MurphyA/hacker-news huggingface dataset:
by Fnoord | 2025-12-04 03:39:20+00:00
http-only makes it also very easy to sniff for LE if they decide to. This allows them to get knowledge about cases. Like, they could be scanning it with their own AI tool for all we know. In a free country with proper LE, this would neither be legal nor happening. But I am not sure the USA is remaining one, given the leader is a convicted felon with very dubious moral standards.

The problem here however is that they get away with their sloppiness as long as the security researcher who found this is a whitehat, and the regular news won't pick it up. Once regular media pick this news up (and the local ones should), their name is tarnished and they may regret their sloppiness. Which is a good way to ensure they won't make the same mistake. After all, money talks.
by stevenicr | 2025-12-04 03:41:13+00:00
I've installed fresh matrix about 8 times or so, got it to work 3 of those times. I started looking for how to do a fresh install earlier this year (matrix/synapse element) and I have no idea which docs to use,

It was bad enough before that I had to detour to random places to find workarounds for things like how nginx does it's thing differently than the matrix docs I was reading at the time.. but now with the newer element that makes it easy to not find a self hosting way - to main docs being listed as archived or old -

I'd enjoy installing it fresh with someone from matrix watching the process just to see what a slog it is - and then watch someone try to get some addins running like admin and moderation.

wordpress is a one click install via softalicious and similar on most cpanel 10$ and up hosts.. you can one click add a decent free chat plugin if you are on a VPS.

If matrix was that simple to setup, lots of people would be using it.
by echelon | 2025-12-04 03:41:41+00:00
OpenAI is having to pull insane amounts of funding to even stay alive.

Google is about to lay waste to everyone.

Google is using their nation state wealth to once again dominate a new sector. Wealth gained from unfair monopolization of search and web and mobile.

Google changed the notion of the URL bar to search. They control every ingress. Now, if you want to access a name brand registered trademark, it flows through Google search. Brands have to pay extortion money to Google to keep others from sniping their rightful name brand.

Google gets even more money because there's a bidding war.

Google pays to put themselves as middle men in front of nearly every web access.

Google doesn't just have a monopoly on this, it's downright unethical and should be tried in court or have laws written to make this illegal.

I have no love for OpenAI, but how do they even compete with the hundreds of billions of dollars this nets?

> Monopolies never last in the tech industry

Google is an invasive species in the ecosystem. They're killing viable competition by engorging themselves and taxing non-productively.

Capitalism should be hard. It should be live or die regardless of size or scale. Google is barely breaking a sweat.
by hedora | 2025-12-04 03:42:12+00:00
How did Uzbekistan increase their model’s global economic loss from 20% to 60%?

I really want to know what arithmetic error was made, and how it got past peer review.

Did it predict a China-size negative output in the future, or assume a current China-size economic output for that county?

(Having said that, 60% loss by 2100 seems completely plausible to me, and 20% sounds like wishful thinking. Big chunks of the US southwest have obviously lost more than 20% of their economies to climate change since 2000…)
by donflamenco | 2025-12-04 03:44:28+00:00
Micron isn't exiting the consumer business. Their consumer brand (Crucial) is going away.

You don't buy SK Hynix or Samsung RAM (unless you are an OEM typically.)

Consumers can still buy RAM from companies like G.Skill, TeamGroup, Corsair, Kingston, etc. Those companies can use chips from any of the big three.
by ants_everywhere | 2025-12-04 03:44:35+00:00
I think if you take a step back and try to fight against confirmation bias you'll see that the arguments you're making are very weak.

You are also moving the goal posts. You started with it was sketchy to claim a namespace now you're moving to it's sketchy to own domains. Of course people are going to buy variants on their domains.

This is easily in the top 5 most toxic moments in open source, and off the top of my head seems like #1. For all you know this is some kid in a country with a terrible job market trying to create a resource for the community and get their name out there. And the Zig community tried to ruin his life because they whipped themselves into a frenzy and convinced themselves there were secret signs that an AI might have been used at some point.

I've never seen an open source community gang up like that to bully someone based on absolutely no evidence of any wrong doing except forgetting to include an attribution for 22 lines of code. That's the sort of issue that happens all the time in open source and this is the first time I've seen it be used to try to really hurt someone and make them personally suffer. The intentional cruelty and the group of stronger people deliberately picking on a weaker person is what makes it far worse to me than the many other issues in open source of people behaving impolitely.

This is an in-group telling outsiders they're not welcome and, not only that, if we don't like you we'll hurt you.

And yes there have been repeated mentions of their interest in crypto, including in this thread.
by allenz_cheung | 2025-12-04 03:46:01+00:00
Hi HN, I'm working on CodeProt. We recently wrote about how we use static analysis (AST and data-flow) to catch performance killers like Zip Bombs and architectural bottlenecks (e.g., full DB reloads) early in the review process.

We found that performance isn't just about speed—it's about availability. A single unconstrained extraction or a bad architectural pattern can bring down a system just as effectively as a DDoS.

Curious to hear how others are automating these kinds of architectural checks.
by vablings | 2025-12-04 03:46:35+00:00
https://www.youtube.com/watch?v=IS5ycm7VfXg

Here is a video of Sam Aloof who now runs Atomic Semi with Jim Keller. It likely took thousands of dollars to make his own custom Z2 chip that only has 1200 transistors and its nowhere near the likes of the 68k or Intel 386. They might have more advanced stuff now at Atomic Semi but they haven't announced anything
by miguelspizza | 2025-12-04 03:47:14+00:00
Hate to say it but this sounds like a skill issue. The reason Typescript monorepos are gaining popularity for building with AI is because of how powerful TS's inference system is. If you are writing lots of types you are doing it wrong.

You declare your schema with a good TS ORM then use something like TRPC to get type inference from your schemas in your route handlers and your front end.

You get an enforced single source of truth that keeps the AI on track with a very small amount of code compared to something like Java.

This really only applies to full stack SAAS apps though.
Show HN: Kling O1 Image –Consistent Image Generation from Multi-Reference Inputs
by lu794377 | 2025-12-04 03:47:16+00:00
Hi HN,

we’ve been building Kling O1 Image, an image-generation tool that extracts core features from up to 10 reference images and produces visually consistent results across scenes and compositions. It’s designed for creators who want stable character design, precise edits, and controllable style without heavy editing workflows.

Key features:

High Feature Retention

Extracts contours, materials, and tone across multiple images to keep identity and style consistent in series. Useful for IP character design, comics, and brand visuals.

Precise Detail Modification

No professional editing required. Add, remove, or modify details using natural-language instructions while preserving lighting, texture, and overall style continuity.

Accurate Control of Style & Tone

Reconstructs reference styles — brush strokes, palette logic, and composition — enabling cinematic scenes, 3D figurine looks, and niche aesthetics with natural blending.

Rich Imagination

Blend different concepts, doodles, and visual ideas without awkward seams. Supports creative composition for complex themes and scene design.

Use cases: Filmmaking & pre-production, portrait stylization, e-commerce visuals, IP design, comic/webtoon scenes, posters, concept art, social content.

We’d love your feedback on:

• How you’d use multi-reference image generation in your workflow

• What integrations or APIs would help your pipeline

Try it here:

https://www.klingo1ai.net/kling-o1-image?i=d1d5k
by crystal_revenge | 2025-12-04 03:47:23+00:00
I'm a big fan of the concept of 初心 (Japanese: Shoshin aka "beginners mind" [0] ) and largely agree with Sazuki's famous quote:

> “In the beginner’s mind there are many possibilities, but in the expert’s there are few”

Experts do tend to be limited in what they see as possible. But I don't think that allows carte blanche belief that a fancy Markov Chain will let you transcend humanity. I would argue one of the key concepts of "beginners mind" is not radical assurance in what's possible but unbounded curiosity and willingness to explore with an open mind. Right now we see this in the Stable Diffusion community: there are tons of people who also don't understand matrix multiplication that are doing incredible work through pure experimentation. There's a huge gap between "I wonder what will happen if I just mix these models together" and "we're just a few years from surrendering our will to AI". None of the people I'm concerned about have what I would consider an "open mind" about the topic of AI. They are sure of what they know and to disagree is to invite complete rejection. Hardly a principle of beginners mind.

Additionally:

> pc manufacturers never were able to even imagine what random people were able to do with their pc.

Belies a deep ignorance of the history of personal computing. Honestly, I don't think modern computing has still ever returned to the ambition of what was being dreampt up, by experts, at Xerox PARC. The demos on the Xerox Alto in the early 1970s are still ambitious in some senses. And, as much as I'm not a huge fan, Gates and Jobs absolutely had grand visions for what the PC would be.

0. https://en.wikipedia.org/wiki/Shoshin
by kragen | 2025-12-04 03:47:36+00:00
> I always code with the mindset “the compiler is smarter than me.”

That mindset will last until the first or second time you walk through the compiler's assembly-language output. GCC and LLVM can find some amazing optimizations, but they also consistently miss very obvious optimization opportunities, often even on utterly trivial code.

That isn't to say that it's worthwhile to hand-optimize all your code. But the compiler is very much not smarter than you, and if you do need to squeeze performance out of the processor, you can do a lot better than the compiler does. A good first step is to look at the stupid shit the compiler has spat out and massage your source code until the shit stinks less.
by Just_Clive | 2025-12-04 03:49:01+00:00
I built this after hitting 700+ ESLint errors and hydration bugs while working on Taxfy. AI tools kept rewriting files or hallucinating fixes, so I created a deterministic, rule-based alternative.

NeuroLint is a CLI that applies safe AST transforms for React/Next.js projects. No AI, no rewrites — just targeted fixes.

Because of the recent React 19 CVE-2025-55182, I shipped an emergency one-liner:

npx @neurolint/cli security:cve-2025-55182 . --fix

It bumps React/Next.js, applies overrides, previews diffs with --dry-run, and auto-reverts if something breaks.

What it does:

Fixes 50+ common React/Next.js issues

Applies migrations deterministically (TSX/JSX aware)

Respects --exclude patterns for vendor code

Works without needing to trust an LLM

GitHub repo: https://github.com/Alcatecablee/Neurolint-CLI

Docs + walkthrough: https://neurolint.dev/

Would love feedback — especially on what React/Next.js issues you’d want automated next.
by eru | 2025-12-04 03:49:31+00:00
> I've written CGOL dozens of times, it's a common project that I do to "break in" a language I've learned, since it's not completely trivial but it's simple enough to not be frustrating, and I completely understand why math/computability-theory folks find it something to dedicate brain power to.

Writing a naive CGOL is fun and quick. But writing a _fast_ one can get arbitrarily complicated.

https://en.wikipedia.org/wiki/Hashlife is one particular example of where you can go for a faster-than-naive CGOL.
by thelastgallon | 2025-12-04 03:50:18+00:00
The 3-body problem (a sci-fi) book articulates how critical a stable environment is for long term survival and growth. The oil + auto lobby managed to change the rules back and forth, so there won't be any investment or growth in the EV sector. US will lose the entire auto segment because it is so far behind and the gap will accelerate. Its a shame an entire sector with millions of jobs and lots of additional opportunities (the battery sector) is gone. EV batteries would have bootstrapped and made utility scale batteries feasible with economies of scale.
by josephg | 2025-12-04 03:51:55+00:00
This is exactly the level of code I've come to expect from chatgpt. Its about the level of code I'd want from a smart CS student. But I'd hope to never use this in production:

- It always uses the last item as a pivot, which will give it pathological O(n^2) performance if the list is sorted. Passing an already sorted list to a sort function is a very common case. Good quicksort implementations will use a random pivot, or at least the middle pivot so re-sorting lists is fast.

- If you pass already sorted data, the recursive call to quickSortInPlace will take up stack space proportional to the size of the array. So if you pass a large sorted array, not only will the function take n^2 time, it might also generate a stack overflow and crash.

- This code: ... = [arr[j], arr[i]]; Creates an array and immediately destructures it. This is - or at least used to be - quite slow. I'd avoid doing that in the body of quicksort's inner loop.

- There's no way to pass a custom comparator, which is essential in real code.

I just tried in firefox:

// Sort an array of 1 million sorted elements arr = Array(1e6).fill(0).map((_, i) => i) console.time('x') quickSortInPlace(arr) console.timeEnd('x')

My computer ran for about a minute then the javascript virtual machine crashed:

Uncaught InternalError: too much recursion

This is about the quality of quicksort implementation I'd expect to see in a CS class, or in a random package in npm. If someone on my team committed this, I'd tell them to go rewrite it properly. (Or just use a standard library function - which wouldn't have these flaws.)
by eru | 2025-12-04 03:53:29+00:00
That CA in general were Turing complete is 'obvious'. What was novel is that Wolfram's employee proved something like Turing completeness for a 1d CA with two states and only three cells total in the neighbourhood.

I say something-like-Turing completeness, because it requires a very specially prepared tape to work that makes it a bit borderline. (But please look it up properly, this is all from memory.)

Having said all that, the result is a nice optimisation / upper bound on how little you need in terms of CA to get Turing completeness, but I agree that philosophically nothing much changes compared to having to use a slightly more complicated CA to get to Turing completeness.
by cogman10 | 2025-12-04 03:53:45+00:00
Lots have even in America. 2 famous ones are the NIH and the National Laboratories.

In fact, the largest, most advanced, and best known semiconductor manufacturer is primarily government owned: TSMC.

The only thing that gets in the way of their ability to sustain innovation is administrations hostile to publicly funded research.

Outside of innovative industries, there are plenty of examples of important government ran organizations aren't "disasters". Some of which can only be effectively ran via government. For example, healthcare.

What's been a disaster is relying on privatization and capitalism to solve all problems. That's the system of government we had in the dark ages.
by kragen | 2025-12-04 03:54:44+00:00
As I understand it, GCC and gas for i386 were written to be compatible with existing Unix C compilers (emitting assembly) and assemblers (consuming assembly), and those tools used the "AT&T" syntax that copied the PDP-11 assembler's syntax.

For amd64 there isn't really much of an excuse. Intel syntax was already supported in gas.
by scarecrowbob | 2025-12-04 03:55:12+00:00
I dunno, the US routinely just states plainly how many people they massacre and folks in the US seem okay with it.

I'd assume that when the Chinese do bad things people in China feel the same way about that as folks in the US feel about the US doing evil stuff, which is to say "very little at all". Why would they need to lie, any more than the US needs to lie? Do the average Chinese folks have more conscience then the average US citizen?
by mhashemi | 2025-12-04 03:55:31+00:00
Definitely. Unlikely that anyone starting here will get exactly the estimated monthly payment, especially as it takes time to lock in a rate and rates can change daily. What it does do is only use APRs to give as much of an apples-to-apples comparison as can be had. Click any entry in the table to go through to the CU's site, which usually has some means of getting a more accurate rate and/or quote.
by nilkn | 2025-12-04 03:56:19+00:00
I mostly disagree with this. Lots of things correlate weakly with other things, often in confusing and overlapping ways. For instance, expertise can also correlate with resistance to change. Ego can correlate with protection of the status quo and dismissal of people who don't have the "right" credentials. Love of craft can correlate with distaste for automation of said craft (regardless of the effectiveness of the automation). Threat to personal financial stability can correlate with resistance (regardless of technical merit). Potential for personal profit can correlate with support (regardless of technical merit). Understanding neural nets can correlate both with exuberance and skepticism in slightly different populations.

Correlations are interesting but when examined only individually they are not nearly as meaningful as they might seem. Which one you latch onto as "the truth" probably says more about what tribe you value or want to be part of than anything fundamental about technology or society or people in general.
by kelnos | 2025-12-04 03:56:51+00:00
> I think it's impossible to prevent insider trading

Sure. It's impossible to prevent all crime. But that doesn't mean that rules and restrictions around what you can and can't do are useless. The existing rules for prohibiting insider trading when it comes to corporate executives work decently well; we should just expand those to apply to people in Congress (and make it apply to all securities for them).

It won't catch everything, but it will help. A lot.
by rrrx3 | 2025-12-04 03:56:54+00:00
The argument against this is that shovelware has a distinctly different distribution model now.

App stores have quality hurdles that didn’t exist in the diskette days. The types of people making low quality software now can self publish (and in fact do, often), but they get drowned out by established big dogs or the ever-shifting firehose of our social zeitgeist if you are not where they are.

Anyone who has been on Reddit this year in any software adjacent sub has seen hundreds (at minimum) of posts about “feedback on my app” or slop posts doing a god awful job of digging for market insights on pain points.

The core problem with this guy’s argument is that he’s looking in the wrong places - where a SWE would distribute their stuff, not a normie - and then drawing the wrong conclusions. And I am telling you, normies are out there, right now, upchucking some of the sloppiest of slop software you could ever imagine with wanton abandon.
by nunez | 2025-12-04 03:57:11+00:00
I didn't do a CU for my mortgage (mostly because my lender is awesome and I'm happy with our rate), but I did for my recent auto loan and moved my accounts to them.

NIGHT AND DAY DIFFERENCE. customer service is fantastic and their online banking app/website is no bullshit. It even supports TOTP 2FA, which I definitely wasn't expecting given that the huge bank I came from didn't for some reason.

Can't recommend a credit union enough.
by QuiEgo | 2025-12-04 03:57:25+00:00
Making no statement about the value or lack of value in AI itself:

When people talk about it like this (this author is hardly the only example) they sound like an evangelist proselytizing and it feels so weird to me.

This thing could basically read “people in Seattle don’t want to believe in God with me, people in San Francisco have faith though. I’m sad my friends in Seattle won’t be going to heaven.”
by donpdonp | 2025-12-04 03:57:27+00:00
it seems like all this infrastructure could be replaced by a DNS TXT record with a public key that browsers could use to check the cert sent from the web server. A web server would load a self-signed cert (or whatever cert they wanted), and put the cert's public key into a DNS record for that hostname. Every visit to a website would need two lookups, one for address and one for key. It puts control back into the hands of the domain owners and eliminates the need for letsencrypt.
by latexr | 2025-12-04 03:57:51+00:00
> You are also moving the goal posts. You started with it was sketchy to claim a namespace now you're moving to it's sketchy to own domains.

Please don’t distort my words. That is a bad faith argument. I never claimed it was “sketchy to claim a namespace”, I listed the grievances other people made. That’s what “From what I remember (…) the complaint was” means. When I mentioned the domains, that was something which looked fishy to me. There’s no incongruence or goal post moving there. Please argue in good faith.

> For all you know this is some kid in a country with a terrible job market trying to create a resource for the community and get their name out there.

And for all you know, it’s not. Heck, for all I know it could be you. Either way it doesn’t excuse the bad behaviour, which is plenty and documented. All you have in defence is speculation which even if true wouldn’t justify anything.

You may not have seen this as I added the context after posting, so I’ll repeat it here:

> Them stealing code, claiming it as their own, refusing to give attribution and editing third-party comments to make it seem the author is saying they are “autistic and sperging” is OK with you?

> https://news.ycombinator.com/item?id=46095338

> You really see nothing wrong with that and think criticising such behaviour is flimsy and absurd?

Please answer that part. Is that OK with you? Do you think that is fine and excusable? Do you think that’s a prime example of someone “trying to create a resource for the community”? Is that not toxic behaviour?

Criticise the Zig community all you want, but pay attention to the person you’re so fervently defending too.
by elzbardico | 2025-12-04 03:58:04+00:00
150 deaths is statistically insignificant on this scenario and actual a very good evidence the current policy is working.

It is hard for some people to have the emotional maturity to understand this, but we can't fucking prevent every fucking death. We will all fucking die sooner or later, too.

You have absolutely no objective reason to suppose that changing this policy would have prevented this, not to mention the risk of making things worse.
by cogman10 | 2025-12-04 03:58:44+00:00
"Waves hands at AI/LLMs"

The problem is that training these models and using these models has required exponentially increasing amounts of memory.

ChatGPT has existed for years and in those years it's userbase and model size has increased tremendously. Not to mention the fact that a lot of competitors have sprung up in the wake of GPT. Including the likes of cloud based open model hosting services.