MurphyA/hacker-news huggingface dataset:
by palata | 2025-12-30 22:43:38+00:00
> The classic approach [Internet -> Router -> Server] is a recipe for disaster

I never really get that. If my router gets updates and the only thing I do to it is forward one port to the server, I don't really see how wrong it can go?

The Cloudflare tunnel doesn't change the fact that there is a server exposed to the Internet. And adding a reverse proxy in front of the server does not necessarily make it more secure, does it?

I mean, if I cannot update my router and open a single port properly, should I trust myself to setup a reverse proxy?
by milkytron | 2025-12-30 22:43:38+00:00
They should care because they are expensive. If we become dependent on something that is expensive, we have to maintain a certain level of economic productivity to sustain our dependence.

For AI, once these companies or shareholders start demanding profit, then users will be footing the bill. At this rate, it seems like it'll be expensive without some technological breakthrough as another user mentioned.

For other things, like roads and public utilities, we have to maintain a certain level of economic productivity to sustain those as well. Roads for example are expensive to maintain. Municipalities, states, and the federal government within the US are in lots of debt associated with roads specifically. This debt may not be a problem now, but it leaves us vulnerable to problems in the future.
by ronsor | 2025-12-30 22:43:43+00:00
The sibling comments (from remich and sanufar) match my experience.

1. I do love getting into the details of code, but I don't mind having an LLM handle boilerplate.

2. There isn't a binary between having an LLM generate all the code and writing it all myself.

3. I still do most of the design work because LLMs often make questionable design decisions.

4. Sometimes I simply want a program to solve a purpose (outcome-focused) over a project to work on (craft-focused). Sometimes I need a small program in order to focus on the larger project, and being able to delegate that work has made it more enjoyable.
by ahepp | 2025-12-30 22:43:49+00:00
I think there's merit to your criticisms of the way docker is used, but it also seems like it provides substantial benefits for application developers. They don't need to beg OS maintainers to update the package, and they don't need to maintain builds for different (OS, version) targets any more.

They can just say "here's the source code, here's a container where it works, the rest is the OS maintainer's job, and if Debian users running 10 year old software bug me I'm just gonna tell them to use the container"
by flurie | 2025-12-30 22:44:25+00:00
This is a qualitative methods paper, so statistical significance is not relevant. The rough qualitative equivalent would instead be "data saturation" (responses generally look like ones you've received already) and "thematic saturation" (you've likely found all the themes you will find through this method of data collection). There's an intuitive quality to determining the number of responses needed based on the topic and research questions, but this looks to me like they have achieved sufficient thematic saturation based on the results.
by remich | 2025-12-30 22:44:34+00:00
I don't think that anyone actually believes that writing code is only for junior developers. That seems to be a significant exaggeration at the very least. However, it is definitely true that most organizations of this size are hiring people into technical lead, staff engineer, or principal engineer roles are hiring those people not only for their individual expertise, or ability to apply that expertise themselves, but also for their ability to use that expertise as a force multiplier to make other less experienced people better at the craft.
by echelon | 2025-12-30 22:44:40+00:00
That's malinvestment. Too much overhead, disconnected from long term demand. The government doesn't have expertise, isn't lean and nimble. What if it all just blows over? (It won't? But who knows?)

Everything is happening exactly as it should. If the "bubble" "pops", that's just the economic laws doing what they naturally do.

The government has better things to do. Geopolitics, trade, transportation, resources, public health, consumer safety, jobs, economy, defense, regulatory activities, etc.
by candiddevmike | 2025-12-30 22:45:45+00:00
Same reason they should own access lines: everyone needs rackspace/access, it should be treated like a public service to avoid rent seeing. Having a data center in every city where all of the local lines terminate into could open the doors to a lot of interesting use cases, really help with local resiliency/decentralization efforts, and provide a great alternative to cloud providers that doesn't break the bank.
by zahlman | 2025-12-30 22:45:50+00:00
> deep / fast / craft-and-decomposition-loving vs black box / outcome-only

As a (self-reported) craft-and-decomposition lover, I wouldn't call the process "fast".

Certainly it's much faster than if I were trying to take the same approach without the same skills; and certainly I could slow it down with over-engineering. (And "deep" absolutely fits.) But the people I've known that I'd characterize as strongly "outcome-only", were certainly capable of sustaining some pretty high delta-LoC per day.
by hackermailman | 2025-12-30 22:46:09+00:00
I assume this works where the ransomware authors, who likely are in some untouchable nation and the son of some major politician, provide a binary with their own addresses to take the ransom then pay the person who planted it out minus their cut. Those wallets used for paying crime commissions are probably reused often or otherwise identified as they don't care if you get caught and you need to either sit on those coins for years until the limitations runs out or have enough knowledge to wash them and anyone doing this is already making bad life decisions so likely greedy and cashed those in a traceable way like driving to work in his new Ferrari.
by Aurornis | 2025-12-30 22:46:31+00:00
> Also 4th amendment protections so no one gets access without me knowing about it.

If there's ever a need for a warrant for any of the projects, the warrant would likely involve seizure of every computer and data storage device in the home. Without a 3rd party handling billing and resource allocation they can't tell which specific device contains the relevant data, so everything goes.

So having something hosted at home comes with downsides, too. Especially if you don't control all of the data that goes into the servers on your property.
by skibidithink | 2025-12-30 22:47:04+00:00
You did say it.

> with slots going to the rich and privileged) [...] AA just pushes against THAT

It doesn't give away the slots reserved for the rich.

And it's not a tiebreaker between equally qualified candidates. At Harvard, Africans who performed in the 4th decile were admitted more often than Asians in the 10th decile. [1]

[1]. See page 11 (by document numbering). https://www.supremecourt.gov/DocketPDF/20/20-1199/169941/202...
by remich | 2025-12-30 22:47:04+00:00
I have had a lot of success lately when working with Opus 4.5 using both the Beads task tracking system and the array of skills under the umbrella of Bad Dave's Robot Army. I don't have a link handy, but you should be able to find it on GitHub. I use the specialized skills for different review tasks (like Architecture Review, Performance Review, Security Review, etc.) on every completed task in addition to my own manual review, and I find that that helps to keep things from getting out of hand.
by 3eb7988a1663 | 2025-12-30 22:47:11+00:00
National HPC labs have been over subscribed for decades with extensive queueing/time sharing allocation systems.

It would still likely devolve into most-money-wins, but it is not an insurmountable political obstacle to arrange some sort of sharing.

Edit: I meant to say over subscribed, not over provisioned. There are far more jobs in the queue than can be handled at once
by scotty79 | 2025-12-30 22:47:32+00:00
SC-130 has distance between the antennas on the order of 1 meter and has three of them (which probably let's them be closer than in two antenna unit).

If you test phase shift to one satelite you might get good accurancy for some directions and no accurancy at all for the orthogonal directions.

So maybe not ship-length but still 1 meter sized device is way too large to put under the hood of a car let wlon in a smartphone.

Again, GPS has no provisions for orientation detection. You can hack it with few antennas significantly spaced apart (thank you again for pointing out those solutions). I think it might be easier to detect location with GPS and orientation by testing phase shift to the closest cell tower (when on land). There's nothing in GPS system thst helps with determining orientation.

And you still can't drop arrogance which gets tiresome.
by dragonwriter | 2025-12-30 22:47:39+00:00
> This is the same issue with term limits (which to be clear, I'm in favor of, but we have to go in with our eyes open), which is that e.g. the congressional staffers gain power, especially if they persist across the end of the term limit.

Term limits are a bad hack trying to fix the problem that the status quo electoral system presents (1) too few meaningful choices, and (2) largely as a consequence of #1 and relatively stable local ideological mixes, features very strong incumbency preferences.

Fix the electoral system to resolve that (lots of ways to do that), and the broken idea of term limits stops being an attractive way to pretend that you are doing something without actually fixing the problems.
by alemanek | 2025-12-30 22:48:03+00:00
Here is how I think of it. When I am actively developing a feature I commit a lot. I like the granularity at that stage and typically it is for an audience of 1 (me). I push these commits up in my feature branch as a sort of backup. At this stage it is really just whatever works for your process.

When I am ready to make my PR I delete my remote feature branch and then squash the commits. I can use all my granular commit comments to write a nice verbose comment for that squashed commit. Rarely I will have more than one commit if a user story was bigger than it should be. Usually this happens when more necessary work is discovered. At this stage each larger squashed commit is a fully complete change.

The audience for these commits is everyone who comes after me to look at this code. They aren’t interested in seeing it took me 10 commits to fix a test that only fails in a GitHub action runner. They want the final change with a descriptive commit description. Also if they need to port this change to an earlier release as a hotfix they know there is a single commit to cherry pick to bring in that change. They don’t need to go through that dev commit history to track it all down.
by canucker2016 | 2025-12-30 22:48:51+00:00
But there's nothing in your code that suggests that there's a problem if the error and success fields are both true.

Typically you'd have at least an assert (and hopefully some unit tests) to ensure that invariant (.success ^ .error == true).

But the code has just been getting by on the good graces of the previous stack contents. One random day, the app behaviour changed and left a non-zero byte that the response struct picked up and left the app in the alternate reality where .success == .error

Others have mentioned sanitizers that may expose the problem.

Microsoft's Visual C++ compiler has the RTCs/RTC1 compiler switch which fills the stack frame with a non-zero value (0xCC). Using that compiler switch would have exposed the problem.

You could also create a custom __chkstk stack probe function and have GCC/Clang use this to fill the stack as well as probing the stack. I did this years ago when there was no RTCs/RTC1 compiler option available in VC++.
by fc417fc802 | 2025-12-30 22:48:56+00:00
> The next level is allowing an app to check its own package for modifications

You can't modify them. They're signed. If you modify and resign it gets installed with a different key (ie the one you signed with) hence it's a different app as far as it's concerned.

To get around that you need signature spoofing which Lineage famously refused to include.

Agreed that BigTech in general is making the world worse by implementing security features in ways that erode user freedom.
by alexjplant | 2025-12-30 22:49:06+00:00
A half-satirical, half-true hot take by yours truly (imagine that the me from another multiverse wrote it):

Marvel films are largely morality plays punctuated by explosions and contrived witticisms in service of a secular, polytheistic religion for the postmodern age. Everything is a weird cultural buffet of pastiche, relentlessly-punchy dialog, and formulaic storytelling designed to tug on the audience's heartstrings while allowing them to say "I know that thing!" They're a cultural soma for the post-Cold War generation raised on Pokemon that will never know the happiness of the Clinton years again. The studios that make them are more like pharmaceutical companies hocking a hot-selling miracle drug than filmmakers. Everybody else is trying to replicate their financial success and is therefore failing at making actual _movies_.

- A filthy, no-good hipster that dislikes things other people enjoy and likes things that other people hate just because

(I thought "Doctor Strange" was great fun in a trippy way. The multi-verse "Spiderman" was OK. Hated "Guardians". I wouldn't go out of my way to see either again and only see these films in theaters with friends).
by jmward01 | 2025-12-30 22:49:47+00:00
For those reading this far into the thread, here is a reference to AIMD [1]. Reading through, there is cross-over in the idea but I don't think it 100% covers things. A good starting point to look at though.

[1] https://www.geeksforgeeks.org/computer-networks/aimd-algorit...
by dolmen | 2025-12-30 22:50:29+00:00
I think there is still space for an alternate Go syntax for scripting with the following constraints:

* a single file exposing a "main" package and its "func main()"

* import syntax that merges requires from go.mod (import both packages and modules)

* simplified error handling (just ignore returned errors in code, and they are caught by the transpiler to be handled as fatal)

Those are my ideas to go beyond my own goeval that already allows to run Go oneliners. https://github.com/dolmen-go/goeval
by zahlman | 2025-12-30 22:51:02+00:00
> I do love getting into the details of code, but I don't mind having an LLM handle boilerplate.

My usual thought is that boilerplate tells me, by existing, where the system is most flawed.

I do like the idea of having a tool that quickly patches the problem while also forcing me to think about its presence.

> There isn't a binary between having an LLM generate all the code and writing it all myself. I still do most of the design work because LLMs often make questionable design decisions.

One workflow that makes sense to me is to have the LLM commit on a branch; fix simple issues instead of trying to make it work (with all the worry of context poisoning); refactor on the same branch; merge; and then repeat for the next feature — starting more or less from scratch except for the agent config (CLAUDE.md etc.). Does that sound about right? Maybe you do something less formal?

> Sometimes I simply want a program to solve a purpose (outcome-focused) over a project to work on (craft-focused). Sometimes I need a small program in order to focus on the larger project, and being able to delegate that work has made it more enjoyable.

Yeah, that sounds about right.
by trelane | 2025-12-30 22:51:21+00:00
I am a huge fan and user of Linux.

The problem is slapping Linux on some random bit of Windows kit and expecting it to work as though it had shipped with Linux, with support to back it. The more recent, the worse it will be.

If you want to run Linux, buy Linux computers that ship with Linux and have a support number you can call. Just like you'd not expect to be able to slap OSX on some random Dell and have it work.
by Xirdus | 2025-12-30 22:51:21+00:00
I'm very open to a serious discussion. But only if it's actually serious. I don't consider reducing economy to thermodynamics to be serious.

Any statement about any economy is meaningless if you're ignoring services. Especially when discussing the totality of an economic system, such as the question whether capitalism is zero-sum. I am happy to hear actual arguments how the value of services always, necessarily, by definition comes at the cost of some environment somewhere. I'm not happy to hear arguments that dismiss existence of services entirely.

I was sure you were a troll yourself after that hole digging line. My bad.
by simonw | 2025-12-30 22:51:25+00:00
Huh, TIL - thanks for the correction.

https://www.ornl.gov/news/doe-incite-program-seeks-2026-prop...

> The Innovative and Novel Computational Impact on Theory and Experiment, or INCITE, program has announced the 2026 Call for Proposals, inviting researchers to apply for access to some of the world’s most powerful high-performance computing systems.

> The proposal submission window runs from April 11 to June 16, 2025, offering an opportunity for scientific teams to secure substantial computational resources for large-scale research projects in fields such as scientific modeling, simulation, data analytics and artificial intelligence. [...]

> Individual awards typically range from 500,000 to 1,000,000 node-hours on Aurora and Frontier and 100,000 to 250,000 node-hours on Polaris, with the possibility of larger allocations for exceptional proposals. [...]

> The selection process involves a rigorous peer review, assessing both scientific merit and computational readiness. Awards will be announced in November 2025, with access to resources beginning in 2026.

Not sure OpenAI/Anthropic etc would be OK with a six month gap between application and getting access to the resources, but this does indeed demonstrate that government issued super-computing resources is a previously solved problem.
by pear01 | 2025-12-30 22:51:28+00:00
Well, people bid for USA government resources all the time. It's why the Washington DC suburbs have some of the country's most affluent neighborhoods among their ranks.

In theory it makes the process more transparent and fair, although slower. That calculus has been changing as of late, perhaps for both good and bad. See for example the Pentagon's latest support of drone startups run by twenty-year-olds.

The question of public and private distinctions in these various schemes are very interesting and imo, underexplored. Especially when you consider how these private LLMs are trained on public data.
by mvkel | 2025-12-30 22:52:02+00:00
The fact is nobody has any idea what OpenAI's cash burn is. Measuring how much they're raising is not an adequate proxy.

For all we know, they could be accumulating capital to weather an AI winter.

It's also worth noting that OpenAI has not trained a new model since gpt4o (all subsequent models are routing systems and prompt chains built on top of 4), so the idea of OpenAI being stuck in some kind of runaway training expense is not real.
by bb88 | 2025-12-30 22:52:12+00:00
There is some issues with "boomers" and "toxic culture". Ham radio can be pretty toxic -- but you have to find the groups that have the knowledge but don't have the toxicity. There is a stigma to being a Ham these days -- often well deserved I think. You can find lots of youtube videos of toxic hams on the air. Or you know facebook forums.

But those people aren't the experts typically. The experts have their own community, friendships, etc. They'll be super nice, and they might speak up, but they expect to have polite conversation. And if the forum is a shit show, they'll take their expertise elsewhere.
by linesofcode | 2025-12-30 22:52:22+00:00
I maintain a notion page for every single project. Each page has notes about the last thing I worked on or a todo list for the future.

This is simple, I add just the most basic information needed to keep me going. You could replicate the same system with just a txt file on your machine, apple notes, etc.

I’ve gotten into the habit of just pasting my notion todo lists into Claude code and telling it to fix things. Works great.
by LoganDark | 2025-12-30 22:52:27+00:00
> You could argue that outside-in versus inside-out is more of a temperament than it is a form of neurodivergence.

I believe it is both. You can go against your brain's coding with some extra work; somewhat like an adapter, I suppose. Your brain just still is coded a certain way natively.

> or example, what you're describing is basically typical of how Keirsey describes concrete versus abstract reasoning in Please Understand Me. And it could be kind of alienating to be the one abstract reasoner in a group of concrete reasoners and if you believe his statistics it's kind of likely that you'll find yourself in that situation a lot because you gravitate toward the abstract rather than the concrete/operational aspects of a concept.

This is very interesting. I've never heard of concrete/abstract reasoners before, but that does sound similar to what I've described. Thank you for the book.

> much of the technical writing I encounter is written for people who need a lot of examples but don't follow abstract concepts.

Yes! I love using examples to illustrate applications of an abstract concept, but I always explain the concept first. When the concept isn't explained first, I am sad. :(

> So I've internalized building up the abstract concept from the concrete examples.

I believe you may be better at it than I :)
by shaftway | 2025-12-30 22:52:31+00:00
I think it's an attempt to normalize the idea that shelter is a basic human right. As a blue-stater, I'm undecided on whether I agree that it's a right, but I definitely think that nobody has a right to shelter in any property they choose.

It's a pretty complicated issue, and the legal patchwork of state versus county versus city laws can make it really difficult to untangle. I think that given the system we have, everyone in it is pretty much behaving rationally, if in their own best interests. I understand why the squatters would choose a squat over a shelter.
by adriand | 2025-12-30 22:52:45+00:00
This article doesn’t add anything to what we know already. It’s still an open question what happens with the labs this coming year, but I personally think Anthropic’s focus on coding represents the clearest path to subscriber-based success (typical SaaS) whereas OpenAI has a clear opportunity with advertising. Both of these paths could be very lucrative. Meanwhile I expect Google will continue to struggle with making products that people actually want to use, irrespective of the quality of its models.
by troglo-byte | 2025-12-30 22:53:04+00:00
> I do not live in CA, I live in AZ

I've never lived in AZ, but it sounds like this may have a lot to do with it. ;-)

Personal injury is an area where plaintiffs start out with a huge advantage. Judgments are large and cases are often settled out of court by landlords' insurance companies. Not only would you have no trouble finding a lawyer, they might actively seek you out.
by eyberg | 2025-12-30 22:53:08+00:00
A shell by design is explicitly made to run other programs. You type in 'ls', 'cd', 'cat', etc. but those are all different programs. A "webshell" can work to a degree as you could potentially upload files, cat files, write to files, etc. but you aren't running other programs under these conditions - that'd be code you're executing - scripting languages make this vastly easier than compiled ones. It's a lot more than just slapping a heavy-handed seccomp profile on your app.

Also merging the address space is not a necessity. In fact - 64-bit (which is essentially all modern cloud software) mandates virtual memory to begin with and many unikernel projects support elf loading.