MurphyA/hacker-news huggingface dataset:
by andrehacker | 2025-12-01 07:33:57+00:00
I stand corrected, the official current release plan is "...while each individual point release is only supported FOR THREE MONTHS AFTER THE NEXT POINT RELEASE".

https://www.freebsd.org/security/#:~:text=on%20production%20...

Recent point releases:

14.3 (June 10, 2025)

14.2 (December 3, 2024)

14.1 (June 4, 2024)

14.0 (November 20, 2023)

13.4 (September 17, 2024)

>> Also, major versions are supported for 4 years and unless you're messing with kernel APIs nothing should break.

Well, things may not break but your system may be open to published vulnerabilities like these:

https://bsdsec.net/articles/freebsd-security-advisory-freebs...

For keeping up to date with vulnerability fixes for packages/ports (which are far more frequent) the "easy" path is to use the last FreeBSD point release.
by beginnings | 2025-12-01 07:34:11+00:00
that sort of mentality is typical in researchers, but the powers that be will be thinking about profit and control, mass layoffs and AI governance in conjunction with digital id, carbon credits etc

every technological advancement that made people more productive and should have led to them having to do less work, only led to people needing to do more work to survive. i just dont see AI being any different
by avadodin | 2025-12-01 07:34:24+00:00
A lot of people try to write backends for LLVM to support obscure architectures but these guys are the only ones I know that have ever been successful to any degree.

Portable assembly has a nice ring to it but reality is a harsh mistress and she only speaks C++.

Even the hobby underdog qbe seems ill-suited to 6502 repurposing.
by lukan | 2025-12-01 07:34:41+00:00
But it did not happen, when you used a book and never executed any command you did not understand.

(But my own newbdays of linux troubleshooting? Copy paste any command on the internet loosely related to my problem, which I believe was/is the common way of how common people still do it. And AI in "Turbo mode" seems to mostly automated that workflow)
by Capricorn2481 | 2025-12-01 07:34:59+00:00
You can wish the thread was about that, but that's a completely different conversation, and you're the first to bring it up. I haven't seen any excuses for it. I don't like when I have something simple like an export tool in my app and it's suddenly gone.

But the question is how do you define what a feature is in networked apps? If you play an online game with a sniper rifle that one-shots people, and the developers nerf it, have they taken a feature from you? But everyone else loved the nerf? How do we support you and the players? Let you continue one-shotting them?

If the app you're paying for could message other users, but now they can block you, is the company supposed to give you a refund because now you can't message some users?
by goku12 | 2025-12-01 07:36:22+00:00
> In particular, unless it is explicitly mentioned in the README, it isn't at all clear how to report a bug, or submit a patch, or view relevant mailing list archives.

Those are meant to be mentioned in the README. Each of sourcehut's parts including the repo frontend, project page, mailing list, task list, documentation pages, etc are independent. There is no predefined way in which these are associated with each other like on GitHub. For example, I use a single mailing list for all of my FOSS projects.
by wqaatwt | 2025-12-01 07:37:17+00:00
> military alliance with Mexico

Ukraine never did that.

> it would take approximately 0 seconds before the US invaded

Very unlikely.

Also Mexico wasn’t never exactly that aligned diplomatically and politically with the US to begin with.

Russia on the other hand views that it has some inherent right to subjugate and dominate all of their neighbors and turn them into puppet states if not outright annex them.

> In fact this is, more or less, what the Cuban Missile Crisis

In fact this is outright drivel. The US hardly viewed Russia as their actual opponent before 2014-22. Remember Romney- Obama debate (and Obama generally bending over backwards to appease Putin most of the time).
by orbital-decay | 2025-12-01 07:37:57+00:00
It's just my observation from watching their actual CoT, which can be trivially leaked. I was trying to understand why some of my prompts were giving worse outputs for no apparent reason. 3.0 goes on a long paranoidal rant induced by the injection, trying to figure out if I'm jailbreaking it, instead of reasoning about the actual request - but not if I word the same request a bit differently so the injection doesn't happen. Regarding the injections, that's just the basic guardrail thing they're doing, like everyone else. They explain it better than me: https://security.googleblog.com/2025/06/mitigating-prompt-in...
by XiS | 2025-12-01 07:38:55+00:00
Although it's very unfortunate this happened, and it shows a lack of security practices, this could happen to any all developer. Compromising other apps you do install.

On my TV the app vanished and after some searching, it was disabled. I was kinda afraid Google had finally (ab)used it's Play Services power to ban it. But luckily it was because the developer marked it as compromised. All and all impact was minimised this way.

I doubt your statement about requiring a Google account to be connected, as you can also import subscriptions instead of granting access to your account.
by mosselman | 2025-12-01 07:40:15+00:00
Apart from the fact that not even every human would read this and add it to the subject, this would still work.

I doubt there is any spam machine out there the quickly tries to find peoples personal blog before sending them viagra mail.

If you are being targeted personally, then of course all bets are off, but that would’ve been the case with or without the subject-line-trick
by lmc | 2025-12-01 07:40:53+00:00
Typically you will get an image pair for an area every 6-12 days. The phase used in interferometry is massively affected by atmospheric conditions, which can vary a lot in this time, and are difficult to correct for. So, one pair is often not enough for this. But if you look at a bunch of pairs for that area over a longer time period, you might be able to correct for the atmospheric effects and get your differential height map. You can get more accurate elevation models 'out of the box' with different systems, e.g., the SRTM (one of the most well known publicly available global elevation maps) [1] was made with insar but 2 antennas on one craft, and Germany's TanDEM-X [2] is a pair of satellites flying in formation a few hundred meters apart, capturing the same area at the same time.

[1]: https://www.earthdata.nasa.gov/data/instruments/srtm [2]: https://en.wikipedia.org/wiki/TanDEM-X
by Someone | 2025-12-01 07:41:24+00:00
But abstract mathematics doesn’t care about solutions to problems; it cares about understanding problem spaces. I do not think current AI helps with that.

Problems like the one discussed also aren’t interesting to applied mathematicians, either, because of lack of applications.

But yes, if this kind of AI produces new materials, solves diseases, etc. they will be very useful. We wouldn’t care whether they arrived at those solutions through valid reasoning, though. A sloppy AI that has better ‘guesses/intuitions’ than humans or that can guess and check ‘guesses/intuitions' for correctness faster would be very useful.
by madars | 2025-12-01 07:42:25+00:00
Yes, it works the same way even for content Google indexed at publication time. For example, here are chatgpt.com links that Google displays as being from 2010-2020, a period when Google existed but ChatGPT did not:

https://www.google.com/search?q=site%3Achatgpt.com&tbs=cdr%3...

So it looks like Google uses inferred dates over its own indexing timestamps, even for recently crawled pages from domains that didn't exist during the claimed date range.
by johnnyanmac | 2025-12-01 07:42:32+00:00
I think it depends on which kind of entrepreneur you're aiming to be. VC breakups are amazing if your goal is to box in and become a market competitor. But as of the last decade or so there's been plenty of "incubators" to take into account. startups whose goal is instead to be sold off to some major company and get their payday that way. Those kinds of models would deteriorate, and are likely what want to prop Big Tech up.

I do hope we have more genuine competitors fighting out there for breakupps. But it's hard to say these days.
by roenxi | 2025-12-01 07:43:39+00:00
> If you're aware of any American gear that has not performed in the last 12 months then maybe you should report it rather than to resort to 'just asking questions'.

I'm not thinking of anything specific, but if you want to talk gear it is notable that US gear has failed to stabilise the front-line in Ukraine so it obviously isn't that amazing. I'm reading fairly consistent reports that the US has lost the manufacturing base to compete against the Russians [0] and Asians [1].

Compare that to the nominal spending figures [2] and the official figures for how strong the US is appear to be overstating their ability to actually win in a conflict. The money spent doesn't seem to be going in to creating a strong military as much as overcoming deficits in their ability to produce stuff.

And "questions" in the plural generally means someone asked more than one question. It's "just asking a question" in the singular.

[0] https://euromaidanpress.com/2025/06/09/russia-outguns-nato-p...

[1] https://www.csis.org/analysis/china-dominates-shipbuilding-i...

[2] https://en.wikipedia.org/wiki/List_of_countries_with_highest...
by sixdonuts | 2025-12-01 07:44:01+00:00
There are a lot of OT, safety and security infrastructure that must be run on premise in large orgs and require four to five nines of availability. Much of the underlying network, storage, and compute infra for these OT and SS solutions run proprietary OSs based on a BSD OS. BSD OSs are chosen specifically for their performance, security and stability. These solutions will often run for years without a reboot. If a patch is required to resolve a defect or vulnerability it generally does not require a reboot of the kernel and even so these solutions usually have HA/clustering capabilities to allow for NDU (non disruptive upgrades) and zero downtime of the IT infra solution.
by shoo | 2025-12-01 07:44:24+00:00
Roll 2d6, sum result. Your CI migration target is:

2. migrate secret manager. Roll again 3. cloud build 4. gocd 5. jenkins 6. gitlab 7. github actions 8. bamboo 9. codepipeline 10. buildbot 11. team foundation server 12. migrate version control. Roll again
by fragmede | 2025-12-01 07:45:45+00:00
Maybe you don't love your mom enough to do this, but if ChatGPT disappeared tomorrow and it was something she really used and loved, I wouldn't think twice before buying her a rig powerful enough to run a quantized downlodable model on, though I'm not current on which model or software would be the best for her purposes. I get that your relationship with your mother, or your financial situation might be different though.
by Marsymars | 2025-12-01 07:46:04+00:00
Sure, but there was nothing stopping people with $10k in savings in 2015 from buying Nvidia. If someone with $10k in savings had bought Nvidia in 2015, they’d have $2.5m today. But that only works for a relatively small number of people before the $2.5m is no longer $2.5m - they’re all drawing from the same $6 trillion pot. “Everyone with a good tech job” is accurate, but besides the point, it would work exactly the same if you limited it to “everyone who’s a plumber” or “everyone who’s a fedex driver”, but literally cannot work for everyone at the same time.
by intended | 2025-12-01 07:47:04+00:00
Nope - not about hostile media or otherwise.

The Republican Party is essentially merged with a media conglomerate. The media conglomerate is able to avoid dealing with accuracy by simply moving onto the next story constantly.

They found a free market way to pervert the marketplace of ideas.

I highly recommend the book, it’s pretty comprehensive, and at this point I am beyond tired having to argue the same case, its permutations and combinations and having to restart from square one each time.

People better than me have put the effort to explain how you are being circumvented.

I am not telling you not to fight the good fight, I am telling you that you were accounted for and made redundant without tripping your alarms.

It’s easy to fight me, or argue with me, because I am a comment on a screen.

I don’t know if you are someone who leans towards research and analysis first, or action first.

Either way, the best answer and data gathering in one place is in that boring ass book.
by goku12 | 2025-12-01 07:47:56+00:00
Most people don't care about the AI being trained on their FOSS repos. If they did, they would have mass migrated when Microsoft announced it. The timing suggests that the downtime and the performance issues are definitely the irritants here.

This is not to say that people shouldn't care about AI training. I was disappointed by the public response when they announced it. The GH ToS has conditions that allow them to use your code, overriding its license. Even worse, that still applies if somebody else mirrors your code there from some other forge. And they don't stop at that. I have noticed that they just scrape off code from source registries like crates.io in the name of security. I would be surprised if they didn't use that too for training their AI.
by nothrabannosir | 2025-12-01 07:48:18+00:00
You mean, when evaluating suppliers, do I push for those who don't use AI?

Yes.

I'm not going to be childish and dunk on you for having to update your priors now, but this is exactly the problem with this speaking in aphorisms and glib dismissals. You don't know anyone here, you speak in authoritative tone for others, and redefine what "matters" and what is worthy of conversation as if this is up to you.

> Don’t write a blog post whining about your morals,

why on earth not?

I wrote a blog post about a toilet brush. Can the man write a blog post about his struggle with morality and a changing market?
by faidit | 2025-12-01 07:48:28+00:00
I think my prompt and the response I get would be likely to just reflect my own biases (leftist, anti-monopoly etc), which IMO wouldn't add any more to the discussion than did my own annoyance at being downvoted, lol. I think history is so full of examples of top-heavy economies succumbing to stagnation and collapse, it almost doesn't bear mentioning any. Likewise, I think that someone with opposite opinions could get an opposite answer from a sycophantic LLM, and both of us hiding behind LLMs merely obfuscates the debate.

That is to say, I was hoping to get an elaboration of the implicit critique in the comment I originally replied to, since that person seemed so upset that they must have had a profound disagreement with the premise in the article, rather than just being upset that the author didn't seem to have used AI. I suspect they don't want to reply because they know any examples of "strong economies" where the gains were monopolized by a few key players can be easily countered with the story of how those economies subsequently entered a terminal decline, and/or relied on state subsidies to survive. It would also be self-defeating for me to consult AI since I disdain that person's apparent sentiment that we should always default to LLMs instead of having human discussions, considering evidence on our own and reaching our own conclusions.
by port11 | 2025-12-01 07:48:31+00:00
I've been unemployed for quite some time as a software developer with 13 years of experience.

The unemployment agency of my country tries to help, but the reality is that the amount of new jobs every week is staggeringly low since end-2024. The agent on my case was herself honest about the prospects. It's even worse for younger developers or very old folk.

I tuned into my old freelance network in Germany and the account manager told me they're seeing 60–70% less freelance work in tech.

I could get a job in the odd thing here and there, so I'm not immensely worried yet, plus it allows me to stay home and raise our baby. But I think everyone around me is worried, even outside tech.
by Magmalgebra | 2025-12-01 07:48:55+00:00
Yeah. For all the excesses of the current AI craze there's a lot of real meat to it that will obviously survive the hype cycle.

User education, for example, can be done in ways that don't even feel like gen AI in ways that can drastically improve activation e.g. recommendation to use feature X based on activity Y, tailored to their use case.

If you won't even lean into things like this you're just leaving yourself behind.
by cyberax | 2025-12-01 07:49:00+00:00
> New folks will never be hired. RIP to the CS degree.

We've just hired a couple of graduates, with the expectation that they are going to take some time to grow.

What I'm seeing right now is a huge influx of candidates from large companies that have zero skill. I'm not exaggerating, they can't code anything. And it's not just AI, they started working before ChatGPT came out.

Others in the industry are seeing the same and it's quite likely that your resume is getting lost.

One practical advice for resume writers from me. PLEASE, just don't put stuff like "Improved the API responsiveness by 23.123897%". Unless it's a crazy number like 100x.
by themafia | 2025-12-01 07:49:12+00:00
> Why the workers and not the customers, let's say?

Workers represent more of an investment in time and training. Therefore they represent long term value. Customers are fickle, as they should be, but if I get beat on prices today they're gone tomorrow.

> customers who believed in the company enough to give them money

You seem to be describing a donor or possibly a member of a co-op. A customer simply receives an object of value in exchange of the money. As long as they're getting a good value on a quality product then their belief in the company is not material.
by croon | 2025-12-01 07:49:24+00:00
Its' entire (stated) raison d'etre is that wikipedia is biased and wrong, so let's swap the question and instead ask for evidence of wikipedia sticking to wrong edits. If not, then grokipedia must exist for some other reason.

Edit: Of course edit spamming/concerted efforts can affect wikipedia, but I'd rather that possibility than the entire thing be edit controlled by a person with an endless string of scrupulous behaviour.
by tavavex | 2025-12-01 07:49:28+00:00
People who are "pushing an agenda" aren't arguing that there should be no cars ever, anywhere. Cars are the smallest-scale form of long-distance transport, they are unavoidable in low-density areas or for services that requires complete flexibility. All the agenda-pushers I've seen in real life are just saying that there's better options within cities, at least for a lot of people. Most of the time, most people only move within their cities, myself included. If transit within my city was in any way adequate, I would choose it over the car. I could cover those rare out-of-city edge cases with rentals or train travel.

Besides, it's not even the same in Europe. In a few countries, maybe, but in the majority the inter-city transit or transit within small towns is not even in the same universe as what's available in most of the US.
by aydyn | 2025-12-01 07:50:21+00:00
I've read this as well, heres an economist article with a graph: https://archive.ph/Y3vvz

However, there are certainly a lot of conflicting studies and data out there. And to be honest, it doesnt feel true given how much young people complain on the internet. Its hard to see which asserion is correct. It isnt necessarily correct just because one study says its so.
Show HN: I built a fast,free CVE Search API(300k+records)because NVD was tooslow
by cybersec_api | 2025-12-01 07:50:28+00:00
Hi HN,

I got tired of rate limits and slow responses from the official vulnerability databases while building a security tool. So, I decided to build my own solution.

I processed 25 years of CVE data (1999-2025), cleaned it for LLM context, and indexed it on a lightweight SQLite backend hosted on Render.

It returns structured JSON suitable for AI agents and security automation tools.

*Tech Stack:* Python FastAPI, Pandas (for ETL), SQLite (for search), Hugging Face (for data storage).

It is live on RapidAPI with a free tier for developers: https://rapidapi.com/cyberapiui/api/cybersec-intelligence

Would love to hear your feedback!
by sershe | 2025-12-01 07:50:58+00:00
I've just installed Mint on my travel laptop after windows update softbricked it, and then after a restore point recovery insisted on redownloading the update automatically on boot and re-bricking it right back.

Last time I tried Linux on desktop was Ubuntu 16 and it was all kinds of clunky, modifying text configs to make wifi work, random update services taking 100% CPU until I sudo-crippled them, etc.

On mint although everything... Just works. Including Steam and Spotify. It feels like a snappier, non-annoying version of Windows :)
by matwood | 2025-12-01 07:51:25+00:00
I got my first programming job in ~98 while still in college. I had family members telling me then that programming was a dead end and was all going to be outsourced. I lived through .com, GFC, etc... This does feel more like a reversion to the mean at this moment rather than some crash...yet. I feel for the people who only have known a job market that was easy to step into and paid great salaries because they don't know anything else. It's a lot like the people who think they are great stock pickers because they've only been investing in the greatest bull market we've ever seen.

When I came into the job market the rule of thumb was it would take 1 month/10k of salary to find a new job. Over time that moved to 1 month/20k of salary or so. Even then, someone making a FAANG type salary should be prepared to look for a ~year for a new job matching that salary. Being able to bounce from job to job while getting big raises along the way was the exception, and ZIRP only exacerbated it.
by simianwords | 2025-12-01 07:51:49+00:00
Answering myself, apparently it is a fight between administrators on the hospital end and the administrators on the insurance company end.

The insurance administrators are fighting to provide as less reimbursement as possible and the hospital administrators are fighting to provide as much reimbursement as possible. The administrators are probably doing compliance work, negotiations.

I wonder whether regulations can be used to cap the role of administrators at the expense of slightly less efficient market - this might work if administrators are just adversarially interacting and reducing their scope can help the overall picture.
by mfa | 2025-12-01 07:51:54+00:00
Are you referring to the interruptions from one question to the next that show the explanation? Those were added on purpose because originally I had this in mind for kids in the 8 -- 16 years old range and wanted it to be educational.

But I see what you mean, and it's no trouble to add an option for "rapid mode" to just blaze through questions! I'll add this to the list!
by lloeki | 2025-12-01 07:52:54+00:00
> I get constant "Making sure you're not a bot!" anime girls

That's Anubis:

https://anubis.techaro.lol/

There is an unbranded version available, allowing image customisation under a paid tier:

https://anubis.techaro.lol/docs/admin/botstopper

The only other one I've seen deployed out there in any wide capacity is Cloudflare's.

Makes sense that Codeberg favoured an open and non-centralised solution.
by themafia | 2025-12-01 07:55:27+00:00
> Well, that doesn't really align with my interests, education, personality, or skills

Ah, well for you, we have "regular altruism." Just pick a charity and send them money or donate your time to volunteer efforts in your community.

> What I mean is

Completely understandable. I was responding to the idea that being a cut throat capitalist that treads on your customers and workers to make a bunch of money that you then export some fraction of into "effective altruism" is probably missing the point of altruism entirely. I think it creates more suffering than it solves.