MurphyA/hacker-news huggingface dataset:
by bsder | 2025-12-18 03:24:40+00:00
> Is this the reason for pushback?

I suspect it's more a general anti-AI training thing, actually.

Nobody technical I ever worked with had an issue with putting the course syllabus up on a website before now.

I didn't mind if students recorded my lectures, but I did ask them not to share beyond the students as a courtesy to both myself and other students. I didn't want students being afraid to ask questions in class because they might be recorded. And I didn't want my lectures really going outside, especially if I gave advice or teaching tailored to the class itself. My technical experience is hard earned, and I'm not being paid anywhere nearly enough by a university for it to be shared to the public at large.

In this day and age, I'd probably take a much harder line. If I'm being paid to teach students, I'm not expecting the lecture to be fed into the AI maw. If AI wants my lectures, they can pay for it.
by goku12 | 2025-12-18 03:25:16+00:00
That's not how it works. A larger codebase to scrutinize means that there's more chance of missing a memory safety bug. If you can keep the Rust unsafe block bug-free, you don't need to worry about them anymore in safe Rust. They're talking about attention getting divided all over the code where this distinction is not there (like C code). They always have been.

On top of that, there is something else they say. You have to uphold the invariants inside the unsafe blocks. Rust for Linux documents these invariants as well. The invariant was wrong in this case. The reason I mention this is because this practice has forced even C developers to rethink and improve their code.

Rust specifies very clearly what sort of error it eliminates and where it does that. It reduces the surface area of memory safety bugs to unsafe blocks, and gives you clear guidelines on what you need to ensure manually within the unsafe block to avoid any memory safety bugs. And even when you make a human error in that task, Rust makes it easy to identify them.

There are clear advantages here in terms of the effort required to prevent memory safety bugs, and in making your responsibilities explicit. This has been their claim consistently. Yet, I find that these have to be repeated in every discussion about Rust. It feels like some critics don't care about these arguments at all.
by lab700xdev | 2025-12-18 03:25:52+00:00
This is incredibly valuable feedback. I’ve been reading through the pickle-fuzzer repo this morning, specifically about stack manipulation bypassing static heuristics. You nailed the trade-off: AIsbom is designed for the "90% hygiene" case in a fast CI/CD pipeline (where spinning up a VM/Fuzzer might be too heavy/slow for every commit). We aim to catch the low-hanging fruit (obvious RCE) and generate the Inventory (SBOM) rapidly. That said, moving toward an "Allowlist Only" (Strict Mode) approach seems like the better way to make static analysis resilient against the obfuscation you mentioned. We are prioritizing that for upcoming release. Would love to potentially reference your fuzzer in our docs as the "Deep Scan" alternative!
by robertwt7 | 2025-12-18 03:26:30+00:00
looking at the results, it seems like flash should be the default now when using Gemini? the difference between flash thinking and pro thinking is not noticeable anymore, not to mention the speed increase from flash! The only noticeable one is MRCR (long context) benchmark which tbh I also found it to be pretty bad in gemini 3 preview since launching
by lanstin | 2025-12-18 03:27:34+00:00
This thinking pattern exactly illustrates how a group of very intelligent people can make disasterously bad decisions without anyone challenging them. Don't look for holes in the the arguments of people saying you are making a bad decision, look for the information they have that you do not have or have not explicitly analyzed. If you think you have all the information that the org possesses, go right ahead and make your choices without others; you might be lucky and be Steve Jobs post 2000.
by csdreamer7 | 2025-12-18 03:27:42+00:00
Are you sure it is not malware? When was the last time you changed the profile?

Also, I have a ton of bookmarks and as I been slowly deleting them Firefox's performance has improved. This same giant size of bookmarks Chrome seems to sync out of order causing their placement to change.

Ublock origin also does slow down the browser a bit on websites that.. don't.. have ads.
by ChrisArchitect | 2025-12-18 03:28:30+00:00
Related:

Instacart reaches into your pocket and lops a third off your dollars

https://news.ycombinator.com/item?id=46245833

Instacart's AI-Enabled Pricing Experiments May Be Inflating Your Grocery Bill

https://news.ycombinator.com/item?id=46205041
by baubino | 2025-12-18 03:28:58+00:00
This post makes me feel really old.

HN is very self-explanatory if you take it for what it is — a discussion forum. It’s a place where some people post ideas, questions, news, or projects and other people respond to them. That’s it. If you post something interesting or meaningful, then people will respond.

Your question makes me feel ancient because I fear that the concept of communicating to spark conversation (as opposed to communicating to promote or to manipulate or to drive traffic or to pull any number of other “levers”) is exceedingly a thing of the past.
by Karrot_Kream | 2025-12-18 03:31:10+00:00
Here's [1] the Japanese Ministry of Health, Labor, and Welfare's page on preventing suicides. The motto is 誰も自殺に追い込まれることのない社会の実現を目指して or "Aiming for a world where nobody must deal with suicide"

[1]: https://www.mhlw.go.jp/stf/seisakunitsuite/bunya/hukushi_kai...
by mcphage | 2025-12-18 03:31:13+00:00
> who is incentivized to push for a correction in this case?

Well, the government at the very least. From the article:

> Banks are highly regulated, so they can’t just loan whatever they want. The government insists that banks keep high margins of safety in their portfolio, and commercial loans are risky, so the terms they can offer are designed to limit risk. […] Second, the bank must keep a strict loan-to-value (LTV) ratio — so they won’t lend more than 80% of the value of the building (and often less than that).

The government says banks can’t loan more than 80% of the value of the building because it’s too risky. But what banks have done is instead maintained an inflated value of the property so they can loan out a higher percentage, which has led to the country being full of empty, overvalued property. Ie, a high risk of collapse—which is just what the regulation was intending to prevent. Lying about the value of an object to get around regulations is often considered fraud.
by estearum | 2025-12-18 03:33:00+00:00
Good reasons:

* Most drug candidates just don't work

* Even among the drug candidates that do, figuring how to safely deliver them to their target is very hard (looks similar to "just doesn't work")

Bad reasons:

* It's too expensive to prove that a drug works

* It's too difficult to differentiate the patients for whom a drug works and the patients for whom it does not

* It is very hard to predict recruitment and to actually recruit patients for clinical trials

* There aren't enough people with the disorder who are also rich enough to afford treatment to justify development
by jjpones | 2025-12-18 03:34:36+00:00
>...the roles of maker and consumer tend to be more clearly separated. In contrast, among Japanese users, that line feels much more blurred.

Seeing a Japanese singer I really enjoy listening to post clips of her Valorant gameplay with her own music playing in the background was quite jarring. I couldn't imagine something remotely similar happening with a pop-singer in the West. The closest analogue that comes to mind would be D&Diesel with Vin Diesel, where he played D&D (the nerd that he is) for a youtube video with the Critical Role cast.
by jaigupta | 2025-12-18 03:34:56+00:00
Only if I could figure out how to use it. I have been using Claude Code and enjoy it. I sometimes also try Codex which is also not bad.

Trying to use Gemini cli is such a pain. I bought GDP Premium and configured GCP, setup environment variables, enabled preview features in cli and did all the dance around it and it won't let me use gemini 3. Why the hell I am even trying so hard?
by Brajeshwar | 2025-12-18 03:35:39+00:00
This is cliché, but I really liked, “Slow is Smooth, Smooth is Fast.”[1] I keep saying this to my daughters. Sometimes, when I asked them to “do it faster,” they would respond with “What happened to Slow is Smooth?”

I’ve explained a few times that the idea is to practice deliberately, slowly, and take time to learn things, so when you do it next, you can do it smoothly and become faster.

That saying about ducks gliding across the water in perfect calm, while beneath the surface, their feet work furiously, unseen. Yesterday, I stumbled upon the terminology, in Italian, Sprezzatura.[2] Do difficult things while making it appear effortless, the art of making something difficult look easy, or maintaining a nonchalant demeanor while performing complex tasks.

To do Sprezzatura, one has to Slow is Smooth, Smooth is Fast.

1. https://brajeshwar.com/2025/slow-is-smooth-smooth-is-fast/

2. https://brajeshwar.com/2026/sprezzatura/
by nl | 2025-12-18 03:36:38+00:00
1. The purpose of the benchmark is to choose what models I use for my own system(s). This is extremely common practice in AI - I think every company I've worked with doing LLM work in the last 2 years has done this in some form.

2. I discussed that up-thread, but https://github.com/microsoft/private-benchmarking and https://arxiv.org/abs/2403.00393 discuss some further motivation for this if you are interested.

> To me it's in the same spirit as claiming to have defeated alpha zero but refusing to share the game.

This is an odd way of looking at it. There is no "winning" at benchmarks, it's simply that it is a better and more repeatable evaluation than the old "vibe test" that people did in 2024.
by ewoodrich | 2025-12-18 03:36:51+00:00
Yeah my parents never really cared enough to explore ChatGPT despite hearing about it 10 times a day in news/media for the last few years. But recently my mom started using Google's AI Search mode after first trying it while doing research for house hunting and my dad uses the Gemini app for occasional questions/identifying parts and stuff (he has always loved Google Lens so those sort of interactive multimedia features are the main pull vs plain text chatbot conversations).

They are both Android/Google Search users so all it really took was "sure I guess I'll try that" in response to a nudge from Google. For me personally I have subscriptions to Claude/ChatGPT/Gemini for coding but use Gemini for 90% of chatbot questions. Eventually I'll cancel some of them but will probably keep Gemini regardless because I like having the extra storage with my Google One plan bundle. Google having a pre-existing platform/ecosystem is a huge advantage imo.
by kortilla | 2025-12-18 03:37:13+00:00
All of the time? Backup power is table stakes for anyone serious about hosting.

It’s not even clear what you’re trying to say, but redundancy is one of the primary things you are paying for when shopping for a datacenter to use.

Even tiny 1000 sqft data centers for colleges had UPSes with 1-2 generators 20+ years ago.
by lanstin | 2025-12-18 03:37:36+00:00
My first big job was the 1 junior per team; those years were extremely good for learning how to design and write high performance services. Since then, I've mostly been at the 70/30 places where I'm considered senior. Occasionally I just sit down and blast out a big software project, just to feel I am still able, but mostly I tend the garden hoping that a few of the fragile stems will survive and grow into mighty oaks.
by 0xCE0 | 2025-12-18 03:37:43+00:00
I love Fossil, I love SQLite, and I also like Althttpd.

https://sqlite.org/althttpd/doc/trunk/althttpd.md

Just like Fossil vs Git, SQLite vs $SomeRealSQLServer, I wish someday Althttpd would become a no-bullshit self-contained replacement for Nginx/Apache/whatever bloated HTTP servers. It has already proved its working by serving Fossil/SQLite, but configuration/features for serving actual web site is not yet "real production quality", at least that is how I feel.

Overall, what an amazing legacy this set of software has been to the world.
by lovich | 2025-12-18 03:38:30+00:00
Frankly, I don't believe you without some strong evidence that you had fought or pushed back against this admin's censorship in some form, that is more than just words. Every single person I have met or read about who espoused your views, inevitably showed up on the side of censorship when they didn't like what the other guy said, or is still willing to vote for the candidate whose censoring others because of some social war bullshit.

For instance I used to be active in /r/Libertarian until the day the Mises Caucus took over and they banned anyone who said there were branches of libertarianism that were left leaning, for lying.

If, and I really stress the word "if" there, you are telling the truth, then cool, but you are exceedingly rare in that case

edit: Also lol, none of the "free speech absolutist" elon fanboys showed up, but my comments been flagged to reduce its viewership. Not really changing my mind on the opinion of people in this forum who wax poetic about free speech
by cobertos | 2025-12-18 03:39:01+00:00
Luckily umami in docker is pretty compartimentalized. All data is in the and the DB runs in another container. The biggest thing is the DB credentials. The default config requires no volume mounts so no worries there. It runs unprivileged with no extra capabilities. IIRC don't think the container even has bash, a few of the exploits that tried to run weren't able to due to lack of bash in the scripts they ran.

Deleting and remaking the container will blow away all state associated with it. So there isn't a whole lot to worry about after you do that.
by ehnto | 2025-12-18 03:39:12+00:00
> If you babysit them, then perhaps but then what is the point

In a long term enterprise the point is building up a long term skillset into the community. Bolstering your teams hive mind on a smaller scale also.

But work has evolved and the economy has become increasingly hostile to long term building, making it difficult to get buy in for efforts that don't immediately get work done or make money.
by mcphage | 2025-12-18 03:40:25+00:00
> Everything is priced that way, basically. In the world of finance, everything is priced according to the future income it can generate -- not just real estate, but stocks, bonds, etc. There's nothing insane about it. To the contrary, it's the only rational way of doing things.

The only rational way of doing things is to turn every part of our economy into a bubble? Well, that at least explains why it’s all collapsing.
by rramadass | 2025-12-18 03:40:26+00:00
Yes; I am seriously thinking of getting the "Modern Fortran Explained" book (https://academic.oup.com/book/56095). Modern Fortran has everything (Procedural, OO, Functional, Multithreading, Parallel etc. features) that all modern languages have. I would say it is no longer "just" for numerical computing. Excellent libraries/ecosystem, a well supported and stable language, fantastic optimization right out of the box etc. makes it a great general purpose language.

Fortran in Modern Scientific Computing: An Unexpected Comeback - https://medium.com/@stack1/fortran-in-modern-scientific-comp...

5 Reasons Why Fortran is Still Used - https://www.matecdev.com/posts/why-fortran-still-used.html

Is Fortran better than Python for teaching the basics of numerical linear algebra? - https://loiseaujc.github.io/posts/blog-title/fortran_vs_pyth...

I take back everything i said about FORTRAN - https://x.com/ThePrimeagen/status/1745542049284423973

Modern Fortran online tutorial - https://wvuhpc.github.io/Modern-Fortran/
by CGamesPlay | 2025-12-18 03:40:44+00:00
Notably, if you run docker-in-docker, Docker is probably not a security boundary. Try this inside any dind container (especially devcontainers): docker run -it --rm --pid=host --privileged -v /:/mnt alpine sh

I disagree with other commenters here that Docker is not a security boundary. It's a fine one, as long as you don't disable the boundary, which is as easy as running a container with `--privileged`. I wrote about secure alternatives for devcontainers here: https://cgamesplay.com/recipes/devcontainers/#docker-in-devc...
by justinc8687 | 2025-12-18 03:43:08+00:00
I've had quite good luck asking Gemini and ChatGPT to include links to research papers for every claim they make. Not only can I review at least the abstracts but I find when I do this, they'll retract some of the hallucinations they've have made in prior messages. It almost seems (and maybe they do) in their web searching tools, reread the content they include. Thus, greatly reducing errors, with minimal extra effort on my part.
by comp_bio | 2025-12-18 03:44:07+00:00
This is a fascinating niche of evolutionary biology that I have worked in for a while. The short answer is that yes, as far as we can tell all organisms evolve increasingly more efficient replication machinery, however at some point the strength of selection is no longer powerful enough to overcome the strength of genetic drift and some degree of error rate persists. As far as we can tell it seems like population size governs where this balance ends up such that small populations have high mutation rates and large populations have reduced mutation rates. Michael Lynch coined the term drift barrier hypothesis to describe this phenomenon. https://pubmed.ncbi.nlm.nih.gov/23077252/
by Andrex | 2025-12-18 03:46:38+00:00
It's not hard to look at each profile, most will proudly shout their top credentials as visibly and often as possible. "1M Subscribers on YouTube!" vs. "I worked in this industry for 10 years" is a pretty easy call. How much of this process should be spoonfed? Active engagement is required at some point.

Udemy functions as open market with the associated pros and cons.
by clanky | 2025-12-18 03:47:28+00:00
> That the US cannot win a war is silly. The US could erase every population center within a few minutes.

Although the U.S. ruling class often likes to pretend it can operate with no regard for its domestic perceptions of legitimacy, the stunning amounts they expend on relentless psychological operations suggest otherwise. Killing millions in an aggressive nuclear strike would do nothing but reveal to many people (who are desperately trying to pretend otherwise) that they are controlled by a klatch of relentless psychopaths.
by octaane | 2025-12-18 03:47:51+00:00
Sorry, as someone in this field, this is bullshit. It is in mice.

Several things trigger my bullshit meter. Quote:

"This dramatically surpasses the therapeutic efficacy of current standard treatments, including immune checkpoint inhibitors (anti-PD-L1 antibody) and liposomal doxorubicin (chemotherapy agents)"

PD-L1 monoclonal antibodies are only effective against cancers that are, you guessed it, PD-L1 positive. At high percentages, ranging from 1 to 50%. Are these authors even familiar with the state of the art when it comes to cancer medications? Mouse tumors do not equate to people tumors. Many tumor types are not PD-l1 positive.

Doxy is an ancient SOC chemo.

This is a nothing burger.

Give me phase II/III clinical trials, and then let me know what their PFS/OS was after 5 years. and what the medians were at 3- and 5-years. Also, ORR and CR and needed.

CAR-T is ahead of the game, and will be the ultimate winner here as it grows to scale.
by pdonis | 2025-12-18 03:48:25+00:00
Your argument as it stands would explain why people with college degrees smoke a lot less than people without them. But that's not what the "place effects" is in the article. "Place effects" is the fact that, if we just look at non-college-graduates, the ones who live in rural areas smoke more and have lower life expectancy than the ones who live in urban areas.

The latter effect, I think, can be explained by an argument that's similar to yours: even for non-college graduates, it's a lot more inconvenient to be a smoker in urban areas than in rural areas. You're much more likely to find smoking banned inside the places you go, and to face social disapproval if you try to smoke outdoors in public spaces.
Show HN: PacketPro – Inspect iOS app network traffic locally
by noteable | 2025-12-18 03:48:47+00:00
PacketPro is an iOS app for inspecting network traffic generated by apps directly on the device.

It allows viewing outbound HTTP/HTTPS requests in real time, including request URLs, headers, methods, status codes, and response bodies. All inspection is performed locally on-device, without requiring a Mac proxy or jailbreak.

Beyond basic traffic capture, it provides multiple filtering and analysis tools: - Multiple filters for hosts, domains, request methods, status codes, and content types - Per-session organization, making it easier to isolate traffic from specific app interactions - Ability to include or exclude requests dynamically while capturing traffic - Search and quick filtering across captured sessions

For development and debugging workflows, it supports: - Inspecting API request/response payloads during app development - Verifying request headers, auth tokens, and parameter formatting - Debugging unexpected network behavior or redundant requests - Analyzing third-party SDK and analytics traffic - Exporting captured traffic for further inspection or documentation

Some notable points: - Fully on-device traffic inspection (no external server involved) - Works with regular iOS apps - Session-based request organization - Multiple filtering options for focused analysis - Export support for further analysis
by michaelcampbell | 2025-12-18 03:48:56+00:00
Same here; I've gotten a lot of utility from Udemy. Actually kind of got me a job (tbf, the manager I'd known for years and he'd've hired me regardless, but I was able to actually DO the job he wanted me to do basically day 0, even when he was willing to hire me and let me learn as I went).

There's some crap there; I've returned a couple courses not to my liking, but by and large I've been happy with them.
by EnergyAmy | 2025-12-18 03:49:14+00:00
The gamete-based definition of sex is merely a description of reality.

I continue to look forward to your citation disputing the truth of what he lays out in that paper, or the other links I provided that affirm the same stance. Ad hominems are boring, don't you have anything?

You unfortunately don't really understand the point here, but to reiterate, just because someone is born with nonfunctional/missing gonads doesn't mean their body isn't sexed. As an analogy, if someone is born without a hand, we don't just shrug and say that it could've been a fin, or antlers, or a firetruck. That's the point of saying that their body is organized around the production of one of exactly two gamete types.

There's no conflict, physical form and chromosomes are variations within a sex, which is entirely defined by gametes. Chromosomes are part of how sex is determined, but gametes are how sex is defined.

I look forward to your citations of these people doing field work that support your points.