MurphyA/hacker-news huggingface dataset:
Show HN: Job Tracker – one-click job application tracking (Chrome extension)
by alohaTool | 2025-12-19 20:53:02+00:00
I built Job Tracker, a lightweight Chrome extension to track job applications with a single click, directly from job posting pages. Check it out : https://github.com/ParasKoundal/JobTracker

- One-click tracking + smart URL matching - Clean dashboard with search, filters, CSV export - Swiss-style minimal UI, light/dark mode - 100% local storage, no tracking, works offline

Open source (MIT). Chrome Web Store version coming soon. Feedback welcome.
by mothballed | 2025-12-19 20:53:35+00:00
Democracy is the process by which people are conned into 'giving up their rights.' People go about voting themselves other people's life, liberty, and property all under the scam that because the majority says it's ok that it is.

The victims -- conned that because they 'voted' they are part of the 'people' who make up the government and they've only done it to themselves.
by EdiX | 2025-12-19 20:54:14+00:00
This is completely wrong. First, disabling overcommit is wasteful because of fork and because of the way thread stacks are allocated. Sorry, you don't get exact memory accounting with C, not even Windows will do exact accounting of thread stacks.

Secondly, memory is a global resource so you don't get local failures when it's exhausted, whoever allocates first after memory has been exhausted will get an error they might be the application responsible for the exhaustion or they might not be. They might crash on the error or they might "handle it", keep going and render the system completely unusable.

No, exact accounting is not a solution. Ulimits and configuring the OOM killer are solutions.
by krzysztofc | 2025-12-19 20:54:17+00:00
Hey folks, I was tired of answering the same question over and over: “Where else can I launch my product besides Product Hunt?” So I made a free list of 100+ Product Hunt alternatives: launchdirectories.com A few things about it: No signup required You can filter by Domain Rating if you care about SEO See which listings are free vs paid Know if links are dofollow or nofollow Basically, it’s just a simple way to find places to launch your product without spending hours Googling or signing up for a bunch of platforms. I’d love feedback if you spot anything missing, and hopefully it saves someone some time when launching :)
by MangoToupe | 2025-12-19 20:54:27+00:00
Do you have any life experience with drugs?

Is this a satirical post? I'm really struggling to comprehend it coherently

Did you mean nicotine?

> Only people with no actual life experience with drugs or drug users would make such an asinine and overtly hyperbolic statement as that.

Ma'am withdrawing from tiktok cannot kill you. Consuming tiktok cannot kill you. Tiktok does not make you shit yourself
by sbuttgereit | 2025-12-19 20:54:37+00:00
Yep. I saw the title and got excited.... this is a particular problem area where I think these things can be very effective. There are so many data entry class tasks which don't require huge knowledge or judgement... just clear parsing and putting that into a more machine digestible form.

I don't know... feels like this sort of area, while not nearly so sexy as video production or coding or (etc.)... but seems like reaching a better-than-human performance level should be easier for these kinds of workloads.
by ibgeek | 2025-12-19 20:54:39+00:00
This seems like a great way to group semantically-related statements, reduce variable leakage, and reduce the potential to silently introduce additional dependencies on variables. Seems lighter weight (especially from a cognitive load perspective) than lambdas. Appropriate for when there is a single user of the block -- avoids polluting the namespace with additional functions. Can be easily turned into a separate function once there are multiple users.
by vablings | 2025-12-19 20:54:48+00:00
How can you not read this and just see it's a huge puff piece for Flock. As far as I can read from the first article and reports they were not pivotal in tracking down the killer. It was once again only someone else who knew that person and came forward, exactly the same as Tyler Robison case

"Phil Helsel Rhode Island Attorney General Peter Neronha said a person who had information about the suspect played a crucial role in the case."
by mikkupikku | 2025-12-19 20:55:01+00:00
I'm not sure if you are or aren't making a clear distinction between "Effective Altruism" and the premise of trying to be effective with your altruism. Everybody who is altruistic tries or at least hopes to be effective with their altruism, and what exactly that means depends on their personal set of values and perspective. An animal lover who donates only to no-kill shelters for love of animals is trying to be effective with their altruism, according to their personal values and priorities. A member of the "Effective Altruism" community however would likely say that person is being ineffective because kill shelters are a unfortunate necessity to make the numbers on pet adoption work out, and anyway they shouldn't be donating to animal welfare in the first place because the most effective way to be altruistic is to buy mosquito nets for poor tropic countries, to maximize the global population because that increases the chance of another Albert Einstein being born who will make some new breakthrough which will doubtlessly have enormous benifit to society, so really the animal lover is being a selfish idiot. Most EA community members will jump off this train of logic at some point before getting to the end, then proceed to argue with each other about it. "Effective Altruism" isn't the mere premise of being effective with altruism, that's the propaganda implication of the name but in reality it's an ideology associated with an online community, with all sorts of baggage.
by zozbot234 | 2025-12-19 20:55:16+00:00
There's no such thing as "the state" except as a societal arrangement. When you argue that "the state" should decide on who gets what, what you're really saying is that this should be the decision of a few power-crazed career bureaucrats, with no accountability whatsoever or any "skin in the game". At least the plutocrat is paying for the aid out of pocket: he will care somewhat that the money is not outright misused. Why should a random government bureaucrat be trusted to make good decisions?
by psyopsy | 2025-12-19 20:55:20+00:00
Am I supposed to be embarrassed for defending someone against a baseless smear?

Anyway, call it "defensive" all you want. It doesn't change the historical thread: You argued, at best, his views made the workplace unwelcoming; the data shows he hires women at parity. You're just backpedaling because the reality didn't match your narrative vibes.
by bryanlarsen | 2025-12-19 20:55:21+00:00
More significantly the new variables x and y in the block are Drop'd at the end of the block rather than at the end of the function. This can be significant if:

- Drop does something, like close a file or release a lock, or

- x and y don't have Send and/or Sync, and you have an await point in the function or are doing multi-threaded stuff

This is why you should almost always use std::sync::Mutex rather than tokio::sync::Mutex. std's Mutex isn't Sync/Send, so the compiler will complain if you hold it across an await. Usually you don't want mutex's held across an await.
by xtiansimon | 2025-12-19 20:55:25+00:00
Apple isn’t the darling “it” product it’s been in years past.

Apps are addictive but not enriching our lives like we once thought.

Now you want to add advertising?

If a new product comes along and hits the right notes—maybe the e-ink variety, or Cat’s Android with thermal camera. I have the four previous, so I don’t imagine it as a trauma to step off the merry-go-round for my next phone.
by agwa | 2025-12-19 20:55:31+00:00
There are a couple things missing from this:

1. The monitoring client does not ensure that the checkpoint was created recently, so a malicious log can conceal malicious entries from monitors by serving an old checkpoint.

2. Though the age keyserver policy is not configured this way, the post suggests you could create a policy that requires only a minority of witnesses (e.g. 3 of 10) to cosign a checkpoint. If you do this, then monitors have to get checkpoints that are cosigned by at least 8 of the 10 witnesses. Otherwise, a malicious log could present one view to relying parties that is cosigned by one set of witnesses, and a different view to monitors that is cosigned by a different set of witnesses. There is currently no mechanism specified for monitors to get these extra cosignatures, so if you go with a minority policy you'll need to invent your own stuff in order for witnessing to actually accomplish anything.
LastChance.Editor
by allmaxdreams | 2025-12-19 20:55:47+00:00
Most apps hoard your data. LastChance deletes it. This is a brutalist journal designed to cure procrastination through loss aversion. You have 60 seconds to write exactly one sentence. Miss a day? Your entire history is wiped. Forever. No logins. No cloud. No "save for later." Just you, a timer, and the risk of losing your story. Stop waiting for the perfect moment. Drive a nail into the wall of time before the day vanishes.
by jcalvinowens | 2025-12-19 20:55:48+00:00
> The RAM is not unusable, it will be used. Some portion of ram may be unallocatable

I think that's a meaningless distinction: if userspace can't allocate it, it is functionally wasted.

I completely agree with your second paragraph, but again, some portion of RAM obtainable with overcommit=0 will be unobtainable with overcommit=2.

Maybe a better way to say it is that a system with overcommit=2 will fail at a lower memory pressure than one with overcommit=0. Additional RAM would have to be added to the former system to successfully run the same workload. That RAM is waste.
by abelanger | 2025-12-19 20:56:05+00:00
FWIW, I think the memory snapshotting idea isn't going to work for most stacks for a few different reasons, but to speak more broadly on API design for durable execution systems, I agree completely. One of the issues with Temporal and Hatchet in its current state is that it currently abstracts concepts that are essential for the developer to understand, like what it means for a workflow to be durable, while the developer is building the system. So you end up discovering a bunch of weird behaviors like "non-determinism error" when starting to test these systems without a good grasp of the fundamentals.

We're investing heavily in separating out some of these primitives that are separately useful and come together in a DE system: tasks, idempotency keys and workflow state (i.e. event history). I'm not sure exactly what this API will look like in its end state, but idempotency keys, durable tasks and event-based histories are independently useful. This is only true of the durable execution side of the Hatchet platform, though; I think our other primitives (task queues, streaming, concurrency, rate limiting, retries) are more widely used than our `durableTasks` feature because of this very problem you're describing.
by pzo | 2025-12-19 20:56:07+00:00
what I like in MistralOCR is that they have simple pricing $1/1k pages and API hosted on their servers. With other OCR is hard to compare pricing because are token based and you don't know how many tokens is the image unless you run your own test.

E.g. with Gemini 3.0 flash you might seem that model pricing increased only slightly comparing to Gemini 2.5 flash until you test it and will see that what used to be 258 per 384x384 input tokens now is around 3x more.
by nickelpro | 2025-12-19 20:56:40+00:00
Reading COW memory doesn't cause a fault. It doesn't mean unused literally.

And even if it's not COW, there's nothing wrong or inefficient about opportunistically allocating pages ahead of time to avoid syscall latency. Or mmapping files and deciding halfway through you don't need the whole thing.

There are plenty of reasons overcommit is the default.
by barfoure | 2025-12-19 20:56:55+00:00
The reason why that formatting is not used is because it’s not useful nor true. The table in the article is far more relevant to the person optimizing things. How many of those I can hypothetically execute per second is a data point for the marketing team. Everyone else is beholden to real world data sets and data reads and fetches that are widely distributed in terms of timing.
by otabdeveloper4 | 2025-12-19 20:56:59+00:00
> because of fork and because of the way thread stacks are allocated

For modern (post-x86_64) memory allocators a common strategy is to allocate hundreds of gigabytes of virtual memory and let the kernel handle deal with actually swapping in physical memory pages upon use.

This way you can partition the virtual memory space into arenas as you like. This works really well.
by linggen | 2025-12-19 20:57:06+00:00
Yes, that’s correct — the model only sees the retrieved slices that the MCP server explicitly returns, similar to pasting selected context into a prompt.

The distinction I’m trying to make is that Linggen itself doesn’t sync or store project data in the cloud; retrieval and indexing stay local, and exposure to the LLM is scoped and intentional.
Ask HN: How can we make our AI/MCP Security product reach audiences?
by ziyasal | 2025-12-19 20:57:35+00:00
We've been building with AI tools and noticed there wasn't a good way to manage MCP servers across a team or see what's actually flowing to LLM providers. Who's running what? Which tools are approved? What data is going where or whats shared on AI websites? So we built CyberCage (<https://cybercage.io>).

# What it does:

- MCP Management — Auto or manual discovery of MCP servers, with approval workflows. Manage allowed MCP servers org-wide (down to individual tools). Secure MCP catalog (integrates with GitHub's MCP Catalog).

- Operations — Manage allowed AI applications org-wide. Full audit logs (Splunk integration available). Notifications via Slack, Teams, Webex, webhooks.

- Network inspection for configured AI domains (but not limited to) to have PII detection, private data exfiltration, de-anonymization and masking

# Works with: AI IDEs: Claude Code, Cursor, VS Code, Windsurf, Antigravity. Low-code platforms: n8n (native integration).

# In private beta:

On-device network agent for configured AI domains. Content inspection for PII and sensitive data. Packet metadata anomaly analysis.

# Coming soon:

BYOLLM (bring your own models for inspection). Browser extensions.

See it in action: <https://youtu.be/Zy7XhkQkUlk>

We built this for visibility and control over AI tooling without slowing teams down.

P.S. We're planning to open source CyberSmol v1.0 — a small model fine-tuned for AI threat detection — once it's ready.

Happy to answer questions ♥
by LordGrey | 2025-12-19 20:57:37+00:00
malloc() and friends may always return NULL. From the man page:

If successful, calloc(), malloc(), realloc(), reallocf(), valloc(), and aligned_alloc() functions return a pointer to allocated memory. If there is an error, they return a NULL pointer and set errno to ENOMEM.

In practice, I find a lot of code that does not check for NULL, which is rather distressing.
by dingnuts | 2025-12-19 20:57:53+00:00
I can't find the CPC certificate for this product. Children's toys are heavily regulated in the US and based on the thermal paper, the lack of display of their authorization to sell, the fly by night nature of a drop shipping website like this ...

I don't think this is a legal product to market towards children in the US

and that's without even mentioning the LLM usage

real glad my nibblings all got real art supplies when they were little. that fosters real creativity and the lot of them can draw better than any of the examples on the sales page, and they're still little kids. and there's no subscription, no EULA, their supplies are legal and safe to use, etc.

This product is actual trash
by oivey | 2025-12-19 20:57:58+00:00
I think we essentially agree. My comments about maintainers wasn’t referencing the Python language maintainers. The print change certainly shouldn’t have blocked anyone.

More interesting is how long it took core libraries to transition. That was my primary blocker. My guess is that there were fairly substantial changes to the CPython API that slowed that transition.

Other changes to strings could be actually dangerous if you were doing byte-level manipulations. Maybe tools could help catch those situations. Even if they did, it took some thought and not just find/replace to fix. The change was a net benefit, but it’s easy to see why people might be frustrated or delay transition.
by yjftsjthsd-h | 2025-12-19 20:58:16+00:00
My point was more that there's plenty of software that is not FOSS and is also not published by an identifiable legal entity, traditionally appearing as freeware/shareware for Windows/macOS. And even if there does appear to be some sort of legal entity (human or company), how many people are going to check that a company even exists on paper before installing the random .exe from its website?
by zahlman | 2025-12-19 20:58:36+00:00
How does stealing someone social media accounts not slot into "organized identity theft"?

... actually: how is XSS not a form of RCE? The script is code; it's executed on the victim's machine; it arrives remotely from the untrusted, attacker-controlled source.

And with the legitimate first-party's permissions and access, at that. It has access to things within the browser's sandbox that it probably really shouldn't. Imagine if a bank had used Mintlify or something similar to implement a customer service portal, for example.
by babypistol | 2025-12-19 20:59:00+00:00
What is up with this argument that LLMs cannot be Turing complete?

> There is a simple argument showing that GPTs, even with an infinite context window, cannot be Turing complete. Since the vocabulary size is finite, the rows of the embedding matrix are bounded, meaning each embedding is in a compact subset of Rn. By Tychonoff's Theorem, the product of the compact spaces the input embeddings live in is also compact. Because the transformer architecture does a bounded number of continuous operations, the output probabilities are bounded from above and below. In particular, the probability of emitting the end-of-sequence token (the special token that halts the completion) is bounded from below by some constant, so the probability of stopping in finite time is 1.

Even if the conclussion might be correct, the argument is pure nonsense.

First of all, why do we need to invoke compactness and Tychonoff's Theorem? Any serious discussion of computability must avoid discussing real numbers. And furthermore, here it is completely unnecessary. All sets are actually finite, so any mention of compactness is just fancy wording for finite in this case.

Second, a probability argument doesn't prove anything about turing completeness. Realistically we must consider LLM's as deterministic machines. The fact that we like to interpret the output of an ML model doesn't have anything to do with actual probability of what happens during execution of an LLM (again, it ia deterministic).

Third, even if we accept the probability argument, we can easily resolve it by just removing the end-of-sequence token and guarantee that the process never stops.

I think the real argument against Turing completeness of GPTs (even with infinite context) would be more along the lines of the fact that it must operate with finite number representations. And a consequence of this would be that it maps an infinite context into a finite set of states, which must result in periodic output at some point.

Finally, as a meta-point, why do so many people enjoy making such quasi-mathematical arguments? Often invoking theorems which obviously can't apply, if they just took a bit of time to clearly define the question. To me it seems like ML people know just enough math to notice some superficial correspondence, but lack the rigor to be able to trully evaluate it.
by websiteapi | 2025-12-19 20:59:18+00:00
all of that and they basically just got lucky. the guy walked to brown from his car parked nearby and shot up some kids, waited days, went to a guy's house in Massachusetts, killed him and never even got caught - he committed suicide and was only found days after his second killing

if anything this whole saga makes me happy smart people aren't killers more often because this guy basically got away...
by burnte | 2025-12-19 20:59:24+00:00
I'm in healthcare IT management, infrastructure, policy, new projects, all the stuff that comes down from the top, except I have a strong technical background, rather than just being a business guy. I started in PC repair 30+ years ago and have always been a hardware guy. I can do a little coding, but I'm the guy that creates the platforms coders work on.
by dasil003 | 2025-12-19 20:59:31+00:00
Not sure if I understand your question but nothing "happens to the rest", overcommitting just means processes can allocate memory in excess of RAM + swap. The percentage is arbitrary, could be 50%, 100% or 1000%. Allocating additional memory is not a problem per se, it only becomes a problem when you try to actually write (and subsequently read) more than you have.
by emtel | 2025-12-19 20:59:34+00:00
There are some situations with tricky lifetime issues that are almost impossible to write without this pattern. Trying to break code out into functions would force you to name all the types (not even possible for closures) or use generics (which can lead to difficulties specifying all required trait bounds), and `drop()` on its own is of no use since it doesn't effect the lexical lifetimes.
by belval | 2025-12-19 21:00:15+00:00
I've worked on document extraction a lot and while the tweet is too flippant for my taste, it's not wrong. Mistral is comparing itself to non-VLM computer vision services. While not necessarily what everyone needs, they are a very different beasts compared to VLM based extraction because it gives you precise bounding boxes, usually at the cost of larger "document understanding".

Its failure mode are also vastly different. VLM-based extraction can misread entire sentences or miss entire paragraphs. Sonnet 3 had that issue. Computer vision models instead will make in-word typos.
by Imustaskforhelp | 2025-12-19 21:00:25+00:00
Well yeah to be honest, I kinda hope that one day we can get something like matrix on top of fediverse and so yeah you are right almost every platform doesnt have direct message e2ee but I was hoping that someday someone can build it for fediverse.

I remember its name (sup) but I don't really see any good updates I am not sure to be honest (https://www.notebookcheck.net/Pixelfed-Loops-and-Sup-Alterna...)
by hathawsh | 2025-12-19 21:00:30+00:00
Erasure coding is an interesting topic for me. I've run some calculations on the theoretical longevity of digital storage. If you assume that today's technology is close to what we'll be using for a long time, then cross-device erasure coding wins, statistically. However, if you factor in the current exponential rate of technological development, simply making lots of copies and hoping for price reductions over the next few years turns out to be a winning strategy, as long as you don't have vendor lock-in. In other words, I think you're making great choices.
by yjftsjthsd-h | 2025-12-19 21:00:48+00:00
> the oldest Red Hat still in extended support, also has it.

You would be alarmed to know how long the long tail is. Are you going to run into many pre-RHEL 7 boxes? No. Depending on where you are in the industry, are you likely to run into some ancient RHEL boxes, perhaps even actual Red Hat (not Enterprise) Linux? Yeah, it happens.
by tkel | 2025-12-19 21:00:50+00:00
For all the people who appear to want a say in this, perhaps you should advocate for a structure in which you actually have a say? As in, nationalization of TikTok?

All other outcomes on the table, you have no input or direction on this company. And people seem to be justifying US interference on the basis that its influence warrants public direction.

Well then that same logic would justify it being controlled by the public, no?