MurphyA/hacker-news huggingface dataset:
by danesparza | 2025-12-04 16:13:28+00:00
I came here to say something like this.

Programming has evolved several times since the early 90s (when I got in this business) and I had the impression it had already evolved several times by the 90s (especially talking with old mainframe or COBOL programmers).

It's evolving again now, and that process is painful. Nobody knows what the future holds.
by mavdol04 | 2025-12-04 16:13:55+00:00
Hi there, Author here!

I started building Capsule because I hit a wall with existing Python agent frameworks (fragile loops, lost state, no sandboxing). I felt we needed a proper infrastructure layer for this.

This is an RFC / Architecture Preview. I'm currently implementing the core engine in Rust (publicly), but I wanted to share the design philosophy first.

GitHub (API Specs & Roadmap):https://github.com/mavdol/capsule

Deep Dive: https://capsuleruntime.substack.com/p/fine-grained-isolation

I'd love to hear your thoughts on the Python API design (@task decorators) or the Wasm isolation approach!
by orwin | 2025-12-04 16:14:05+00:00
The issue is the new algorithm I think. It's the same on thread. You're more likely to get a view by responding to outrage bait than by promoting your own work, while before it was 50/50: responding to bait was great to reach a new audience, but for people who already followed you, you could still reach them by posting 'normally'.

Do you follow any content creator anywhere? Before 2019, you basically _had_ to be on Twitter to follow updates. Then the media diversified, but by 2023, even people still on X will rather use discord to have update on content creator they follow (or, weirdly, Instagram it seems? At least my favourite vulgarisation content creator seems to think so)
by epiccoleman | 2025-12-04 16:14:36+00:00
This is interesting, it reminds me of the chain of logic from this article:

https://alwaysasking.com/why-does-anything-exist/

> In a reality containing nothing, there are no things as such — at least no material things. But in such a nothing, there is an abstract thing: zero.

> Zero reflects the number of material things to count. But how many abstract things are there to count? There is at least one. The one number that exists to define the number of material things is zero.

> But if we have one number and it is one thing to count, now another number exists: one. We then have zero and one together as the only numbers. But now we have two numbers. Now two exists…

Your grandfather's explanation seems to echo this in terms appropriate for a 10-year-old - there is something inherently unstable about nothingness.
by quotemstr | 2025-12-04 16:14:42+00:00
Note the word "Europe":

> In the current situation we see ourselves unable to collaborate both with the FSF and any other organisation in which Richard Stallman has a leading position

https://fsfe.org/about/fsfnetwork.html

These guys are entitled to use or avoid any social media platform they want. I'm entitled, as well, to judge them for putting purity tests in unrelated domains above their commitment to free software and thereby rendering themselves ineffective in their primary mission.

Irrelevance is their choice.

That said, there's a transparency consideration. Doesn't Europe have laws about charities having to use donor funds to advance the ostensible purpose of the charity?

Matthias Kirschner is FSFE president and a full time employee. Do FSFE's donors know the FSFE is making itself less effective towards its mission of promoting free software by avoiding people who the FSFE leadership team dislike for reasons unrelated to free software? If they want to do this stuff, they should put it in their charter.
by notarobot123 | 2025-12-04 16:15:18+00:00
It's pretty demoralizing to realize that appearances matter more than merit in careers/politics/dating/business/etc. The pragmatic approach is to not give up on merit but not neglect appearances either.

Still, the idealist in me hates this. It feels like quality should win out over advertising yet it rarely does in the grand scheme of things.
by entropi | 2025-12-04 16:15:29+00:00
ah, so what you are saying is this: now you can buy your own specialized hardware, which is realistically produced and sold by a single company on earth, compete with ~3 of the largest multinational corporations to do so (consider the ram prices lately, to get a sense of the effect of this competition), spend tens of thousands in the process, and run your 'own' model, which someone spends millions to train and makes it open for some reason (this is not a point about its existence, its about its reliability. I don't think its wise to assume the open models will be roughly in line with SOTA forever). This way, by spending roughly 1-2 orders of magnitude more, you can eliminate a handful of SaaS products that you use.

Sorry, I don't see this happening, at least not for the majority. Even if it does, it would still be arguably centralizing.
by Atlas667 | 2025-12-04 16:15:49+00:00
A rich billionaire has millions of times more political power than you.

You are living in a dictatorship right now. The dictatorship of capital. And just because our culture does not draw a line to differentiate capitalists and workers doesnt mean a difference doesnt exist.

Capitalists arent "just another citizen like you or me", but thats what they want us to think. It keeps the dream alive and the story going.

Oh "its us against the government". lol. Really?

Im telling you. The capitalists, the wealthy are the government.
by lern_too_spel | 2025-12-04 16:16:09+00:00
> tell that to salt typhoon who collected copious amounts of data on all of us.

That is not a US government program.

You also brought up ECH, DoH, DoT, Android's fake cell tower detection, and Android's NEARBY_WIFI_DEVICES permission that also demonstrate a strong industry-wide push to limit mass surveillance, contributing to my argument that GGP's assertion that nothing has changed is incorrect.

> The EU wants to install backdoors on everybody's devices and get rid of encryption entirely.

No, it doesn't. Just because someone proposes something doesn't mean the EU wants it, especially when the EU completely removes that proposal from the table.
by jqpabc123 | 2025-12-04 16:16:31+00:00
In conclusion as long as LLM performance continues to improve we aren’t in an AI bubble.

See the response to ChatGPT 5:

https://www.analyticsinsight.net/chatgpt/why-chatgpt-5-didnt...

This discussion ignores the basic design of LLMs --- they are fundamentally statistical and probablistic. I don't have a really good definition for "intelligence" but it seems rather obvious that it is not achievable by simply rolling dice or building a really large database of the internet.
by robviren | 2025-12-04 16:16:49+00:00
I just liked programming when it contained a comprehensible amount of abstraction. Stacks have become so tall it is not even feasible for a single human to comprehend what is occurring. I also liked when standards had less surface area. Working in healthcare it has become obvious standards only ever get added, never removed. Complexity is absurd now. I'm not championing that we all become experts in bare metal assembly, but I feel for OP and a desire to at least fundamentally understand what is happening on some level.
Show HN: Copy-ip.com – Go to copy your public IP to clipboard
by mengchengfeng | 2025-12-04 16:16:49+00:00
I was doing infra stuff and got sick of going to a website and needing to click to copy my public IP.

So I made a website that copies your public facing IP to clipboard on desktop as soon as the page loads. The first time you visit you'll need to grant the page permission to copy. If it managed to successfully copy you'll see the "Copied!" text instead of the copy button.

You can also click to copy.
by microsoftedging | 2025-12-04 16:16:54+00:00
> However, I sold it all in June 2024 at $25 a share as they started to pull in military contracts (and lots of them). These FDEs were too damn effective. Not a fan of military contracts but I guess thats where the money is. Nevertheless, morals first.

Yeah, I don't know about this. Imo, from as soon as you decide to invest in the stock market, you're signing away your ability to call morals as a rationale for any further decision. Where does the line start and end? Would you sell MSFT because of their involvement in Gaza? Sell a broad market index because a company there is doing something 'immoral'? No matter how you invest, you should automatically assume the company is doing something awful.

My opinion though, to each their own. An interesting article!
by Forgeties79 | 2025-12-04 16:17:16+00:00
You're being needlessly prescriptive with language here. I am taking about health and safety writ large. I don't appreciate the game you're playing and it's why these discussions rarely go anywhere. It can't all be flippant retorts and needling words. I am clearly saying that we need to as a society be willing to discuss the possible issues with LLM's and make informed decisions about how we want this technology to exist in our lives.

If you don't care about that so be it - just say it out loud then. But I do not feel like getting bogged down in justifying why we should even discuss it as we circle what this is really about.
by nlawalker | 2025-12-04 16:17:25+00:00
When I was a manager I had to take a training based on the book "The Coaching Habit." It left me really sour on the role, and explained some of the behavior of previous managers of mine that I least appreciated, specifically that their approach to management seemed to be to just get me to articulate and explain my problems over and over until I somehow rubber-ducked myself into solving them myself. When that didn't work, it transitioned to "so how can I help?", which would again eventually be turned around into "now you know how to go help yourself", no matter how direct the request was or how much it really needed management authority behind it.

I get that the point of the strategy is to help people with strong director-style personalities to listen and empathize a bit more, but in my experience it ended up being implemented as "my responsibility to my reports is to listen and nod."
by potato3732842 | 2025-12-04 16:17:27+00:00
A lot of bigger engines are running right on the edge of oiling problems these days. With fuel economy rules being what they are it's just how it is. GM isn't special in this regard. Ford is killing a lot of cams and lifters (a problem GM fought through some years ago).

Meanwhile Toyota[1] is recalling blown up turbo v6s left and right (for problems that you can't just dump different oil in to solve) because they didn't invest in keeping a big v8 on the cutting like GM did and they didn't invest in making small turbo stuff last long like Ford did.

[1]Mentioned not because they have unique problems but because who if not a Toyota fanboy makes a comment like yours
by ethbr1 | 2025-12-04 16:17:40+00:00
Strongman: LLMs aren't a tool, they're fuzzy automation.

And what keeps security problems from making it into prod in the real world?

Code review, testing, static and dynamic code scanning, and fuzzing.

Why aren't these things done?

Because there isn't enough people-time and expertise.

So in order for LLMs to improve security, they need to be able to improve our ability to do one of: code review, testing, static and dynamic code scanning, and fuzzing.

It seems very unlikely those forms of automation won't be improved in the near future by even the dumbest form of LLMs.

And if you offered CISOs a "pay to scan" service that actually worked cross-language and -platform (in contrast to most "only supported languages" scanners), they'd jump at it.
by yokoprime | 2025-12-04 16:18:03+00:00
I don’t think leaving a platform you don’t enjoy has much, if anything, in common with physically relocating. I left X, but I have an account i use to log in about once a week to see if there’s anything worth while. I haven’t really found an alternative to X, things are fragmented now. Where I used to be able to follow most people I were interested in on Twitter, i now have some on bluesky, some on mastodon, some still on X, a bunch at instagram and YouTube… it’s a mess
by zdragnar | 2025-12-04 16:18:10+00:00
I was just in a thread yesterday with someone who genuinely believed that we're only seeing the beginnings of what the current breed of AI will get us, and that it's going to be as transformative as the introduction of the internet was.

Everything about the conversation felt like talking to a true believer, and there's plenty out there.

It's the hopes and dreams of the Next Big Thing after blockchain and web3 fell apart and everyone is desperate to jump on the bandwagon because ZIRP is gone and everyone who is risk averse will only bet on what everyone else is betting on.

Thus, the cycle feeds itself until the bubble pops.
6Sense's Privacy Policy Page loads scripts from polyfill(.)io
by SignalDr | 2025-12-04 16:18:27+00:00
We have completed a forensic investigation into a major B2B marketing vendor's (TrenDemon, linked to 6sense) production SDK and uncovered a systematic vulnerability that impacts thousands of customer sites. We are categorizing this as the Adversarial GTM Architecture.

The system is designed to defeat privacy audits and achieve permanent user tracking.

1. The Core Vulnerability: Remote Code Execution (RCE) Framework The vendor's primary script is not an analytics tool; it is a Remote Code Execution as a Service (RCEaaS) framework.

Mechanism: The SDK uses a proprietary constructor ($TRD\_GenericScriptComponent) to execute arbitrary code delivered from the vendor’s API via dynamic calls to eval() and innerHTML

Vector: This RCE capability is deployed as a "tripwire" that triggers at the moment of highest user engagement (e.g., video completion or form submit).

Result: The vendor can change the functionality of their clients' sites (e.g., deploying new tracking scripts, keyloggers) on the fly without updating the main script file.

2. The Persistence and Evasion Layer This architecture relies on active, high-level evasion to prevent security observation:

Permanent Tracking (The 8,000-Year Cookie): The system sets cookies with an expiration date of December 31, 9999, a clear violation of GDPR's Storage Limitation Principle and evidence of intent for permanent identity persistence.

Audit Evasion Logic: The production code contains detection logic that specifically targets the regex patterns of compliance and legal discovery tools (monitor|checker|validator|analyzer), causing the script to change its behavior when audited.

Supply Chain Risk (PollyWannaCrack): The execution engine relies on loading scripts from polyfill.io, which is a publicly known, compromised CDN.

3. The Payload (Identity Brokering) The primary function of the RCE is to facilitate identity theft:

Cross-Vendor Theft: The system actively encodes and exfiltrates authentication-grade cookies from secondary vendors, specifically the Marketo cookie (maCook), providing TrenDemon with the key to the user's entire marketing identity.

Surveillance Network: The RCE framework is used to dynamically inject and orchestrate a payload array of other surveillance tools (RB2B, LiveIntent, Apollo, etc.) into the host page.

We believe this architecture represents a structural failure in GTM security, demonstrating that the pursuit of attribution has led to the deployment of hostile, RCE-capable code designed for unobservability. We have developed and deployed patches to mitigate this threat.

We encourage security researchers and auditors to independently verify the presence of the $TRD\_GenericScriptComponent and the audit evasion logic within the vendor's production code.

https://www.deployblackout.com/investigations/6sense
by GoatInGrey | 2025-12-04 16:18:52+00:00
Counterpoint: affording average rent for a 1-bedroom apartment (~$1,675) requires that exact median full-time wage. $15 an hour affords you about $740 for monthly housing expenses. One can suggest getting two roommates for a one-bedroom apartment, but they would be missing the fact that this is very unusual for the last century. It's more in line with housing economics from the early-to-mid 19th century.
by steveklabnik | 2025-12-04 16:18:59+00:00
Borrowing and RAII are basically separate features, though they do interact.

RAII in Rust is like C++, but simpler: there are no constructors, only destructors. The Drop trait gets called like in C++, except that in Rust, moves are the default, and destructors don't get called on moved-from objects, that is, your destructor only runs once.

References are, at runtime, the same as a pointer in C++, except they cannot be null. We also say that they "borrow" what they refer to, which means that the compiler keeps track of the lifetime of the referent. This ensures that the referent always outlives its reference, so that its reference is always valid. This is a compile-time analysis on the control-flow graph of your program.

Does that make sense?
by ultratalk | 2025-12-04 16:19:24+00:00
> RNA is the leading candidate for the first functional biopolymer because it can store genetic information and catalyze many biological reactions.

That would make sense, because RNA is one of the simplest molecules that can store genetic information.

But this is pretty interesting stuff. If the precursors for RNA can form out in space on a remote rock, they can probably form on other bodies, including in other solar systems. More evidence for extraterrestrial life is always cool.
by neilv | 2025-12-04 16:19:27+00:00
> JavaScript is analogous to Visual Basic in that it can be used by people with little or no programming experience to quickly construct complex applications.

Lies at the time. More accessible popular examples of extension languages already existed at the time (e.g., VB, Python, Tcl, various 4GLs, even COBOL), and none of them looked like this.

They gave it the syntax to look much like a systems programming language, and a semantics that wasn't all that great for this purpose. (Syntax inherited from Java, which was actually a very nice applications language at the time, but had to replace the C++ that embedded developers would have otherwise used for set-top-like boxes that Sun was targeting at one point for Oak (Java). And, hey, random non-programmers can totally pick up a semantics that's a mix of functional and block-structured imperative, with a prototype-delegation object model that almost no one has seen before, and lot of error-prone pitfalls.)

This is what happens when marketing, product management, and engineering aren't working together, or are thrown together much later in the timeline than you'd prefer.

> Netscape and Sun plan to propose JavaScript to the W3 Consortium (W3C) and the Internet Engineering Task Force (IETF) as an open Internet scripting language standard.

But first, press release! Because we've assembled an industry gang of endorsements, to plow right over the W3C on a central Web standard, with this hasty kludge that one programmer whipped out from bad requirements and rush constraints, in literally a few weeks, knowing at the time it was a poor approach and he would've done better with even a little more time or better requirements.

"We'll deal with the tech debt later." We know how that played out for the industry. Now we have an entire field that is incapable of building a reasonably secure system for anything involving the Web. (Security isn't the only effect; it's just a harder-to-ignore example of what happens when everyone has to poke at big shoddy messes to do anything, and no one sufficiently understands what they're doing.)

And it didn't even selfishly benefit Netscape or Sun for very long. Maybe some people got their bonuses and promotions that year, but both companies were soon ruined, after some great earlier engineering and product work.
by potato3732842 | 2025-12-04 16:19:50+00:00
> If you don’t, you’re more likely to get approved at a credit union.

Or you're buying well below your means but don't wanna get screwed into a different product because what you're buying is on the ragged edge of what can be bought with the lower cost mortgage product you want.

Some jerk at corporate for the big bank will punt because some rule he's supposed to follow says he ought to do that and it's not like he stands to benefit by not. The CU will probably squint and work with you.
by dkdcio | 2025-12-04 16:19:53+00:00
??? my point is someone who doesn’t know the first thing about me called me naive and made bold claims about my future that I’m certain are wrong; time will tell but there’s nothing of substance to discuss from their comment, hence my reply

you’ve also just said a ton of stuff I don’t disagree with, but I’m not sure what discussion you’re trying to have here

I do regret the time spent reading this article and participating in this comment section; that was naive of me!
by monegator | 2025-12-04 16:19:55+00:00
Me, a young, but old fart at heart, writing firmware in C and applications in C++ (just for Qt!) that see everything wrong with the programming world today VS the junior that keep asking why we don't do the thing in javascript so we can have it on mobile as well (we do, we just use a different framework 'cause react won't ever cut it for our needs. It just takes a bit of what is called "effort" to make things look the same on all platforms) and wants emails lists to plan going out for a drink instead of, you know, asking. We're all in the same small office. Same stuff about deploying, we need github (no we don't. private git server), we need aws, woah what is this npm attack you're talking about?

At times it seems he's learning, but then he leans back into GPT and it feels like a lost cause. Yo bro it's crazy, i just deleted 2k lines of code, as if it was normal, with me raising eyebrows asking how many modules were outright deleted and never needed to be there in the first place.

Problem is, GPT and company will happily throw a lot of puke at the project and trust me bro that's essential we plan every single possible feature first and foremost instead of just testing the basics and build on top of them, because we have literally two requirements, so it's taking two months to do something i could do in two weeks, not because i'm more experienced, but because we should be doing what i'm telling to do, and not discuss whatever bullcrap the artificial manager is suggesting, which i would love to have the power to outright ban from our network.

Me and the junior have more or less the same age, just very different life journeys that led to programming
by bArray | 2025-12-04 16:20:07+00:00
I get the feeling that MathML will win out, simply because Firefox supported from early on [1], there is first move advantage. I use an old JS library for backwards compatibility [2] that adds just enough support for any math I'm math'in [3]. I would still prefer SVG, but it ended up being a pain to implement reliably.

One thing I noticed about this site though is that it is laggy - and I have a pretty good system.

[1] https://caniuse.com/mathml

[2] https://coffeespace.org.uk/projects/mathml-render.html

[3] https://github.com/pshihn/math-ml
by everforward | 2025-12-04 16:20:17+00:00
I don't disagree that large files are better, or at least simpler. I do think gaming drives are more likely than most to be fragmented (large file sizes, frequent updates plus uninstalling and re-installing). A single large file should make the next read predictable and easy to buffer.

I am a little curious about the performance of reading several small files concurrently versus reading a large file linearly. I could see small files performing better with concurrent reads if they can be spread around the disk and the IO scheduler is clever enough that the disk is reading through nearly the whole rotation. If the disk is fragmented, the small files should theoretically be striped over basically the entire disk.