from people has been nothing but soul fuel.
by bdangubic | 2025-12-17 21:52:50+00:00
it specifically addresses the entire world economy is based on fossil fuels, and attempting to redo the entire worlds economy to use non-fossil fuels is not currently doable

- it is currently doable

- china is working on it

- they will succeed

- while we flip the two insane political parties in power every 4 to 8 years that each kills everything previous one did just out of spite if for no other reason
Show HN: Yet another tool to wrap agents in a loop
by mobrienv | 2025-12-17 21:52:51+00:00
I was randomly browsing claude codes ralph wiggum plugin[1] and was surprised to see my toy project referenced. Since it appears people are getting some value out of it, thought I'd share it here...

Full disclosure, this repo itself was built with a primitive ralph wiggum loop so expect AI slop. It works though. ¯\_(ツ)_/¯

https://mikeyobrien.github.io/ralph-orchestrator/

[1] https://github.com/anthropics/claude-code/tree/main/plugins/...
by spacechild1 | 2025-12-17 21:52:59+00:00
Maybe I misunderstood, but I thought that you were arguing that with link-time optimization the compiler could see through cases such as the one I have given. As a counterargument, I brought up functions that are implemented in shared libraries, which are essential a blackbox to the compiler.

> The issue here are references, of which the compiler figures out whether this should work like a value or like a pointer.

I'm not sure I understand. A C++ reference always has reference semantics. Can you give an example?
by Veserv | 2025-12-17 21:53:00+00:00
Unary thinking has no place when considering software quality or security. Just because things have vulnerabilities does not mean that the category, severity, and frequency of them is a irrelevant consideration.

The Log4j vulnerability was effectively calling eval() on user input strings. That is utter incompetence to the extreme with immediately obvious, catastrophic consequences to anybody with any knowledge whatsoever of software security. That should be immediately disqualifying like a construction company delivering a house without a roof. "Oh yeah, anybody could forget to put a roof on a house. We can not hold them responsible for every little mistake." is nonsense. Basic, egregious errors are disqualifying.

Now, it could be the case that everything is horribly defective and inadequate and everybody is grossly incompetent. That does not somehow magically make inadequacy adequate and appropriate for use. It is just that in software people get away with using systems unfit for purpose because they had "no choice but to use substandard components and harm their users so they could make money".
by arantius | 2025-12-17 21:53:13+00:00
For one piece of anecdata:

I drive a hybrid with a weird size/shape 12V battery. (It uses the traction battery for starting, so only needs a smaller 12V for e.g. accessories and simple bootstrapping of electronics.) Though I normally do my own maintenance at this scale, when it went bad I went to the dealer because they both had the right battery and didn't charge much more than parts. Plus drove me home after dropoff, and drove me back there when it was done (a few hours later? fuzzy memory), at no extra cost.

They're not all awful?
by aziaziazi | 2025-12-17 21:53:18+00:00
> how do you make extremely tasty tofu

Marinades, breading, spices... even better if [broth, spices, vegetables...] are added in the mix before tofu coagulation. Some shops sell those but not very common.

Tempeh on the other hand is easier to elevate because the fungus "sip" marinades very quickly. If one day you find yourself in the way to cook some again don't be shy to give it your cooking love : paprika+garlic+thyme+oliveOil / coconut+curry+lime / pepper+cheese+cream. Tempeh is very adaptable and forgiving. Can be boiled, fried, poached (better when fresh), bbq...

In my humble experience a very good taste is achieved in ~5 min like so:

- mix 1/2 soy sauce + 1/2 neutral oil. Slice or dice the tempeh and dip or surround with sauce for >10sec

- pan for a few minutes with some oil. It can be eaten raw but it's better with a crust

- serve with thym and pepper on top
by avidiax | 2025-12-17 21:53:41+00:00
The inability to pay a high tax increase constantly comes up in discussions on Prop 13, and it seems like a willful failure to find a solution.

For personal property, raise the taxes, and give the home owner the option to defer the raise as a lien against the property, accruing fair interest. Nobody gets kicked out of their home, and the taxes get paid when the home is sold. If it is inherited, then the inheritors will have to increase their taxes paid at least so that the lien amount no longer increases relative to the home value.

For commercial property, cap the property tax paid by the lease-holder to the historic rate + a several percent growth to gradually meet the current tax bill. The rest of the tax becomes a lien on the property to be paid on sale, with forced payment increases if the lien to value ratio becomes too large. It would be up to the property owner whether they pay the additional tax or take it as a lien. Ultimately, commercial prop 13 was a mistake, and businesses that can't compete on a level playing field need to be gradually pressured to improve profitability or make the space available to someone that can.

Edit: one more thing that people seem to forget is that if we repeal Prop 13, we can reduce the property tax rate and keep the same tax income. So the unpayable increase is much more affordable than a naive analysis would suggest.
by charlie-83 | 2025-12-17 21:53:49+00:00
It annoys me that big-tech marketing has made most people believe that "personalised advertising" means they get ads which are more "useful" to them. I regularly see people opt in to personalised advertising because of this.

Personalised advertising is about collecting every detail about your life and using it to extract as much money as possible from you. AI advancements might be making this even more effective but it's been this way for a long time.
by waffletower | 2025-12-17 21:53:55+00:00
If this quantification of lag is anywhere near accurate (it may be larger and/or more complex to describe), soon open source models will be "simply good enough". Perhaps companies like Apple could be 2nd round AI growth companies -- where they market optimized private AI devices via already capable Macbooks or rumored appliances. While not obviating cloud AI, they could cheaply provide capable models without subscription while driving their revenue through increased device sales. If the cost of cloud AI increases to support its expense, this use case will act as a check on subscription prices.
by weare138 | 2025-12-17 21:54:00+00:00
For fuck sake, for-profit side of Mozilla, get a damn grip!

Update, since this is getting traction on Reddit

I'm not against Mozilla making money. Like a regular citizen needs to make money, companies and even nonprofits need it too.

Don't second guess yourself OP. Firefox is not a product. It's an open-source project countless people have contributed their time and dime to over the years. The Mozilla corporation didn't create Firefox, the open-source community did. Mozilla was entrusted to be the stewards of the project and have repeatedly violated that trust. Mozilla is commoditizing other people's hard work while enriching themselves in the process at the expense of the community and abused the trust we placed in them to get away with it.
by cosmic_cheese | 2025-12-17 21:54:12+00:00
My impression is that across the board, Japan (and to a similar extent, other East Asian and some Southeast Asian countries) have outsized presence in online creative spaces.

Part of that comes down to sheer numbers, but I feel there’s cultural differences that go into it too. Having lived in Japan I found that relative to the US, the average person is more likely to be decent at drawing/doodling or have interest in other forms of art.

I don’t have any special insight to why that’s true (if my experience is representative of reality — n=1 and all), but my hunch is that it might come down to an overall less self-defeating and more supportive attitude towards self-expression through art… in the US it’s common for people to completely dismiss the possibility that they could ever create anything of value, citing things like lack of talent. There’s also a consistent undercurrent of a disparaging attitude towards artists which also doesn’t help.

With those cultural differences, it’s easy to see why one group could end up with a higher percentage of creators than the other.
by TheRealPomax | 2025-12-17 21:54:20+00:00
Docker containers with root have rootish rights on the host machine too because the userid will just be 0 for both. So if you have, say, a bind mount that you play fast and loose with, the docker user can create 0777 files outside the docker container, and now we're almost done. Even worse if "just to make it work" someone runs the container with --privileged and then makes the terminal mistake of exposing that container to the internet.
by scq | 2025-12-17 21:54:31+00:00
If you don't want anything to do with EA, Konami ain't much better. They actively sabotage their former employees job prospects.

> One employee from a staffing agency said that Konami "files complaints to gaming companies who take on its former employees," causing one game company to "warn its staff against hiring ex-Kon" - "ex-Kon" being a nickname for ex-Konami employees. "If you leave the company, you cannot rely on Konami's name to land a job," one former employee said.

https://www.gamesindustry.biz/konami-accused-of-blacklisting...
by ACCount37 | 2025-12-17 21:54:45+00:00
If I wanted worthless pseudo-philosophical drivel, I'd ask GPT-2 for some. Otherwise? Functional similarity at this degree is more than good enough for me.

By now, I am fully convinced that this denial is "AI effect" in action. Which, in turn, is nothing but cope and seethe driven by human desire to remain Very Special.
by seafoamteal | 2025-12-17 21:54:50+00:00
Hi Jake! Cool article, and it's something I'll keep in mind when I start giving my self-hosted setup a remodel soon. That said, I have to agree with the parent comment and say that the LLM writing style dulled what would otherwise have been a lovely sysadmin detective work article and didn't make me want to explore your site further.

I'm glad you're up to writing more of your own posts, though! I'm right there with you that writing is difficult, and I've definitely got some posts on similar topics up on my site that are overly long and meandering and not quite good, but that's fine because eventually once I write enough they'll hopefully get better.

Here's hoping I'll read more from you soon!
by toast0 | 2025-12-17 21:55:02+00:00
> We might just want to pass a gradual phase in

You could probably adjust the annual percentage increase and find a balance between pre-prop13 problems of rapidly increasing property tax and the post-prop13 problems of significant gap between capped assessment and actual value.

Probably also need to do something about transfers via holding companies as well, since there's a ton of commercial properties that have never had their assessment cap reset because of the way the beneficial holding rules apply to corporations. OTOH, if the capped assessment grows at something like 5% per year, maybe it can catch up soon enough anyway.
by Marsymars | 2025-12-17 21:56:30+00:00
> I have yet to see any solid, significant evidence that passkeys are materially more secure than a random 32-character password + TOTP 2FA.

Not more secure, but some sites mandate email/SMS 2FA, don't support TOTP, and have added passkey support.

For these sites, using passkeys is materially more convenient than copying 2FA codes from email/SMS.
by Groxx | 2025-12-17 21:57:04+00:00
"I can erase a securely hashed password and set a new one" is very common and generally seen as safe, and does not at all require being able to "know what [the current password is]".

Most can do this. As a concrete example, phpMyAdmin has UI specifically for editing password fields: https://www.wpbeginner.com/beginners-guide/how-to-reset-a-wo...
by yesfitz | 2025-12-17 21:57:15+00:00
Since you brought up treasury bonds, during the 2023 Banking Crisis, the Federal Reserve created the Bank Term Funding Program[1] that let banks borrow against the par value of bonds, rather than the market value.

I thought it was a really elegant solution, and has made me wonder if a similar program could be used for vacant Commercial Real Estate in the cast of a national vacancy tax, land value tax, or similar value-lowering event.

1: https://en.wikipedia.org/wiki/Bank_Term_Funding_Program#Prog...
by sosodev | 2025-12-17 21:57:38+00:00
Nvidia released Nemotron 3 nano recently and I think it fits your requirements for an OSS model: https://huggingface.co/nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B...

It's extremely fast on good hardware, quite smart, and can support up to 1m context with reasonable accuracy
by albumen | 2025-12-17 21:57:44+00:00
I’m amazed by how much Gemini 3 flash hallucinates; it performs poorly in that metric (along with lots of other models). In the Hallucination Rate vs. AA-Omniscience Index chart, it’s not in the most desirable quadrant; GPT-5.1 (high), opus 4.5 and 4.5 haiku are.

Can someone explain how Gemini 3 pro/flash then do so well then in the overall Omniscience: Knowledge and Hallucination Benchmark?
by andrepd | 2025-12-17 21:57:44+00:00
Very interesting!

I wonder how Teju Jaguá compares. I don't see it in the C++ benchmark repo you linked and whose graph you included.

I have contributed an implementation in Rust :) https://crates.io/crates/teju it includes benchmarks which compare it vs Ryu and vs Rust's stdlib, and the readme shows a graph with some test cases. It's quite easy to run if you're interested!
by cosmic_cheese | 2025-12-17 21:57:45+00:00
VTuber avatar expressiveness varies wildly depending on the software and avatar artists in question. With the right software and top tier avatars, it can be quite good, but high quality avatars are extremely time consuming to create and thus expensive so only the biggest streamers tend to have those. Some agencies also force usage of less advanced agency-proprietary software to prevent talent from using the avatars without authorization.
by dang | 2025-12-17 21:58:06+00:00
Yikes, you can't do this here.

We've banned this account for repeatedly breaking the site guidelines and ignoring our requests to stop.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.
by mips_avatar | 2025-12-17 21:58:16+00:00
OpenAI made a huge mistake neglecting fast inferencing models. Their strategy was gpt 5 for everything, which hasn't worked out at all. I'm really not sure what model OpenAI wants me to use for my applications that require lower latency. If I follow their advice in their API docs about which models I should use for faster responses I get told either use GPT 5 low thinking, or replace gpt 5 with gpt 4.1, or switch to the mini model. Now as a developer I'm doing evals on all three of these combinations. I'm running my evals on gemini 3 flash right now, and it's outperforming gpt5 thinking without thinking. OpenAI should stop trying to come up with ads and make models that are useful.
by underlipton | 2025-12-17 21:58:26+00:00
Not surprised. 90% of Western VRChat users are furries *and weebs, and 90% of them just want to party. IIRC, a lot of the builders went to NeosVR and Resonite, particularly after the anti-cheat debacle.

V-ket is one of the largest virtual conventions on the platform, hosted out of - wait for it - Japan. (The winter edition is currently on-going, if anyone wants to check it out.)
by simonw | 2025-12-17 21:59:10+00:00
> Whenever I start reviewing code produced by Claude I find hundreds of ways to improve it.

Same here. So I tell it what improvements I want to make and watch it make them.

I've gained enough experience at prompting it that it genuinely is faster for me to tell it the change I want to make than it is for me to make that change myself, 90% of the time.
by complianceowl | 2025-12-17 21:59:10+00:00
Yes, and you literally just said nothing. Re-examine your comment and tell me you actually provided a substantive response. You can't. You say I'm missing critical information but make no mention of your fairy tale critical information. You make reference to "my audience". What audience? Are you making universal assumptions about my beliefs based on a very limited subset of my opinions?

I will speculate that you view yourself as a reasonably intelligent person; yet you're here, essentially arguing that a biological male can identify as a biological female--all while ignoring science; basic human biology: XX, XY.

But most people like you will turn around and say something along the lines of, "Well, that's sex, not gender." So gender is a social construct, and those that fabricated that construct are now going to force society to participate in their fabrication?

Get a grip, man! You're not convincing anyone of your non-sense. But keep coping; that's all you can do: cope.
by anigbrowl | 2025-12-17 21:59:38+00:00
Yep, this has wiped out my favorite deli, local cinemas, and bookstores in the east bay. Basically non-capital-intensive businesses seem to pay the price for the market signal falsification engaged in by landlords and banks. But nobody wants to bite the bullet and risk setting off a repeat of the 2008 financial crisis, so we've ended up with some kind of hypernormalization-style fake economy which is being 'run' by a former reality TV star and a bunch of TV personalities and political entrepreneurs.
by dragonwriter | 2025-12-17 21:59:59+00:00
> It would make sense to have those Pigouvian taxes no matter what. But having an LVT is orthogonal

It is absolutely not orthogonal; LVT by design makes doing things with property that are less financially remunerative unviable, it’s key selling point is eliminating “less productive” uses by that mechanism. This exacerbates any divergence between market incentives and social utility.
by powvans | 2025-12-17 22:00:21+00:00
100%

Though I will say, HN is a pretty great source of information about major outages like the recent AWS and Cloudflare issues. I had a moment this morning where I thought, oh, is there a larger issue and then, oh, HN is down, huh, the next option is so far down my list that it's going to take me a moment to think of it.

I hope that serves as a testament to how great this site and the community is. Thanks for all your hard work keeping it that way!