MurphyA/hacker-news huggingface dataset:
by theamk | 2025-12-08 18:36:00+00:00
Low-value secrets are OK with low-effort key management.

If you are using UUIDv7 already, and just want to hide the timestamp part, you don't need HSM or key rotation. Make up a key, hardcode it into source code (or into your terraform files), and use it with AES/Blowfish. This will not stop nation-state APT attackers, but will provide immediate protection from random person on the internet. Just make sure that this is not a _sole_ method to protect user identity.

And the most important part: to guard against overenthusiastic security folks, _never_ call this "encryption", but always "obfuscation", especially in the source code. Seeing "EncryptCustomerID" triggers hard questions about key management, and could be pretty dangerous ("We encrypt customer ID, I saw it in the source code.. which means we don't need a password"). On the other hand, "ObfuscateCustomerID" makes the intent much clearer.
by GavCo | 2025-12-08 18:36:15+00:00
Author here.

If by conflate you mean confuse, that’s not the case.

I’m positing that the Anthropic approach is to view (1) and (2) as interconnected and both deeply intertwined with model capabilities.

In this approach, the model is trained to have a coherent and unified sense of self and the world which is in line with human context, culture and values. This (obviously) enhances the model’s ability to understand user intent and provide helpful outputs.

But it also provides a robust and generalizable framework for refusing to assist a user due to their request being incompatible with human welfare. The model does not refuse to assist with making bio weapons because its alignment training prevents it from doing so, it refuses for the same reason a pro-social, highly intelligent human does: based on human context and culture, it finds it to be inconsistent with its values and world view.

> the piece dismisses it with "where would misalignment come from? It wasn't trained for."

this is a straw-man. you've misquoted a paragraph that was specifically about deceptive alignment, not misalignment as a whole
by citruscomputing | 2025-12-08 18:36:22+00:00
Oh, this will be very useful. My current solution is incredibly hacky, I run an unauthenticated SSH server on the Kindle (key-based wasn't working), port scan to find it, and SFTP new files. At home, at least, I have a static IP. The whole system falls apart enough that I usually just connect to calibre's remote server and send books that way, though. I wonder what the battery impact of running tailscale on a Kindle is.
by ZeroConcerns | 2025-12-08 18:36:57+00:00
> How did you manage this?

I did absolutely nothing special, other than running the latest-and-greatest Windows 11 Enterprise, which is what we put on most of our laptops without any customizations other than "require 2FA and some antivirus and firewalling" via Intune.

And I just went into our Azure admin portal, looking for any AI goodies to enable, and... there just doesn't seem to be anything there? And we have an Enterprise P2 subscription, which is usually where all the good stuff is, but, yeah...
by ChrisArchitect | 2025-12-08 18:37:31+00:00
Repackaged article collection:

July https://www.theverge.com/cs/features/709635/knock-it-off (https://archive.ph/Y0dvZ)

Nov https://www.theverge.com/cs/features/804409/perez-hilton-liv... (https://archive.ph/fuXL4)

Nov https://www.theverge.com/cs/features/818380/college-students... (https://archive.ph/Edc6G)

Dec https://www.theverge.com/cs/features/836456/influencers-tikt... (https://archive.ph/Atrlc)
by jondwillis | 2025-12-08 18:37:33+00:00
That’s what GP is saying. This is the Docs feature of Cursor. It covers external docs/arbitrary web content.

`@Docs` — will show a bunch of pre-indexed Docs, and you can add whatever you want and it’ll show up in the list. You can see the state of Docs indexing in Cursor Settings.

The UX leaves a bit to be desired, but that’s a problem Cursor seems to have in general.
by dang | 2025-12-08 18:37:36+00:00
Arlan had this in his text but I cut it for brevity - sorry about that! Here's the bit:

In our internal benchmark on bleeding edge SDK and library features, Nia produced the lowest hallucination rate among the context providers and search tools we tested (context7, exa code, etc), and I wrote up the setup and results in a separate blog post: https://www.nozomio.com/blog/nia-oracle-benchmark
by theamk | 2025-12-08 18:37:45+00:00
meh, I dunno.

Using bare-metal requires competent Unix admins, and Actions team is full of javascript clowns (see: decision to use dashes in environment variable; lack of any sort of shell quoting support in templates; keeping logs next to binaries in self-hosted runners). Perhaps they would be better off using infra someone else maintains.
by akamaka | 2025-12-08 18:38:13+00:00
Both of the charts I posted have GDP as the denominator (although I incorrectly said the first was “share of budget”).

I think it’s very important to use GDP as a denominator, because otherwise you’ll be stuck crying wolf, saying “debt always keeps going up” even during the good times.

There are a lot of people who simply don’t believe that the government budget needs a trim right now, because people have been continuously saying there was a debt crisis even when the financial situation was relatively favorable.
by anonymousiam | 2025-12-08 18:38:24+00:00
It's a mixed bag. Some programs use Green Hills Integrity, some use Wind River VxWorks, some roll their own. I've done all of the above.

The main purpose of the OS is to centralize, schedule, and manage the resources needed for the mission. It's usually pretty lightweight. Different philosophies are used on different missions. The OS risks can be mitigated. Usually there's a backup "golden copy" OS that can boot if needed. There's also "Safe Mode", which prioritizes communications with the ground, so anomalies can be worked.
A New Approach to GPU Sharing: Deterministic, SLA-Based GPU Kernel Scheduling
by medicis123 | 2025-12-08 18:38:46+00:00
Most GPU “sharing” solutions today (MIG, time-slicing, vGPU, etc.) still behave like partitions: you split the GPU or rotate workloads. That helps a bit, but it still leaves huge portions of the GPU idle and introduces jitter when multiple jobs compete.

We’ve come up with a different model, similar to how operating systems schedule tasks. Instead of carving up the GPU, we run multiple ML jobs inside a single shared GPU context and schedule their kernels directly. No slices, no preemption windows — just a deterministic, SLA-style kernel scheduler deciding which job’s kernels run when.

This results in the GPU behaving more like an always-on compute fabric rather than a dedicated device. SMs stay busy, memory stays warm, and high-priority jobs still get predictable latency. More details at https://woolyai.com/blog/a-new-approach-to-gpu-kernel-scheduling-for-higher-utilization/ Check out our technology at https://www.woolyai.com.
by Ajedi32 | 2025-12-08 18:39:24+00:00
That's part of it, but I think another part is just the way the LLMs are tuned. They're capable of more conversational tones, but human feedback in post-training biases them toward a writing style that's more of a Quora / StackOverflow / Reddit Q&A style because that's what gets the best ratings during the RLHF process.
by mlloyd | 2025-12-08 18:39:28+00:00
I don't think we use CGMs enough. There's nothing that tells you more about your food choice than the way your blood sugar reacts after you eat it. Teaching that can actually help folks manage their weight better because they can see in real time what's a good dietary choice vs a bad one.

And while blood sugar isn't the only metric for healthy eating, it's significant enough that management of it will show measurable increases to one's health.
by hathawsh | 2025-12-08 18:39:52+00:00
I think your intuition matches mine. When I try to apply Claude Code to a large code base, it spends a long time looking through the code and then it suggests something incorrect or unhelpful. It's rarely worth the trouble.

When I give AI a smaller or more focused project, it's magical. I've been using Claude Code to write code for ESP32 projects and it's really impressive. OTOH, it failed to tell me about a standard device driver I could be using instead of a community device driver I found. I think any human who works on ESP-IDF projects would have pointed that out.

AI's failings are always a little weird.
by catigula | 2025-12-08 18:39:52+00:00
Why would a "real super intelligent AI" be your servant in this scenario?

>I hope this hypothetical AI has humans in high regard

This is invented. This is a human concept, rooted in your evolutionary relationships with other humans.

It's not your fault, it's very difficult or impossible to escape the simulation of human-ly modelling intelligence. You need only understand that all of your models are category errors.
by brianolson | 2025-12-08 18:39:57+00:00
I worked in blockchain 5 years trying to build good tech, and speculators ruin everything and don't care about good tech, but the real punch line is that

good tech is like 2% of a real answer

Here's a rant about a bunch of other layers of 'so you want to move money'

https://voidfox.com/blog/payment_processor_fun_2025_making_y...

and different parts of the blockchain ecosystem are working on some parts of that, and all together they're still a long ways off
by ivansavz | 2025-12-08 18:40:05+00:00
Yes, I was (and still am) similarly impressed with LLMs ability to understand the intent of my queries and requests.

I've tried several times to understand the "multi-head attention" mechanism that powers this understanding, but I'm yet to build a deep intuition.

Is there any research or expository papers that talk about this "understanding" aspect specifically? How could we measure understand without generation? Are there benchmarks out there specifically designed to test deep/nuanced understanding skills?

Any pointers or recommended reading would be much appreciated.
by throw4847285 | 2025-12-08 18:40:24+00:00
The problem is one of negative polarization. I found myself skeptical of a lot of the claims around LLMs, but was annoyed by AI critics forming an angry mob anytime AI was used for anything. However, I still considered myself in that camp, and ended up far more annoyed by AI boosterism than AI skepticism, which pushed me in the direction of being even more negative about AI than I started. It's the mirror of what happened to you, as far as I can tell. And I'm sure both are very common, though admitting it makes one seem reactive rather than rational and so we don't talk about it.

However, I do dispute your central claim that the issues with LLMs parallel the issues with people. I think that's a very dehumanizing and self-defeating perspective. The only ethical system that is rational is one in which humans have more than instrumental value to each other.

So when critics divide LLMs and humans, sure, there is a descriptive element of trying to be precise about what human thought is, and how it is different than LLMs, etc. But there is also a prescriptive argument that people are embarrassed to make, which is that human beings have to be afforded a certain kind of dignity and there is no reason to extend that to an LLM based on everything we understand about how they function. So if a person screws up your order at a restaurant, or your coworker makes a mistake when coding, you should treat them with charitability and empathy.

I'm sure this sounds silly to you, but it shouldn't. The bedrock of the Enlightenment project was that scientific inquiry would lead to human flourishing. That's humanism. If we've somehow strayed so far from that, such that appeals to human dignity don't make sense anymore, I don't know what to say.
by jacquesm | 2025-12-08 18:41:06+00:00
Big tech's moat is mostly built up around perceived security (not actual security) and abuse of monopoly positions, AI is going to make it easier for them to maintain this because it serves as an addictive component for the users, or so they hope. In practice it only appeals to the lowest common denominator, which is exactly how they built their empires in the first place. AI allows non-experts to pretend they are experts with confidence, and to produce output they claim as their own to which they have no real title. As a democratizing principle that's great, but as a quality-of-service-provided item it could easily become a disaster and I think MS et-al are betting that they will be able to 'fake it until they make it' on the quality front to avert that disaster.

So far, I'm not seeing it. All I see is a massive leap forward in the first two years that still had some fundamental problems and a lot of fancy packaging of the same broken stuff since then. We're looking at band-aids here, not actual progress.
by 0xffff2 | 2025-12-08 18:41:35+00:00
Take a look at job adds for major defense contractors in jurisdictions that require salary disclosure. Wherever all that defense money is going, it's not engineering salaries. I'm a non-DoD government contractor and even I scoff at the salary ranges that Boeing/Lockheed/Northrup post, which often feature an upper bound substantially lower than my current salary while the job requires an invasive security clearance (my current job doesn't). And my compensation pales in comparison to what the top tech companies pay.
by Someone | 2025-12-08 18:41:53+00:00
On the one hand earthquakes remove tension from the earth’s crust and release energy that can’t be used in future shocks.

On the other hand, if a shock doesn’t release all energy it may come to rest in a relatively weak spot that will soon give away again (https://en.wikipedia.org/wiki/Earthquake_swarm: “The Matsushiro swarm lasted from 1965 to 1967 and generated about 1 million earthquakes. This swarm had the peculiarity of being sited just under a seismological observatory installed in 1947 in a decommissioned military tunnel. It began in August 1965 with three earthquakes too weak to be felt, but three months later, a hundred earthquakes could be felt daily. On 17 April 1966, the observatory counted 6,780 earthquakes, with 585 of them having a magnitude great enough to be felt, which means that an earthquake could be felt, on average, every two and a half minutes.”)

Because of that, I think an earthquake will increase the probability of one occurring again soon, but decrease its strength.
by cezart | 2025-12-08 18:42:00+00:00
Depends what you compare it with. I grew up in the post soviet union. That system allocated resources to various monopolies who were too big to fail. Turns out allocating capital based on who can make things that people want/need to buy, and do it with a profit, multiplies said capital way faster. From this point of view, over time your initial base grows into all kinds of industries etc. That's probably why the USA won the cold war.
by JumpCrisscross | 2025-12-08 18:42:03+00:00
> curious how often tactics like this work

Hostile takeovers hit their zenith "in the 1980s" [1], when about 50% of attempts succeeded [2].

Since then, Delaware courts have become more Board friendly (specifically, friendly to takeover defences), antitrust made "it more difficult for companies with large market shares to acquire competitors without some level of cooperation from the target company," and stocks became more expensive [1]. (I'm struggling to find recent literature on frequencies.)

Compared to the 1980s and pre-Covid hostile takeover zenith, stocks remain expensive. But money is chaper, particularly for the politically connected. Antitrust is a wild card. And Warner has reduced takeover defences given it's already in the market for a sale (Revlon duties).

So...somewhere below 50%?

[1] https://corpgov.law.harvard.edu/2020/11/08/the-comeback-of-h...

[2] https://faculty.fiu.edu/~daiglerr/pdf/hostile_takeovers.pdf
by reactordev | 2025-12-08 18:42:04+00:00
>How many different models of PCs get released?

If you want to go that route, each manufacturer is responsible for their own drivers for windows, linux, and possibly Mac (though if it’s novel enough, they will do it). Then think about the components that make up a PC. Motherboard, CPU, Memory Control, IO, OS, Audio, Video. Each of those needs to release patches. So its orders of magnitude more than any Android OS. It’s just pure laziness on the hardware manufacturers that don’t want to invest in software/support. They want Google to do that.
by PaulHoule | 2025-12-08 18:42:38+00:00
I read all about the Hills when I was a kid, also in NH.

The basic thing I’d say is you cannot trust memories “recovered” under hypnosis at all. See also

https://en.wikipedia.org/wiki/Dissociative_identity_disorder

which is also a product of hypnosis therapy. I mean, it works for a lot of things, but not for getting the truth.
by burningChrome | 2025-12-08 18:42:43+00:00
I've fooled around with some vibe coding on several LLM's like Claude, Gemini, and ChatGPT with some pretty decent results.

Since I have a full Copilot license at my corporate day gig, I figured I would try using Copilot for a basic static site. Nothing too hard, and something that's been handled easily with the other LLM's.

The prompt was pretty basic just to get something to start working with. "Build a four page template. With a home or index page, two pages of content and a contact page with a responsive slide out menu from the left hand side of the page."

It ran and put everything in a folder. I open the home page and everything was broken. I opened the files in VS Code and saw this:

<ul class="drawer__list"> <li>index.htmlHome</a></li> <li>services.htmlServices</a></li> <li><a class="nav-linkeduling</a></li> <li>contact.htmlContact</a></li> </ul>

And then this:

<head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>Home · Acme Web</title> <meta name="description" content="Accessible, responsive starter template with a slide-out menu."/> <linkts/css/styles.css /assets/css/styles.css </head>

I mean, if you can't even this right, I don't have much hope it can do anything more complicated. To say this was pretty sad is an understatement and clarified how far Microsoft is behind other LLM's.
by jsheard | 2025-12-08 18:42:49+00:00
That doesn't always hold, if you want color e-ink then Kobo is currently the cheaper option.

Kindle Colorsoft (7" 16GB) - $250

Kindle Colorsoft (7" 32GB) - $280

Kobo Clara Color (6" 16GB) - $160

Kobo Libra Color (7" 32GB) - $230

The Libra also supports a stylus (sold separately) while the Colorsoft doesn't, that's reserved for the much bigger and pricier Kindle Scribe.
by allears | 2025-12-08 18:42:59+00:00
You're framing this as Muslim vs. Christian. Civilization operates best when church and state are separate. That's certainly under threat, and not just from Muslims. However, the Earth's population is growing, and it's unrealistic (and immoral IMHO) to insist that only certain ethnicities or religions are welcome in certain places. Things change, and any change has good and bad aspects, but even though I'm not Christian, I believe Jesus had some remarks about the proper attitude towards strangers.
by giancarlostoro | 2025-12-08 18:43:06+00:00
> Siri seems to have stagnated

This is what bothers me about most voice assistants, I think maybe the Amazon one finally got an upgrade to modern LLM capabilities? I don't know about the Google one.

I assume the cost is too high, but I don't expect ChatGPT / Grok / Claude level of knowledge from a voice assistant LLM, if they can run a drastically small enough model that doesn't cost an arm and a leg at scale, I would be okay with that. Definitely would have to cache some of the responses when viral events happen.
by hinkley | 2025-12-08 18:43:45+00:00
It would be good if it could also scan build output like code coverage and test results. But that’s about all it should do.

I keep meaning to write a partially federated CI tool that uses Prometheus for all of its telemetry data but never get around to it. I ended up carving out a couple other things I’d like to be part of the process as a separate app because I was still getting panopticon vibes and some data should just be private.
by Imustaskforhelp | 2025-12-08 18:43:51+00:00
I really love this thread more and more, so I just want to appreciate this moment right now because these discussions are genuinely fascinating to read and I wish to comment a lot and actually feel a little overwhelmed because of it haha

Personally I am really interested in stablecoins, I know there is nothing interesting about them fundamentally and I think people should have their money in banks but still there are coins like fusd if need be which are private

I hate crypto aside from stablecoins which feel "tolerable" to me, not too good not too bad either but what is the general consensus and is there some innovation happening in stablecoins as I see a lot of stablecoins exploding recently.

I have another interesting idea about stablecoins which I see literally noone or quite few people pick up but why is there literally no coin stable-pegged to a etf like vanguards world or similar, I know from a regulatory standpoint it can be hard to create from what I've heard but I've always wondered about it and I would love to know more.

Also just because I think stablecoins are a good-enough idea doesnt mean whole of crypto is and basically I actually want centralized finance to do what stablecoins do without the need of a chain and just be better in my opinion and If I ever work in crypto, it would be very related to stablecoin in my opinion (or I hope so) but I also dont see too much point in working on stablecoins when there are just so many and mostly its a regulatory issue but still stablecoins are definitely interesting to me honestly.

The use case I had for this is that I am a teenager and I had some crypto and currently its in gold but I wanted to invest it in stocks and I have seen that there are chains which are cheap too

Besides this, some privacy gains and some other small use cases personally I am not that big of a believer in crypto (I am one of the haters), I think the technology is cool but the whole industry tries to do unrealistic things which raises alarms as me as I am a index fund kind of guy.

Honestly in my opinion 90% of people dont ever need crypto, what we need are more services like privacy.com basically which can create virtual cards with limits so that shitty companies cant leak my data and lose it. Or if the world can implement something like UPI or even PIX, those seem to be the better option and I only consider something like stablecoin as a slow way to move towards something like UPI or PIX preferably at the world scale.
by marwamc | 2025-12-08 18:43:53+00:00
I've no idea what their architecture/implementation looks like, but I've built a similar tool for my own use and the improvements are dramatic to say the least.

Mine's a simple BM25 index for code keyword search (I use it alongside serena-mcp) and for some use cases the speeds and token efficiency are insane.

https://gitlab.com/rhobimd-oss/shebe#comparison-shebe-vs-alt...