MurphyA/hacker-news huggingface dataset:
by uecker | 2025-12-19 09:51:53+00:00
IMHO, "C is 100% unsafe" is a misleading way to look at it and the kind of exaggeration which I criticize. Also in C only specific language features are unsafe and not all code, and you can screen for these features and also isolate critical code in helper functions. Saying these features could appear everywhere is no difference from "unsafe" possibly appearing everywhere in Rust. I agree that "unsafe" is easier to find as a keyword, but I do not think this is a fundamental advantage, especially in projects where you have a lot of such "unsafe" blocks.
by forgotpwd16 | 2025-12-19 09:52:32+00:00
Thing with LLMs, they'll tell you what a great idea and then output a design and tons of code for you which if lack the necessary knowledge will look coherent and correct. It's good to throw the design/code back in and tell them to review it and explicitly prompt them to tell you what is wrong.

So here it says your error handling maps directly to POSIX exit code. But then "On success, the function returns a non-zero value."

For the sh JIT: The slowness isn't due to the language per se but due to launching multiple processes. If performance is really the goal then you essentially need to replace every process launch with a built-in command. The benchmark is an hallucination unless can indeed be run. Hypothetical benchmarks with hypothetical results are nonsense. (Unless you've a mathematical model backing it up.)
by hackinthebochs | 2025-12-19 09:54:03+00:00
LLMs are a general purpose computing paradigm. LLMs are circuit builders, the converged parameters define pathways through the architecture that pick out specific programs. Or as Karpathy puts it, LLMs are a differentiable computer[1]. Training LLMs discovers programs that well reproduce the input sequence. Roughly the same architecture can generate passable images, music, or even video.

The sequence of matrix multiplications are the high level constraint on the space of programs discoverable. But the specific parameters discovered are what determines the specifics of information flow through the network and hence what program is defined. The complexity of the trained network is emergent, meaning the internal complexity far surpasses that of the course-grained description of the high level matmul sequences. LLMs are not just matmuls and logits.

[1] https://x.com/karpathy/status/1582807367988654081
by voodooEntity | 2025-12-19 09:54:59+00:00
Really nice finding for such a young folk - really liked reading into it.Also what i love most about it is what an actually simple vuln it is.

Tho what i find mostly funny bout it is how many people are complaining about the 4k$.

I mean sure the potential "damage" could have been alot higher, tho at the same time there was no contract in place or , at least as far as i understood, a clear bug bounty targeted. This was a, even if well done, random checking of XHR/Requests to see if anything vulnerable can be found - searching for kinda file exposure / xss / RFI/LFI. So everything paid (and especially since this is a mintlify bug not an actual discord bug) is just a nice net gain.

Also ill just drop here : ask yourself, are you searching for such vulns just for money or to make the net a safer place for everyone. Sure getting some bucks for the work is nice, but i personally just hope stuff gets fixed on report.
How to bypass YouTube ad-blocking restrictions?
by thunderarea | 2025-12-19 09:55:16+00:00
Today was the first time YouTube showed me the message “Ad blockers are not allowed”. I am trying to find a way to bypass YouTube’s ad-blocking restrictions. This is partly for personal use, but I also have a browser extension that improves the YouTube experience and, among other things, blocks ads. How can I avoid my extension being recognized as an ad-blocker from YouTube? Some users have already reported seeing this warning because of my extension.

Is it possible? Any technical insight is appreciated.

p.s. The extension is Music Mode for YouTube™
by godelski | 2025-12-19 09:55:31+00:00
If you want to be a power user, then be a power user. Switch to a fork like Mullvad or Waterfox.

Seriously, I don't get the problem here. I don't want AI in my browser either, but it is pretty simple for us who care to switch away. It's even easy for those who aren't technically skilled!

If this is what stops Firefox from drowning then I'm all for it. They are our last line of defense from a Google controlled internet. What Firefox puts in their browser isn't that critical to me (i.e. doesn't affect me) as long as it stays open source and there are forks. But Firefox dying does! So yeah, I'm gonna root for Firefox even when it does things I don't want because what I care about far more than any specific browser feature is the internet not being controlled by any single entity.

So can we make sure we're fighting the right battles?
by Omakidx | 2025-12-19 09:55:40+00:00
Hi HN

I built this as a learning project to explore rate limiting, analytics, and abuse prevention at scale.

Tech stack:

Next.js (App Router)

Postgres for persistence

Redis for rate limiting and click counters

Edge middleware for fast redirects

Interesting challenges:

Preventing link abuse without slowing redirects

Designing analytics without third-party trackers

Handling high write volume efficiently

It’s early and not production-ready — I’d really appreciate feedback on the architecture and any mistakes you spot.
by bytehowl | 2025-12-19 09:57:58+00:00
Let's imagine I have a blog and put something along these lines somewhere on every page: "This content is provided free of charge for humans to experience. It may also be automatically accessed for search indexing and archival purposes. For licensing information for other uses, contact the author."

If I then get hit by a rude AI scraper, what chances would I have to sue the hell out of them in EU courts for copyright violation (uhh, my articles cost 100k a pop for AI training, actually) and the de facto DDoS attack?
by cuno | 2025-12-19 09:59:11+00:00
This stuff dates way, way before 2004.

For non-power of two, just checked our own very old circular byte buffer library code and using the notation from this article, it is:

entriesAllocated() { return ((wrPtr-rdPtr+2*bufSize) % (2*bufSize)); } remainingSpace() { return bufSize - entriesAllocated(); } isEmpty() { return (entriesAllocated()==0); } isFull() { return (entriesAllocated()==bufSize); } incWr(int n) { wrPtr = (wrPtr+n) % (2*bufSize); } incRd(int n) { rdPtr = (rdPtr+n) % (2*bufSize); }

The 2*bufSize gives you an extra bit (beyond representing bufSize) that lets you disambiguate empty vs full. And if it is a constant power of two (e.g. via C++ template), then you can see how this just compiles into a bitmask instead, like the author's version. You read and write the buffer at (rdPtr%bufSize) and (wrPtr%bufSize) respectively.
by keepamovin | 2025-12-19 09:59:51+00:00
Cool, I am also working on a systems language targeting binaries. FreedomLang (freelang.dev) takes a radically different approach by using direct PE/Mach-O emission with zero runtime dependencies, built specifically for security agents and DevSecOps automation.

The key philosophical differences:

FSABI (Filesystem ABI) Concurrency: Instead of JIT-compiling shell pipelines, we use the filesystem as the concurrency boundary. Jobs fork with typed params written to /jobs/job<id>/inbox/*.<type>, execute in isolated processes, and write results to ./outbox. Debuggable with ls -R, reproducible, and naturally auditable. No shared memory, no race conditions.

Windows "Self-Exec" Model: Since Windows has no fork(), we re-spawn the binary with --flx-worker flags—the child reads its entire state from the FSABI inbox. Zero runtime shims, no process table magic.

Raw Assembly -> Kernel Only: Our binaries are tiny (7.5KB hello world, ~22KB for realistic file I/O + control flow + assertions) and link only against kernel32.dll (Windows) or raw syscalls (Linux). No libc, no CRT startup, direct CreateProcessA/WriteFile calls. The attack surface is just the kernel interface.

Fail-Fast by Design: fall for bugs (immediate termination), explicit variants for world state (missing files, timeouts). No exceptions, no silent recoveries that hide security issues in production agents.

We're in RFC/private beta right now, targeting security teams that need to justify every line of code running in their scanning agents and CI/CD gates. The ability to audit the entire compiler/runtime in an afternoon is the feature.

Questions on yours:

Your shell-to-LLVM JIT is fascinating -- how are you handling the semantic gap between Bash's lenient error model (pipelines succeed if any command succeeds) and POSIX's strict contracts? Do you expose multiple error handling modes, or force everything through the check/except flow?

Also curious: when you JIT-compile legacy .sh scripts, do you preserve the original behavior of things like unquoted variable expansion and word splitting, or do you enforce stricter semantics? What do you think of shc?
by Timon3 | 2025-12-19 10:00:18+00:00
Don't you worry - there are many, many ways for GPUs to inject ads :)

Of course you'll first have to dismiss the ad injected by your monitor manufacturer, but before that you'll have to dismiss the ad injected by your mouse manufacturer (or keyboard if you prefer that). Whoops, looks like your OS ads refreshed - drink another verification can! Just in time for your ISP to inject ads. But to dismiss them, first you have to dismiss the ad injected by your mouse manufacturer.

Oh look, another GPU ad! I feel lucky that all these companies want to provide me with the best information about new products and services.
Show HN: Agents.db – an AGENTS.md alternative for LLM agent context
by krazyjakee | 2025-12-19 10:02:51+00:00
AGENTS.md is a great idea but it stops working once a codebase or agent workflow gets large.

I built AGENTS.db which keeps the spirit of AGENTS.md while scaling it into a layered, append‑only, vectorized flatfile database for LLM agents.

Instead of one mutable markdown file, context lives in layers:

- Base - immutable, human‑verified source of truth

- User - durable human additions

- Delta - proposed / reviewable changes

- Local - ephemeral session notes

Higher layers override lower ones (`local > user > delta > base`), with full provenance and fast local semantic search.

No server. No SaaS. Works offline. Source‑control friendly. Exposes an MCP server so agents can read/write context safely instead of rewriting docs.

This is an early reference implementation targeting a public spec, and I’m trying to pressure‑test whether this is a better long‑term primitive than “just keep adding to AGENTS.md”.

Repo: https://github.com/krazyjakee/AGENTS.db
by klustregrif | 2025-12-19 10:03:16+00:00
Just to add yo this, the way the AppStore is set up, if you know you want to download the app “MyLocalCoffePlaces7thAppThisYear” and you search for it with the exact name. The first “Hit” will most often be an add for that exact app. And you’ll click it, despite the “natural search result” 5 rows below. This of cause is exactly the intention because the add click means apple gets to charge the app owner for the interaction because it wasn’t just a search it was an add.
by sam_lowry_ | 2025-12-19 10:03:16+00:00
It's surprising none mentioned Akoma Ntoso here.

It's a bad format for the imaginary problem but it shows that government action can actually force a change in workflows in the legal profession.

Akoma Ntoso has been pushed onto legislative bodies and by extension onto most of the legal profession in the EU and in many 3rd world countries. It does not solve the diff problem but it kind of solves the machine-readable storage of laws.
by moooo99 | 2025-12-19 10:03:22+00:00
I would be curious to see a comparison of the T&Cs in these TVs.

I generally agree that reading the T&C is on the user and you cannot blame the lack if transparency onto the company, IF the T&C are sufficiently comprehensible. Some T&Cs I‘ve read are written in obscure enough legalese that it might as well be considered hidden information
by tliltocatl | 2025-12-19 10:04:56+00:00
But does it even matter?

In the old times Zeabot Baalovich Odin was among the top mages of the Earth. [..] Genie vessels was sealed with his. King Solomon wrote him fan letters and built temples for him. He seemed omnipotent. So somewhere in the middle of XIV century he actually became omnipotent. After solving the integrodifferential equation of Complete Perfection numerically (the equation itself was known since before the ice age) he got the ability to create any wonder.

Every mage's power has limits. Some are unable to remove hair from their ears. Some are capable of controlling the generalized Lomonosov-Lavoisier law yet are still powerless to do anything about the second law of thermodynamics. A few most talented ones can stop time, but only in a Riemannian space and only for a short time. Zeabot Baalovich became omnipotent. Yet he became incapable of doing anything. The boundary condition of the Perfection equation required the wonder to do no harm to any sentient being. Not on Earth, not in any other part of the universe. And nobody, not even Zeabot Baalovich himself, could imagine such a wonder. So he abandoned magic studies forever and became the chief technical support…

A&B Strugatsky, Monday starts on Saturday.
by PurpleRamen | 2025-12-19 10:05:10+00:00
> The problem is that Mozilla keeps jumping on fads instead of focusing on their browser core.

They always did, everyone does. This is not really new, and not really that harmful in itself. The deeper problem is that you need developers who are also understanding what they are doing, what people want and need, developers who are nerdy about some topic and very deep into their understanding of it. But Mozilla seems to lack this, which is also why they have to follow every fad blindly, because they just don't know it better, have no real vision and understanding which enables them to build something really worthful. Mozilla seems to be the embodiment of what happens when you have a task and your solution is to just throw money at it until something works.

And let's be fair, it is easy to be good at something, but really hard to master it and dominate the world. It's not really their fault, they are probably doing their best, they just don't know it better, and so does everyone, including fans if we are honest. Everyone has their own preferences and goals, and often they are conflicting with each other. Mozilla has to find a common ground to server as much people as possible, and IMHO they are still good at this. Firefox used to be so much worse on some aspects, Chrome and other Browser are still worse on other aspects. Getting the perfect Browser is just not realistic.

> Give us more extensibility instead.

True, it's really a joke how many of their promised APIs never were finished after they killed XUL.

> Keep supporting v2 manifest and add more.

Didn't they say they will continue with Manifest v2?

> There were genuine technical reasons for why XUL and NPAPI had to die, but we need an equally powerful alternative.

Wasn't NPAPI mostly replaced with HTML5? Most stuff done with Flash or Java-Applets is now possible out of the box. Or is something missing?
by PunchyHamster | 2025-12-19 10:05:13+00:00
> I witnes far more people screaming against AI.

If you shove it into people's faces, they will have knee jerk reaction and hate it.

If the AI industry didn't desperately try to push it in every possible way in desperate bid to be profitable and it was just a thing that slowly gets better and is value added, not a nagging push, there would be far less of that.

But companies like MS have idea of consent of average rapist and will not even give option "no, I don't want copilot in teams", there is only "add it now" or "remind later"
by nulld3v | 2025-12-19 10:06:07+00:00
The current largest hydroelectric dam in the world is the Three Gorges Dam in China. It can generate 22.5GW (40% more power than the dam in 2nd place, which is also Chinese).

Since Jan 2024, China has on average constructed 23GW of new solar power every month. So China has effectively been adding a "world's largest dam" worth of solar power, every single month for the last 24 months.
by yanhangyhy | 2025-12-19 10:06:26+00:00
> Can you clarify what are you talking about? The US has been developing 6th-gen fighter since the mid mid-2010s - not that I'd consider it as an important new original invention.

So you think that, as an advanced military project that should have been kept under the strictest secrecy, the Chinese somehow obtained it and, based on that, developed their own sixth-generation fighter—and even managed a successful test flight while the U.S. is still at the PowerPoint stage? I don’t know which scenario would be worse for the United States.
by montgomery_r | 2025-12-19 10:06:46+00:00
Ploughing isn’t quite mowing, of course, but the great Rabbie Burns tilled the same furrow in To A Mouse: On Turning Her Up in Her Nest with the Plough, November, 1785

Wee, sleekit, cowrin, tim’rous beastie, O, what a panic’s in thy breastie! Thou need na start awa sae hasty, Wi’ bickering brattle! I wad be laith to rin an’ chase thee, Wi’ murdering pattle!

I’m truly sorry Man’s dominion Has broken Nature’s social union, An’ justifies that ill opinion Which makes thee startle At me, thy poor, earth-born companion An’ fellow-mortal!

I doubt na, whyles, but thou may thieve; What then? poor beastie, thou maun live! A daimen-icker in a thrave ‘S a sma’ requet; I’ll get a blessin wi’ the lave, An’ never miss’t!

Thy wee-bit housie, too, in ruin! Its silly wa’s the win’s are strewin! An’ naething, now, to big a new ane, O’ foggage green! An’ bleak December’s win’s ensuing, Baith snell an’ keen!

Thou saw the fields laid bare an’ waste, An’ weary Winter comin fast, An’ cozie here, beneath the blast, Thou thought to dwell, Till crash! the cruel coulter past Out thro’ thy cell.

That wee bit heap o’ leaves and stibble, Has cost thee monie a weary nibble! Now thou’s turned out, for a’ thy trouble, But house or hald, To thole the Winter’s sleety dribble, An’ cranreuch cauld!

But Mousie, thou art no thy lane, In proving foresight may be vain: The best-laid schemes o’ Mice an’ Men Gang aft agley, An’ lea’e us nought but grief an’ pain, For promis’d joy!

Still thou are blest, compared wi’ me! The present only toucheth thee: But Och! I backward cast my e’e, On prospects drear! An’ forward, tho’ I cannot see, I guess an’ fear
by SXX | 2025-12-19 10:07:41+00:00
How keys are used explained in other answers already. Number of keys you can request would obviously depend on how successful is your hame on Steam. E.g I doubt Valve would generate 100,000 keys for a game with zero sales, but likely under 10,000 is possible.

Other than selling keys they can also be used for marketing. If you for instance have a game with multiplayer, lots of DLCs or IAP then giving away keys for base game make a lot of sense: even if only 1% of people who grab the key gonna play it they can still eventually buy other copy for a friend, etc.
by moooo99 | 2025-12-19 10:08:33+00:00
I feel this is a generally strange situation. TVs seem to be pretty much the only tech that is somehow inflation proof, and that is largely due to the surveillance capitalist approach they come with.

I am a strong privacy advocate, but I also believe in customers choice. Hence, the primary issue I have with this technology is not its existence, but the lack of transparency in the pricing and the inability to truly properly opt out of this data collection.

At some point in the past year, I‘ve read someone suggest a „privacy label“ for electronics, akin to the energy efficiency labels that exist around the world. The manufacturers should be forced to disclose the extend of the data collection as well as the purpose and the ability to opt out on the product packaging, before the customer makes the purchase
by drdaeman | 2025-12-19 10:08:51+00:00
> can't just derive the pronunciation of a new word just from looking the components.

While true, I believe there’s also plenty of heuristics available to make a good guess at what the unknown word may relate semantically, and how it might sound like. Not reliable, of course, but still conveying some information for a better-than-random guess. Or am I wrong?
by sam_lowry_ | 2025-12-19 10:08:59+00:00
Writing long documents in Word is painful to the point that people prefer to stick to old tools like FrameMaker.

It's also painful in a different way than LaTeX. While LaTeX is complex but deterministic, Word just eludes your efforts in a way that does not build a coherent mental model but rather a loose set of fuzzy rules learned via frustration.

I deeply believe that this was by design and is in general part of Microsoft culture, creating a separation between programmers and users to make them suffer in their own ways. No wonder Bill Gates became a philanthropist in his later years. He knows better than anyone that future historians will figure out all the evil he expertly inflicted on the world.
by johnnyanmac | 2025-12-19 10:10:08+00:00
>If this is what stops Firefox from drowning

By having the most engaged users leave and splinter the community furtehr in hopes that Mozilla out competes the trillion dollar monopoly in a war of data centers? We really will do anything except message your policy makers, huh?

I migrated several times before and am browsing around now. Id even be so bold to say that Mozilla dying will not kill the Quantum web engine scene, so I have no allegiance to rooting for yet another billion dollar corporation that has continually proven that their customers are not their interest. But I don't think "no one cares about you, just leave" is the healthiest option for your stated goals.

>Can we make sure we're fighting the right battles?

This isn't an argument, this is my statement. I don't want my tools to be bloated.

If the entire idea of a web browser collapses overnight, I'll make due. But the last thing I'll be accused of is remaining silent and having this industry bewildered on how this apocalypse came upon them. They got feedback and ignored it, stopped competing on merits over trends, and lost sight of what people actually want. That's their choice, and they will reap what they sow.
by numpad0 | 2025-12-19 10:10:37+00:00
- sSpec S0ABC = "Blizzard Creek" Xeon type 8 version 5 grade 6 getConfig(HT=off, NX=off, ECC=on, VT-x=off, VT-d=on)=4X Stepping B0 - "Blizzard Creek" Xeon type 8 -> V3 of Socket FCBGA12345 -> chipset "Pleiades Mounds" - CPUID leaf 0x3aa = Model specific feature set checks for "Blizzard Creek" and "Windy Bluff(aka Blizzard Creek V2)" - asserts bit 63 = that buggy VT-d circuit is not off - "Xeon Osmiridium X36667-IA" = marketing name to confuse specifically you(but also IA-36-667 = (S0ABC|S9DFG|S9QWE|QA45P))

disclaimer: above is all made up and I don't work at any of relevant companies
by lodovic | 2025-12-19 10:11:55+00:00
Not everyone feels like that. Yesterday the app of my tv provider on my Samsung TV home screen suddenly shows a Prime icon in its place, prompting to install the app if you use muscle memory to control the TV. I am unable to remove this annoying ad. I really really hate ads and will go to great lengths to avoid seeing any in my private home. So I see this as an invasion of my privacy. Not buying Samsung anymore.