MurphyA/hacker-news huggingface dataset:
by tipsytoad | 2025-12-06 17:55:27+00:00
It’s a quite deceptive paper. The main headline benchmarks (math500, aime24 /25) final answer is just a number from 0-1000, so what is the takeaway supposed to be for pass@k of 512/1024?

On the unstructured outputs, where you can’t just ratchet up the pass@k until it’s almost random, it switches the base model out for instruct, and in the worse case on livecodebench it uses a qwen-r1-distill as a _base_ model(!?) that’s an instruct model further fine tuned on R1’s reasoning traces. I assume that was because no matter how high the pass@k, a base model won’t output correct python.
by finaard | 2025-12-06 17:55:29+00:00
> To summarize: the device is riddled with security flaws, originally shipped with default passwords, communicates with servers in China, comes preinstalled with hacking tools, and even includes a built-in microphone

So like pretty much any BMC out there, just with the benefit that an attacker taking over that thing doesn't have direct access to reflash your bios with a backdoored version?

Any halfway sane person deployed any kind of BMC or networked KVM to a access restricted management VLAN for at least a decade now because all of those things are a big mess, and the impact of them getting owned typically is pretty severe.
by Scandiravian | 2025-12-06 17:55:52+00:00
I'm not really sure what your point is, but I'll try to take it in good faith and read it as "why doesn't docker solve the problem for it, since you can also keep those configurations in a git repo?"

If any kind of apt upgrade or similar command is run in a dockerfile, it is no longer reproducible. Because of this it's necessary to keep track of which dockerfiles do that and keep track of when a build was performed; that's more out-of-band logging. With NixOS I will get the exact same system configuration if I build the same commit (barring some very exotic edge cases)

Besides that, docker still needs to run on a system, which must also be maintained, so Docker only partly addresses a subset of the issue

If Docker works for you and you're not facing any issues with such a setup, then that's great. NixOS is the best solution for me
by jauntywundrkind | 2025-12-06 17:56:13+00:00
I also enjoyed https://henryhmko.github.io/posts/tpu/tpu.html https://news.ycombinator.com/item?id=44342977 .

The work that XLA & schedulers are doing here is wildly impressive.

This feels so much drastically harder to work with than Itanium must have been. ~400bit VLIW, across extremely diverse execution units. The workload is different, it's not general purpose, but still awe inspiring to know not just that they built the chip but that the software folks can actually use such a wildly weird beast.

I wish we saw more industry uptake for XLA. Uptakes not bad, per-se: there's a bunch of different hardware it can target! But what amazing secret sauce, it's open source, and it doesn't feel like there's the industry rally behind it it deserves. It feels like Nvidia is only barely beginning to catch up, to dig a new moat, with the just announced Nvidia Tiles. Such huge overlap. Afaik, please correct if wrong, but XLA isn't at present particularly useful at scheduling across machines, is it? https://github.com/openxla/xla
by robterrell | 2025-12-06 17:56:17+00:00
Fifty years ago this week, The Byte Shop opened its doors, becoming one of the epicenters of the personal computing earthquake that reshaped our world. A secret rebel base for a generation of hackers, engineers and tinkerers who would go on to build many of the technologies you now take for granted, it’s most famous today as the launchpad for the Apple-1.

Paul Terrell's Byte Shop was a nondescript El Camino Real storefront filled with early 8-bit computers, racks of electronics components, soldering irons and supplies, and some of the strangest and most wonderful people. This was a hangout for members of the Homebrew Computer Club. I know Steve Jobs, Steve Wozniak, Lee Felsenstein, Chris Espinosa, and Andy Hertfeld were regulars. In the photo linked at the URL above, that's infamous phone phreaker John Draper (Captain Crunch) sitting in the window. There’s probably many others from here on HN.

This Sunday we’re throwing a party to celebrate the occasion, at the DoubleTree Hotel at the San Jose Airport, from 12–6. The afternoon will include:

* Meet-and-Greet Reception featuring demonstrations and displays of early personal computers by their original designers, plus autographed copies of period advertising.

* Books, products, and memorabilia, including computer books and hardware available for purchase.

* Silent auction of collector memorabilia signed by the designers, running throughout the afternoon.

* Stage presentation and Q&A, narrated by Lee Felsenstein of Homebrew Computer Club fame, with participation from the "Apple-1 Garage Gang” and other dignitaries, both in person and virtually.

* Tribute honoring the pioneers who helped shape the birth of personal computing and are no longer with us.
by DrammBA | 2025-12-06 17:56:48+00:00
> you have your infrastructure exposed to the internet and the shared URL is pointing to your actual server where the data is hosted

I think the previous commenter misunderstood your question, this is the answer (you can also put it behind something like cloudflared tunnels).

Immich is a service like any other running on your server, if you want it exposed to the internet you need to do it yourself (get a domain, expose the service to the internet via your home ip or a tunnel like cloudflared, and link that to your domain).

After that, Immich allows you to share public folders (anyone with the link can see the album, no auth), or private folders (people have to auth with your immich server, you either create an account for them since you're the admin, or set up oauth with automatic account creation).
by jgerrish | 2025-12-06 17:57:28+00:00
This has already been hashed over a hundred thousand times, but there are also developer habits that we all need to defend against. One is pulling in needless crates.

Rust encourages that behavior. Sometimes rightly, but it does build a habit.

I spoke previously about how the Rust book uses the external rand create as a key example and it sets the tone for developers. I'm changing that stance somewhat since it was a decent strategic choice to have crypto packages plug-and-play. But tit still builds a habit.
by lucb1e | 2025-12-06 17:57:59+00:00
https://docs.immich.app/install/requirements

> RAM: Minimum 4GB, recommended 6GB

Wow. When factoring in the OS, that's an entire system's worth of RAM dedicated to just hosting files!

What does it use all this for? Or is this just for when it occasionally (upon uploading new pictures) loads the image recognition neural net?

I'd have to stop Immich whenever I want to do some other RAM-heavy task. All my other services (including database, several web servers with a bunch of web services, a Windows VM, git server, email, redis...) + the host OS and any redundancy caused by using containers, use 4.6GB combined, peaking to 6GB on occasion

> CPU: Minimum 2 cores, recommended 4 cores

Would be good to know how fast those cores should be. My hardware is a mobile platform from 2012, and I've noticed each core is faster than a modern Pi as well as e.g. the "dedicated cores" you get from DigitalOcean. It really depends what you run it on, not how many of them you have
by qart | 2025-12-06 17:58:11+00:00
I have family members with health conditions that require periodic monitoring. For some tests, a phlebotomist comes home. For some tests, we go to a hospital. For some other tests, we go to a specialized testing center. They all give us PDFs in their own formats. I manually enter the data to my spreadsheet, for easy tracking. I use LLMs for some extraction, but they still miss a lot. At least for the foreseeable future, no LLM will ever guarantee that all the data has been extracted correctly. By "guarantee", I mean someone's life may depend on it. For now, doctors take up the responsibility of ensuring the data is correct and complete. But not having to deal with PDFs would make at least a part of their job (and our shared responsibilities) easier.
by ForHackernews | 2025-12-06 17:58:21+00:00
GrapheneOS is a locked-down, security-hardened system that's good if you need absolutely maximal security (e.g. journalists, activists, folks targeted by state actors). LineageOS is a more of an open system for tinkerers who want to play outside Google's walled garden.

You can have root to control your own device on Lineage, but not Graphene.
by bloaf | 2025-12-06 17:58:26+00:00
As someone who regularly looks up things I read "a while back," her experience is very common and insanely frustrating.

There always do exist magic combinations of words that you can put into google that will find the thing you're looking for. But the search space doesn't feel differentiable in a mathematical sense: you can't iteratively improve your terms because you either hit on a combo that works, or you get the same wrong results as you saw for your past 10 searches.
by FireBeyond | 2025-12-06 17:58:32+00:00
Yeah, and as an ex-employee, that's something they heavily "rely" on, and push as an end run around laws.

Like in my state, LE can't collect this stuff directly. Then they started saying "Well, we can do this..." and started contracting for private companies to do the collection on their behalf. When _that_ was legislated away, they've now pivoted to "Well, if the company is doing it of their own accord, we can still purchase the data since it wasn't, technically, created for us."
by nine_k | 2025-12-06 17:58:44+00:00
Some ideas for your consideration:

- Illustrating blog posts, articles, etc.

- A creativity tool for kids (and adults; consider memes).

- Generating ads. (Consider artisan production and specialized venues.)

- Generating assets for games and similar, such as backdrops and textures.

Like any tool, it takes certain skill to use, and the ability to understand the results.
by MostlyStable | 2025-12-06 17:58:48+00:00
While I very much want what you describe (and it's why I still hope Framework eventually gets into the phone game), the software is a far far bigger problem than the hardware (and this is from someone who is _extremely_ disappointed in current phone hardware). I'd take free and open software over hardware at this point. Obviously both is better, but the software has a far bigger impact on our lives than the hardware.
by jabl | 2025-12-06 17:59:10+00:00
Other companies saw that IBM effectively lost control over their platform (and thus lost a large revenue stream), and are determined to not make the same mistake.

That's a long running effort, going all the way from lobbying (DMCA and their ilk), to all kinds of hardware root-of-trust, encrypted and signed firmware, OS kernels and drivers etc etc. And yes, today we have the transistor budgets to spend on things like this, which wasn't an option back when the PC architecture was devised.
by y-c-o-m-b | 2025-12-06 18:00:13+00:00
Graphene has really caught my eye in the last several months, but unfortunately I couldn't find a good deal for Pixel phones (>128GB storage), used or new. That's the biggest bottleneck for adoption it seems. I just finally switched from an S10E to a S25Ultra (black friday deal brought down to $820), but not being able to use Graphene in the future hurts a bit for sure.
by JadeNB | 2025-12-06 18:00:38+00:00
> Meanwhile younger undergrad and grad students are getting more and more accustomed to LLMs forming the front end for any knowledge they consume.

Well, that's terrifying. I mean, I knew it about undergrads, but I sure hoped people going into grad school would be aware of the dangers of making your main contact with research, where subtle details are important, through a known-distorting filter.

(I mean, I'd still be kinda terrified if you said that grad students first encounter papers through LLMs. But if it is the front end for all knowledge they consume? Absolutely dystopian.)
by sofixa | 2025-12-06 18:01:14+00:00
> Yep, and as a result needs to continue to follow UK specific regulations and export controls [1], but being a single overarching conglomerate makes it significantly easier to manage the GCAP project, versus FCAS which became a Renault-Airbus spat which turned into a France-Germany spat.

I have a hard time with you, you sound extremely confident in your opinions, provide sources and everything, and then make massive errors like saying no European common military projects work (after having been given a list of the big hits), confuse what Leonardo is and who is working on GCAP, and now you're confusing Renault (a car manufacturer that used to make planes a century ago, and that has recently said they'll look into making drones from underused factories) and Dassault Aviation.

To top it off, you cite sources that don't support your claims.

> Yep, and as a result needs to continue to follow UK specific regulations and export controls [1],

And cite a source that merely says "Requirement to rate each part number being exported from the UK in accordance with the UK Military Classification List; " (emphasis mine).

> Over other regulations like CBAM [0]. The same way the US is playing hard ball over the DSA, China+India are playing hard ball over CBAM.

"Playing hardball" is not ultimatum. And your source doesn't even support your "hard ball" claim, it says India tried pushing back which was refused by the EU.
by tejiri15 | 2025-12-06 18:01:22+00:00
Hey everyone! I recently open sourced a project I built and I'm hoping to find some contributors.

It's an autonomous agent that helps aggregate and summarize AI/ML news - basically trying to solve the information overload problem in our field.

Why I'm sharing: - Could use fresh eyes on the architecture decisions - Want to add more news sources (Reddit is on the list!) - Looking for feedback on the LangGraph implementation

Stack: Python (FastAPI), Next.js 14, LangGraph, SQLite

If you're interested in autonomous agents or news aggregation, I'd love to collaborate. The repo is on my GitHub - check my profile or comment and I'll DM you the link.

What features would make something like this useful to you?
by eric-burel | 2025-12-06 18:02:14+00:00
You can have an agent that focuses on studying the interactions. What you're saying is that an AI cannot find every security issue but neither do humans otherwise we wouldn't have security breaches in the first place. You are describing a relatively basic agentic setup mostly using your AI-assisted text editor but a commercial security bot is a much more complex beast hopefully. You replace context by memory and synthesis for instance, the same way our brain works.
by FireBeyond | 2025-12-06 18:02:40+00:00
> have had for decades have recently become big news in America, I believe because they're now being used for immigration purposes?

That is one aspect.

But they are also now "using AI to analyze vehicle movements for suspicious patterns and proactively alerting police to investigate". What could possibly go wrong with that?

Or that there are microphones in certain Flock devices, and they've discussed their intent to activate those and do that with speech analysis.

Garrett Langley, the CEO, has a disturbingly Minority Report-esque vision for a world with, in his words, "no crime", "thanks to Flock".

And these are all steps towards it. Interesting you mention Ring, because Flock has partnered with Amazon and is opting all Ring footage into Flock's network and analyses.
by cwyers | 2025-12-06 18:03:14+00:00
Because the original IBM PC was designed to be cheap and built in a hurry. IBM had a mandate for the original PC to use off the shelf components as much as possible. They also neglected to secure an exclusive license from Microsoft for DOS. 95% of building an IBM PC clone was buying the same parts and getting a DOS license from Microsoft (which they were very happy to sell you). Everyone saw what happened to IBM and just didn't do it that way again.
by kortilla | 2025-12-06 18:05:03+00:00
> You can't say "Rust did its job" and blame the programmer,

You absolutely can. This is someone just calling panic in an error branch. Rust didn’t overrun the memory which would have been a real possibility here in C.

The whole point is that C could have failed in the exact same way but it would have taken extra effort to even get it to detect the issue an exit. For an error the programmer didn’t intend to handle like in this case, it likely would have just segfaulted because they wouldn’t bother to bounds check.

> TANSTAAFL

The way C could have failed here is a superset of how Rust would. Rust absolutely gives you free lunch, you just have to eat it.
by raw_anon_1111 | 2025-12-06 18:05:12+00:00
Having good team cohesion is all well and good. But when it’s time to get promoted, what are you going to say “I pulled well defined Jira tickets off the board”?

When you get ready to interview for your n+1 job, and you spent months grinding leetCode and practicing reversing a btree on the white board, get to the behavioral interview and I ask “what accomplishment are you most proud of?”, what are you going to say “I worked with my team and we together closed 20 story points a week”?

I have given the thumbs down to a lot of candidates this year alone who couldn’t discuss something that they took ownership of or where they stood out.
by toss1 | 2025-12-06 18:06:41+00:00
Well, the amount of compute is certainly finite in this era. 250 million GPUs in a year is a big number, but clearly insufficient even for current demand from LLM companies, who are also buying up all available memory chips increasing general prices rapidly, so the current situation is definitely finite and even limited in very practical ways.

And, considering the visible universe is also finite, with finite amounts of matter and energy, it would follow ultimate compute quantity is also finite, unless there is an argument for compute without energy or matter, and/or unlimited compute being made available from outside the visible universe or our light cone. I don't know of any such valid arguments, but perhaps you can point to some?
by masklinn | 2025-12-06 18:07:17+00:00
> Why was it that in the early PC days, IBM was unable to keep a lid on 'IBM compatible', allowing for the PC interoperability explosion

IBM didn't think to lock it down, the BIOS was the main blocker and was relatively quickly reverse-engineered (properly, not by copying over the BIOS source IBM had included in the reference manual). They tried to fix some with the MCA bus of the PS/2 but that flopped.

> almost every phone has closed drivers

Lots of hardware manufacturers refuse to provide anything else and balk at the idea of open drivers. And reverse engineering drivers is either not worth the hassle for the manufacturer or a risk of being sued.

> Why are there not yet a plethora of phones on the market that allow anyone to install their OS of choice?

Incentive. Specifically its complete lack of existence.
by eric-burel | 2025-12-06 18:08:35+00:00
Talking about the debt of a system prompt feels really weird. A system prompt tied to an LLM is the equivalent of crafting a new model in the pre-LLM era. You measure their success using various quality metrics. And you improve the system prompt progressively to raise these metrics. So it feels like bandaid but that's actually how it's supposed to work and totally equivalent to "fixing" a machine learning model by improving the dataset.
by FireBeyond | 2025-12-06 18:08:46+00:00
Right, but also remember that they're set up to analyze other vehicle traits, including but not limited to: color, make, model, body damage, panels that are a different color to the rest of the body, wheels, decals, bumper stickers, tow hitches, roof racks, etc., so even if they can't read your plate they can try to build a vehicle identity, and when they do get a plate capture, they can retroactively apply that to all other sightings of the vehicle.

It really is fucking dystopian.
by khimaros | 2025-12-06 18:08:50+00:00
i have been testing this on my Framework Desktop. ComfyUI generally causes an amdgpu kernel fault after about 40 steps (across multiple prompts), so i spent a few hours building a workaround here https://github.com/comfyanonymous/ComfyUI/pull/11143

overall it's fun and impressive. decent results using LoRA. you can achieve good looking results with as few as 8 inference steps, which takes 15-20 seconds on a Strix Halo. i also created a llama.cpp inherence custom node for prompt enhancement which has been helping with overall output quality.
by superkuh | 2025-12-06 18:09:16+00:00
Perl's "decline" saved it from a fate worst than death: popularity and splitting into dozens of incompatible versions from added/removed features (like python). Instead Perl is just available everywhere in the same stable form. Scripts always can just use the system perl interpreter. And most of the time a script written in $currentyear can run just as well on a perl system interpreter from 2 decades ago (and vice versa). It is the perfect language for system adminstration and personal use. Even if it isn't for machine learning and those kinds of bleeding edge things that need constant major changes. There are trade-offs.

This kind of ubiquitous availablility (from early popularity) combined with the huge drop-off in popularity due to raku/etc, lead to a unique and very valuable situation unmatched by any other comparable language. Perl just works everywhere. No containers, no dep hell, no specific versions of the language needed. Perl is Perl and it does what it always has reliably.

I love it. The decline was a savior.
by windexh8er | 2025-12-06 18:09:22+00:00
I've hosted Immich since it came out and all my photos have been migrated to it at this point. I would never host Immich on NixOS (and I do use it for certain things). The reason? It's not simpler than a container option and creates a single point of issue. The container option is tested and supported by Immich, they recommend it. So everything I need is part of that. I moved servers midway through the year and the storage for my Immich implementation is NAS hosted and the mount is simply exposed to the Immich container. It took me less than 15 minutes to move Immich. And while that would have likely been the same with NixOS it's actually more of a chore to roll back with Nix. My Compose file is locked to major/minor and I choose when to do upgrades. But rollbacks are actually simpler IMO. I just stop the container, tar the operational directory, flip the bits in the Compose file and restart. I've not actually had an issue with Immich ever while doing it this way and I manage about 10TB of photos and videos currently in Immich.

I actually thought about doing this with NixOS last year, but it seemed counterproductive compared to how I self-host, I don't want to manage configurations in multiple places. If I switched everything it would likely be just as much work and then I'm reliant on Nix. Over the years I've gone from the OS being a mix of Arch and Ubuntu to mostly just Debian for my self hosting LXC or VMs. I already have the deployments templated so there's nothing for me to do other than map an IP, give it a hostname and start it.

To each their own, but I don't want to be beholden to NixOS for everything. I like the container abstraction on LXC and VMs and it's been very good to minimize the work of self-hosting over 40+ services both in my home lab and in the bare metal server I lease from Hetzner.
by 999900000999 | 2025-12-06 18:10:13+00:00
Python is mentioned and I think the key reason it's continued to grow while Perl declined, is a vastly more welcoming culture.

Python says you know nothing, but want to automate a small task. The community will help you. More so than any other language.

Then again, Python 2 and Python 3 are two different languages.

Very few projects are willing to have such a massive migration.