MurphyA/hacker-news huggingface dataset:
by llmslave2 | 2025-12-18 20:09:05+00:00
This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k.

If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending like they were doing real engineering, when it turns out nobody there seems to know what they're doing, but they've managed to convince some big names to use them.

Man, it's like everything I hate about modern tech. Good job Eva for finding this one. Starting to think that every AI startup or company that is heavily using gen-ai for coding is probably extremely vulnerable to the simplest of attacks. Might be a way to make some extra spending money lol.
by echelon | 2025-12-18 20:09:42+00:00
> If anyone from OpenAI is reading this

(unrelated, but piggybacking on requests to reach the teams)

If anyone from OpenAI or Google is reading this, please continue to make your image editing models work with the "previz-to-render" workflow.

Image edits should strongly infer pose and blocking as an internal ControlNet, but should be able to upscale low-fidelity mannequins, cutouts, and plates/billboards.

OpenAI kicks ass at this (but could do better with style controls - if I give a Midjourney style ref, use it) :

https://imgur.com/gallery/previz-to-image-gpt-image-1-x8t1ij...

https://imgur.com/a/previz-to-image-gpt-image-1-5-3fq042U

Google fails the tests currently, but can probably easily catch up :

https://imgur.com/a/previz-to-image-nano-banana-pro-Q2B8psd
by jrm4 | 2025-12-18 20:09:44+00:00
Ever read something that's so mind-bogglingly stupid that you have to pause and wonder (even now) if you're the stupid one?

That's me right now.

Okay, let me walk through it. I think what's going on here is an extreme double-fallacy: The idea that (1) there is a fixed supply of money (2) that consistently and fairly translates to spending power.

Both of these things are wildly wrong, rendering this article pure idiocy.
by azemetre | 2025-12-18 20:10:08+00:00
Aha! I think I know my contention with this advice now. Who can actually disagree with this? Like I'm saying yes to everything, no one I know would say no to this. Never had a coworker say aloud: "I want to write code to make things worse."

These are the platitudes of our industry that no one disagrees with. Like you said, this is what Blow + Muratori teachings can be distilled into. But there is something worse it also assumes, coming from such people.

Both Blow + Muratori have extremely privilege dev careers that a good ~80% us will never achieve: they have autonomy. The rest of us are merely serfs in someone's fiefdom. Blow has his fief, Muratori his. They can control their fiefs but not the majority of us devs. We don't have autonomy in the direction of the company, we don't control the budgets, we don't even control who we interview or hire.

Assuming that this onus of organizational standards has to be placed on someone with no authority to dictate it isn't just. Also as someone who has consumed content from these two for about a good 8ish years as their videos pop into my feed: I've never see them advocate for workers to be empowered to make their environments better. They mostly just trash on devs that have no authority.

With that mindset I need to seriously decouple myself from these people. Plenty of other devs advocate for the same things in our craft while also advocating for better rights as workers.
by efxhoy | 2025-12-18 20:10:09+00:00
Maybe my brain is oversaturated with culture war nonsense from too much doomscrolling but that’s where my train of thought went too, even if it wasn’t directly implied.

By claiming our ancient predecessors had terrible taste you can make them look like primitive fools, and make our own modernity appear superior in comparison.

When boiled down to culture war brainrot the poor coloring in the reconstructions becomes a woke statement that the brutish patriarchal empires of antiquity have nothing to teach our sophisticated modern selves and that new is good and old is bad. A progressive hit-piece on muh heritage.

Anything you don’t like is a purple haired marxist if you squint hard enough.

Idk why my brain went there. I’m guessing the years of daily exposure to engagement-farming ragebait had something to do with it.
by rapgof | 2025-12-18 20:10:13+00:00
Hi HN — I built TheWalll, a “message wall” where posts are limited to 75 characters. The constraint is intentional: it pushes people to leave a quick signature / wish instead of writing long comments. What it does today: Walls can be free or paid Pricing options: owner sets a fixed/min price, or the visitor chooses the amount ($3 minimum) Optional tips/donations Anonymous polls/voting Owner controls: pin messages, sort by newest or highest paid Basic analytics: visitors, activity over time, paid conversion, average message value Use cases we’re testing: weddings/birthdays (digital guestbook), cafes/restaurants (notes + tips), corporate/conf events (anonymous polls + feedback).
by johnnyanmac | 2025-12-18 20:10:33+00:00
>Meanwhile the various accusations about Blow’s politics beliefs are mysteriously missing

He sort of went mask off during COVID, so I believe it. I also believe Blow is a smart dude and would try to erase that history right before a PR rally for his game.

I'm not even on Twitter but I hear about such events in the gamedev scene for years.
by the_pwner224 | 2025-12-18 20:10:49+00:00
Yeah, you need a much smaller number for e.g. giving access to journalists/media pre-release. But the key mechanism is also used for any legitimate sales or giveaways that happen outside the Steam platform.

If you buy a Humble Bundle, you get a set of Steam keys for the games in the bundle. If Intel/AMD/Nvidia are doing a promotion for a free game with a purchase of their product, they give you Steam keys. Etc.
by krapp | 2025-12-18 20:11:01+00:00
>This reads as if the process and the finished work are somehow separable. If your code is a mess that you hate working on, it seeps through to your design and your design process.

I didn't say anything about hating working on the code, but every example of game code I've seen has been a mess, even in games that are considered well designed. So I have to disagree - the process and finished work often are separable. What are ports if not an example of that?
by dymk | 2025-12-18 20:11:16+00:00
I've never heard of Odin or seen any projects written in it, seen a company hire for it, or seen it discussed at a PL conference. There's no stable compiler for it, and no spec. Yeah, I'm just one person, so maybe I'm just in my own bubble, but these are hobby projects with a very small communities.

> Many programmers

...how many?
by 6510 | 2025-12-18 20:11:36+00:00
I work alone, I have considerable amount of unfinished code laying around. Sometimes even multiple instances of a thing. I could see how it would be annoying in a team settings. The cause is not having the thing but how you organize it. Like with LLM slop it is wonderful to be able to scroll over something that shows what the solution might look like.
by marojejian | 2025-12-18 20:11:49+00:00
from x: >For the first time, an AI model (GPT-5) autonomously solved an open math problem submitted to our benchmarking project IMProofBench, with a complete, correct proof, without human hints or intervention. A small but novel contribution to enumerative geometry.

paper: https://arxiv.org/abs/2512.14575

x.com thread: https://x.com/JohSch314/status/2001300666917208222
by CupricTea | 2025-12-18 20:11:55+00:00
It could have been linked here directly instead of presented through the lens of a toxic smear community.

Presenting it through a community called "SubredditDrama" is poisoning the well[1]. I am not going to entertain that smear tactic.

[1] https://en.wikipedia.org/wiki/Poisoning_the_well
by ofconsequence | 2025-12-18 20:12:04+00:00
> The Bible ... it's probably the most consequential piece of literature ever written.

Even if you really dial in your definition of "consequential", ie. the amount of stagnated technological and societal progress and murder as a result of the Bible's adherents' efforts, this seems an absurd claim.

Most consequential piece of literature is likely the Plimpton 322 or Euclid's Elements or The Epic Of Gilgamesh. The Bible is an embarrassing footnote.
by everybodyknows | 2025-12-18 20:12:04+00:00
As cryptically referred to by the villain in the perhaps most famous of American novels. Credit Wikipedia:

> Grant became a part of popular culture in 1920s America. Author F. Scott Fitzgerald made a lightly disguised reference to Grant in The Great Gatsby. In the book, the character Tom Buchanan reads a book called The Rise of the Colored Empires by "this man Goddard", a combination of Grant and his colleague Lothrop Stoddard. ...

> ... "Everybody ought to read it", the character said. "The idea is if we don't look out the white race will be — will be utterly submerged. It's all scientific stuff; it's been proved."
by anthuswilliams | 2025-12-18 20:12:21+00:00
I have found MCPs to be very useful (albeit with some severe and problematic limitations in the protocol's design). You can bundle them and configure them with a desktop LLM client and distribute them to an organization via something like Jamf. In the context I work in (biotech) I've found it a pretty high-ROI way to give lots of different types of researchers access to a variety of tools and data very cheaply.
by spwa4 | 2025-12-18 20:12:26+00:00
But ... none of this affects this problem in a good way. The problem here is that it's cheaper to leave financed buildings empty, rather than fill them up at cheaper rents, eating the bigger loss. If anything land value tax makes the problem worse, as it would immediately become part of the financing, driving up the price. (the price, obviously, is the price the buyer paid. That the seller doesn't receive the money for the land value tax just sucks for them, it makes no difference)

Land value tax, in a world where buildings are financialized (ie. have a mortgage) and used for speculation will make things worse by making everything more expensive, hence making the big losses on underwater mortgages ... bigger. Which, you have my personal guarantee, won't affect the community in a good way at all.

Empty lots aren't empty because their owners hate you, it's because the land value is too low for the mortgage and needs to drop, but can't, they're unwilling or unable to eat the loss. The problem is investors prefer small yearly loss over eating the big loss now. Land value tax supposedly solves that ... by making everything more expensive? Of course it will do the reverse.
by gaigalas | 2025-12-18 20:12:27+00:00
The code you pointed to in apywire is related to circular dependencies in constant scalar types. Like a printf that is meant to replace %s with its whole output (therefore, impossible).

However, apywire also throws CircularWiringError if you make objects that have circular dependencies as well (we do not solve it).

The paper seems like a worth read. I skimmed over it, and it seems like an interesting solution: proxy-like objects that only allow construction-type interaction but no method calls or property access until the container fully realizes the instance.

Our overall syntax allows for that implementation in the future, and python in theory is flexible enough to allow us to go for that route.

It does seem like a lot of work, but I might try to do it (for objects, for the scalars it's impossible). I was looking for a nice feature to make the project more distinct!

Thanks for your feedback!
by demurgos | 2025-12-18 20:12:30+00:00
I looked into it for work at some point as we wanted to support SVG uploads. Stripping <script> is not enough to have an inert file. Scripts can also be attached as attributes. If you want to prevent external resources it gets more complex.

The only reliable solution would be an allowlist of safe elements and attributes, but it would quickly cause compat issues unless you spend time curating the rules. I did not find an existing lib doing it at the time, and it was too much effort to maintain it ourselves.

The solution I ended up implementing was having a sandboxed Chromium instance and communicating with it through the dev tools to load the SVG and rasterize it. This allowed uploading SVG files, but it was then served as rasterized PNGs to other users.
by burnerRhodov2 | 2025-12-18 20:12:40+00:00
> this will never work because governments will never allow for disintermediation of their currency because it’s one of, if not THE, primary sources of control over a population

So, has trump coin and world liberty financial proven your friend wrong? What about El salvador or the cayman islands?

It seems that it was you who misunderstood human nature. Greed always wins.
by bluetidepro | 2025-12-18 20:12:44+00:00
Slightly related, as someone who doesn’t engage in this type of work, I’m curious about the potential risks associated with discovering, testing, and searching for security bugs. While it’s undoubtedly positive that this individual ultimately became a responsible person and disclosed the information, what if they hadn’t? Furthermore, on Discord’s side, what if they were unaware of this person and encountered someone attempting to snoop on this information, mistakenly believing them to be up to no good? Has there been cases where the risk involved wasn’t justified by the relatively low $4k reward? Or any specific companies you wouldn’t want to do this with because of a past incident with them?
by LorenPechtel | 2025-12-18 20:12:51+00:00
Standardized data formats would greatly reduce the amount of weeding. The candidate should have compared your wants to their skills already, you cross-check their listed skills vs your wants.

And we need to sort out needs vs wants. Job postings should include the required skills (do not submit if you don't meet them) and a separate listing for additional skills that would be desirable. Don't waste everyone's time with a guessing game where people need to decide if they are close enough to the wish list.
by Jeremy1026 | 2025-12-18 20:12:53+00:00
I've been 3D printing accessories for the Volkswagen ID. Buzz since July. I started by modeling and printing a couple of things that I wanted, then added a couple of items that other owners have talked about on various subreddits and Facebook groups. I'm now moving about $750 worth of items a month. http://buzzprintco.etsy.com
by FeepingCreature | 2025-12-18 20:12:58+00:00
It's like you're describing a compression program as "it takes a big file and returns a smaller file by exploiting regularities in the data." Like, you have accurately described what it does, but you have in no way answered the question of how it does that.

If you then explain the function of a CPU and how ELF binaries work (which is the equivalent of trying to answer the question by explaining how neural networks work), you then have still not answered the actually important question! Which is "what are the algorithms that LLMs have learnt that allow them to (apparently) converse and somewhat reason like humans?"
by tsoukase | 2025-12-18 20:13:08+00:00
For me HN still maintains the impact it had when I visited it by chance in the middle of 2018:

- how wonderful and productive threads! All of them

- how simple, light and ad free UI

- where are forums of similar quality about other subjects? (never found any)

- how tf I hadn't stepped on it before, while I was losing years in places like Facebook, reddit etc?

Through participating at HN I learned to be thoughtful, humble and most importantly I feel a member of HNers!
by jackschultz | 2025-12-18 20:13:09+00:00
Infinitely agree with all. I was skeptical, and then tried Opus 4.5 and was blown away. Codex with 5.0 and 5.1 wasn't great, but 5.2 is big improvement. I can't do code without it because there's no point. Time and quality with the right constraints, you're going to get better code.

And same thought with both procrastination because of not knowing where to start, but also getting stuck in the middle and not knowing where to go. Literally never happens anymore. Having discussions with it for doing the planning and different options for implementations, and you get to the end with a good design description and then, what's the point of writing the code yourself when with that design, it's going to write it quickly and matching the agreements.
by VirusNewbie | 2025-12-18 20:13:24+00:00
haha, I was working in the industry around that time, though quite young and inexperienced and had someone pull me aside to tell me I needed to get out of coding because soon the business PM type guys (like he was) wouldn't need "guys like you" soon.

His two points were one, 'no code' tools (they didn't call it that back then); this idea that full on business apps could get created by non programmers by just tweaking some XML.

Then he was convinced the rest would be done just by cheap indians and chinese programmers.
by toomuchtodo | 2025-12-18 20:13:32+00:00
https://archive.today/ErKlA

From the post:

You can still download the latest IPA here: https://github.com/StephenDev0/StikDebug/releases/tag/2.3.6

Requires LocalDevVPN: https://apps.apple.com/us/app/localdevvpn/id6755608044
by hnlmorg | 2025-12-18 20:13:33+00:00
I think the saying “the road to hell is paved with good intentions” is more apt.

I think what’s happening isn’t some evil plot to quell opposing voices, but more likely the UK government thinking they’re actually passing laws to reduce rioting and online abuse. And the censorship effects are a side effect of these laws.

Some might consider this opinion naive but take this counterpoint: laws require a majority to pass. So if these censorship laws were written to squash opposing voices, then we’d be dealing with a literal conspiracy involving hundreds of people. I don’t believe all politicians are only in it for themselves (though I do believe many are), so you’d expect at least 1 MP to speak out if such a conspiracy existed.
by like_any_other | 2025-12-18 20:13:41+00:00
> It is not actually about moral authority it is about expertise.

I sure am glad that there is an Objectively Correct set of books children should be exposed to, unaffected by issues of identity, politics, or morality, and it's just a matter of applying dispassionate expertise to discover it.

And of course, that this is what librarians are doing, and not letting their personal beliefs interfere.
by CodeMage | 2025-12-18 20:13:54+00:00
What makes this whole thing worse is the concept of "non-terminal" levels, i.e. levels that you're not allowed to stay at indefinitely, which means that you must either get promoted or fired.

I can understand not wanting to let people stay in a junior position forever, but I've seen this taken to a ridiculous extreme, where the ladder starts at a junior level, then goes through intermediate and senior to settle on staff engineer as the first "terminal" position.

Someone should explain to the people who dream up these policies that the Peter Principle is not something we should aim for.

It's even worse when you combine this with age. I'm nearing 47 years old now and have 26 years of professional experience, and I'm not just tired, but exhausted by the relentless push to make me go higher up on the ladder. Let me settle down where I'm at my most competent and let me build shit instead of going to interminable meetings to figure out what we want to build and who should be responsible for it. I'm old enough to remember the time when managers were at least expected to be more useful in that regard.
by arcfour | 2025-12-18 20:13:57+00:00
They generally use SMS authentication. I have yet to see one that has a hard requirement for an app, let alone one that actually requires a Google account.

Regardless: The fact that a specific tool is the easiest way to do something doesn't grant you a "right" to that specific tool. For example, you have a right to seek transportation; you don't have a right to a specific 2025 Toyota Camry provided by a private company.
by flet | 2025-12-18 20:14:11+00:00
Hey! Late to the party, but a friend and I have been plugging away at CineQuote https://cinequote.net a daily movie quote guessing game that uses audio quotes.

We've been running the web site for a few years now (just past 1000 daily games!) and we just launched iOS and Android apps in the last couple months! Its been quite a learning experience for sure!
by danaris | 2025-12-18 20:14:25+00:00
> The reason why IE 6 kept haunting us all was because later versions were never available on Windows XP.

First of all, according to the IE Wikipedia page, that's not true—7 & 8 were available for XP.

Second of all, this ignores the fact that for five years, there was only IE6. And IE6 was pretty awful.

> Saying “Apple is compliant with all of W3C standards” is a bit ridiculous when this organization was obsolete long before Microsoft ditched IE. And Apple itself acknowledge that, themselves being one of the founding parties of the organization that effectively superseded W3C (WHATWG).

And now you have identified a major component of the problem: in the 2000s, the W3C was the source of web standards. Safari, once it existed, was pretty good at following them; IE (especially IE6) was not.

Now, there effectively are no new standards except for what the big 3 (Safari, Chrome, and Firefox) all implement. And Firefox effectively never adds new web features themselves; they follow what the other two do.

So when you say "Safari is holding the web back," what you are saying is "Safari is not implementing all the things that Google puts into Chrome." Which is true! And there is some reason to be concerned about it! But it is also vital to acknowledge that Google is a competitor of Apple's, and many of the features they implement in Chrome, whether or not Google has published proposed standards for them, are being implemented unilaterally by Google, not based on any larger agreement with a standards body.

So painting it as if Apple is deliberately refusing to implement features that otherwise have the support of an impartial standards body, in order to cripple the web and push people to build native iOS apps, is, at the very best, poorly supported by evidence.
by jraph | 2025-12-18 20:14:33+00:00
> Subscribing to any ideology is by definition lying to yourself.

What a bold claim.

An ideology is a set of beliefs, principles or values. Having beliefs, principles or values is not lying to oneself.

Keeping beliefs despite being confronted to pieces of evidence that negate them is.

And yes, of course I'm attached to some ideologies. I assume everybody is, consciously or not.

Also, you might want to double-check what "by definition" means, nothing in the definition of ideology reads "concerns people lying to themselves".

> Then you would be the exception, not the rule.

Citation needed. And if you can't back this up, the claim is just your intuition. A belief. Which is not worth much to us.
by iberator | 2025-12-18 20:14:36+00:00
Its gonna fail. Early web won because of simple protocols (telnet, ftp, http, rfinger, IRC, smtp, zmodem) without encryption. You could literally telnet / nc into port and DO stuff. Encryption destroyed the simplicity of the internet...

My silly opinion. Encryption is literyally only thing blocking retro computers from being usable forever... (And js)