MurphyA/hacker-news huggingface dataset:
by whou | 2025-12-18 21:13:33+00:00
Awesome project I just came across, but I would be wary for how good or functional the implementation is. The author also did a WGSL compiler in Go[0], and is using this WebGPU implementation for a Go graphics library[1]. Cool to see one more language implementation of WebGPU for the ecosystem, and that naga Go compiler is also very useful anywhere else where you would compile WGSL as well. Apparently the author decided to do it because of the lack of a "professional graphics library" in the Go ecosystem[2].

Although this seems like an enormous show of skill and awesome addition for the WebGPU ecosystem, as someone that hates anything AI represents or lightly touches, I do have to note that I am very much wary of the amount of AI and "vibe coding" used in the projects made by the author. The project's GitHub organization logo certainly is AI[3], tens of thousands of lines of code of full backend implementation introduced in a single commit[4] while the rest of the commit tree are a lot of weird small docs updates and version bumps. Not only the way the articles and readme's are written do feel like AI slop, the author also admitted to using AI to post entirely detailed responses[5] in another project's issues. Scratch that, those responses simply look like an AI chatbot posting with almost to no human interference.

I have no problem with people that need some level of assistance to better communicate outside of their native language, English is not my first language as well, but I've never needed to use AI for that purpose, and I'm sure people don't mind some mistakes coming from someone trying to learn the language. Hell, I will always prefer something written in broken English than some AI slop that reads with no soul. This project at first glance does seem incredibly impressive and exciting, but reeks of AI slop.

[0]: https://github.com/gogpu/naga [1]: https://github.com/gogpu/gg [2]: https://dev.to/kolkov/gogpu-a-pure-go-graphics-library-for-g... [3]: https://github.com/gogpu [4]: https://github.com/gogpu/wgpu/commit/6f0e34765777c41f94dfbb8... [5]: https://github.com/cogentcore/webgpu/issues/14#issuecomment-...
by canyon289 | 2025-12-18 21:13:49+00:00
> Do you recommend any particular mix or focus in the dataset for finetuning this model, without losing too much generality?

Astute questions, there's sort of two ways to think about finetuning, 1. Obliterate any general functionality and train the model on your general commands 2. As you asked maintain generality trying to preserve initial model ability

For 2 typically low learning rate or LORA is a good strategy. We show an example in our the finetuning tutorial in the blog.

> 2. do you have any recommendations for how many examples per-tool? This depends on the tool complexity and the variety of user inputs. So a simple tool like turn_flashlight_on(), with no args, will get taught quickly, especially if say you're only prompting in English.

But if you have a more complex function like get_weather(lat, lon, day, region, date) and have prompts coming in in English, Chinese, Gujarati and spanish, the model needs to do a lot more "heavy lifting" to both translate a request and fill out a complex query. We know as programmers date by themselves are insanely complex in natural language (12/18/2025 vs 18/12/2025).

To get this right it'll help the model if it was trained on data that shows it the versions of variations of inputs possible.

Long answer but I hope this makes sense.
by nowittyusername | 2025-12-18 21:14:02+00:00
I've had this issues as well since codex models were introduced. i tried them but 5.1 regular on high thinking always worked better for me. I think its because its thinking is deeper and more nuanced it seemed to understand better what needed doing. I did have to interact more often with it versus Codex which just worked for a long time by itself, but those interactions were worth it in reduction of assumptions and other stuff Codex made. Im gonna try 5,2 Codex today and hope that changes, but so far I've been happy with base 5.1 high thinking.
by hbplawinski | 2025-12-18 21:14:20+00:00
I doubt that this is true except maybe for the top journals. Mid and low tier journals cater to scientists whose main incentive is to publish no matter how while moderately optimizing for impact factor (i.e. readers and citations). This lower quality market is huge. The fact that even top tier publishers have created low-ranking journals that address this market segment using APC-based open-access models shows the alignment between publisher and author interests will not necessarily lead to increasing quality, rather the opposite.
by LocalPCGuy | 2025-12-18 21:14:56+00:00
If I can run my own code but in your context, I can pull in malicious scripts.

With those (all these are "possible" but not always, as usual, it depends, and random off the top of my head):

- I can redirect you to sites I control where I may be able to capture your login credentials.

- May be able to prompt and get you to download malware or virus payloads and run them locally.

- Can deface the site you are on, either leading to reputational harm for that brand, or leading you to think you're doing one thing when you're actually doing another.

- I may be able to exfiltrate your cookies and auth tokens for that site and potentially act as you.

- I might be able to pivot to other connected sites that use that site's authentication.

- I can prompt, as the site, for escalated access, and you may grant it because you trust that site, thereby potentially gaining access to your machine (it's not that the browsers fully restrict local access, they just require permission).

- Other social engineering attacks, trying to trick you into doing something that grants me more access, information, etc.
by 6510 | 2025-12-18 21:14:59+00:00
I have this article growing in the back of my head that is currently mostly a rant about how impractical technology turned out by comparing the current state with the old days. It's hard as there are countless examples and I want to address only the most embarrassing ones. Dumb vs smart TV alone could fill a tomb worth of downgrades. Do you remember the variable resistor, the rotary knob that provided volume control? The ease of use, the granularity, the response time!

I currently have volume control on my TV, one on the OS on the computer that drives it and one on the application that makes the picture. That is only half the problem

https://www.reddit.com/r/techsupport/comments/pblj86/windows...

I own a 60 year old black and white tv. If the volume knob vanished people would know the problem is in my head.
by rootusrootus | 2025-12-18 21:15:00+00:00
Sadly, it seems like the contingent of people who have a problem with Smart TVs is small but noisy, and has no real market power. If there were any significant number of people who would pay for a dumb high end TV, the market would sell them one.

Sort of reminds me how we complain loudly about how shitty airline service is, and then when we buy tickets we reliably pick whichever one is a dollar cheaper.
by codeptualize | 2025-12-18 21:15:10+00:00
That's neat. Not sure if I would deploy it, as it will be hard to explain/teach people how to use it (as I see in other comments already), but I do see the value in it.

It solves the "drag and drop beyond what fits the screen" much better than you can with drag and drop, the awkward auto-scroll-on-nearing-the-edge-thing.

I would say, if you need to reorder many items, it gets a bit disorienting, the whole list moves as it's anchored to the item you are moving. Maybe there is a way to combine drag and drop where this kicks in if you go beyond the bounds of the visible area.

Also don't think this can work well with multiple axis/drop zones.
by vedmakk | 2025-12-18 21:15:11+00:00
My understanding is, that MCP Prompts and Slash Commands are "user triggered" whereas Skills (and MCP Tools) are "model triggered".

Other than that it appears MCP prompts end up as slash commands provided by an MCP Server (instead of client side command definitions).

But the actual knowledge that is encoded in skills/commands/mcp prompts is very similar.
by Moldoteck | 2025-12-18 21:15:17+00:00
It depends. If you write your code based on abstractions/class features, does it matter ehat type it is? If I call calculation->execute() I don't care what type of object calculation is as long as it can execute and returns something that'll I'll use later for other purpose. To me auto in this case is something similar to using pointers to a base class, but even more abstract
by pcaharrier | 2025-12-18 21:15:26+00:00
"it's why books like Mein Kampf or Lolita don't also show up on these lists despite being very intentionally kept off the shelves by librarians."

It seems like they would count those books as being banned if they had a means for gathering the information.

"Since 2021, there have been numerous accounts of quiet removals of books in libraries and classrooms by teachers and librarians. School districts have started issuing preemptive bans through 'do not buy' lists, barring titles from ever entering their libraries. . . . Therefore, PEN America’s Index of School Book Bans is best thought of as a minimum count of book banning trends. This is a similar conclusion to that of the American Library Association, which routinely estimates that its counts reflect only a portion of the true number of books banned in schools."
by breve | 2025-12-18 21:15:33+00:00
As the US government becomes more erratic and untrustworthy it will encourage large organisations to look for alternatives to American software and services.

The stated intent of the US National Security Strategy is to destabilise and undermine Europe. That is a big incentive for European organisations to replace Windows, Office, and any other Microsoft service.

Linux and LibreOffice usage will grow as a direct consequence of the US government's new antipathy to Europe.
by bdr | 2025-12-18 21:15:44+00:00
> Plus there's zero direct evidence for their colours

This is no longer true! Starting with Sinosauropteryx in 2010, paleontologists have identified what they believe to be fossilized melanin-containing organelles. These organelles, called melanosomes, have different shapes depending on which color they produce, and those shapes are preserved well enough to be visible under an electron microscope.
by lenerdenator | 2025-12-18 21:16:15+00:00
When you have a position in the project called "CEO" and that person has the ability to hand down edicts of what he or she sees the project as being, that's when you get into trouble, especially in free software. We've seen this way of developing software co-opted by major companies who have turned otherwise good projects - Chromium and AOSP immediately come to mind - into vendor lock-in and spyware by some suit who has been told he needs to create value.

The thing they can do to win is to start acting like they maintain a free/libre open-source software project. It should be completely fine for Mozilla to make a grand total of $0.00 off of Firefox.

Think of Linux (specifically the kernel) or Python. Sure there's a person whose opinion holds more weight than everyone else's (at least for the kernel), but they typically focus on delivering general guidance to a group of people who are free to create features on their own and present those to leadership. If it's quality and fits what the general purpose of the project is, it gets merged into the trunk, and released with everything else.

That needs to be how Mozilla handles Firefox at this point. If some working group of contributors wants to start an implementation of GenAI in Firefox, let them do so and let the community hash it out. If the community doesn't feel the need to create it, well, then Firefox won't have it... and that's fine.

So many of these free software projects try to do too much and change what the core output of the project is in the process, and they lose sight of what the project is.
by kstrauser | 2025-12-18 21:16:26+00:00
It does not. He said that if we're using approximately similar times to establish identity, then by using that logic, it could also establish that Schestowitz was that alleged sockpuppet account. (Transitively, does that mean Garrett and Schestowitz are the same person? Have we ever seen them in a room together? Hmm.)

But honestly, anyone who ever spent any amount of time on IRC is used to seeing 50 people drop from a channel at once. That was usually due to netsplits, which isn't the case here since there was only one IRC server involved, but that wasn't the only cause. "Uh-oh, the IRC server got too laggy and couldn't service all requests within the configured timeout. Time to disconnect everyone!"
by visioninmyblood | 2025-12-18 21:16:38+00:00
you can chat with vlm.run to generate these assets from image generation without needing a gpu.

Modi: https://chat.vlm.run/c/bdbaf1dc-b3c2-4b8a-ad17-6e26d87475fd

Musk: https://chat.vlm.run/c/894f44ce-c366-4c93-b348-de6eebfb9f03

Ronaldo: https://chat.vlm.run/c/db5eff27-8c52-4e0b-8e4e-157df6bef278

Gomez: https://chat.vlm.run/c/02b92f23-a6fd-4380-b7a9-52ae7463c9c1

Jackie chan: https://chat.vlm.run/c/62ca5502-2066-4d5f-b994-c8845b2e72c9

Messi: https://chat.vlm.run/c/5bfda3c2-a2bf-4ca2-a874-78f1ce66edf1

Taylor swift: https://chat.vlm.run/c/d411c16a-e2b1-490c-85cc-9f86f2564a59

Obama: https://chat.vlm.run/c/c55fe1d6-853b-4113-bdaf-d828bee0da53

Trump: https://chat.vlm.run/c/84b57509-ed38-454a-9b17-85c03a247993

Kohli: https://chat.vlm.run/c/da8ffe8a-0818-4820-bdeb-b82d965ae3a4

Lamar: https://chat.vlm.run/c/ef6488c3-b0f0-4651-944e-7d0c4f98bdd1

Mrbeast: https://chat.vlm.run/c/c24d1cac-feb0-4a53-b1a2-2bbb62a7b7fb
by vernrVingingIt | 2025-12-18 21:16:39+00:00
You don't see the connection because you weren't invited to participate in numerous discussions where these connections are made explicitly via detailed analysis.

I have more to do than refresh HN all day, going for brevity here.

Your expectation others must explicitly connect all the dots for you makes me question your grasp of reality. Most people alive are going about their lives unconcerned with your existence altogether.

"Highly charged politics". Relative emotional opinion.
by vcarrico | 2025-12-18 21:16:58+00:00
> the junior engineer, empowered by some class of LLM tool, who deposits giant, untested PRs on their coworkers—or open source maintainers—and expects the “code review” process to handle the rest.

I'm noticing something else very similar but involving not necessarily junior roles with long messages, when they use these AI writing assistants that resume stuff, creates follow-ups, etc. Putting this additional burden in whoever needs to read it. It makes me think of a quote that says: "I would have written a shorter letter, but I didn't have the time."
by topaz0 | 2025-12-18 21:16:59+00:00
Does not work with an indexed scrollwheel -- one click of the scroll wheel moves like 4 lines in your list, which seems to break the assumptions of your code. I get very strange behaviors, e.g. "pick" Five, scroll up and down, see swapping of Ten and Six during scroll. Then "place" results in Five being in the same place as before but Nine and Ten are swapped. Similar when using arrow keys.
by mrguyorama | 2025-12-18 21:17:26+00:00
Again, speaking as myself, not for my company

>Are you able to track balance checks made against card numbers not yet activated?

Yes. Can't get into specifics. Not every card supports balance inquiry though. Not entirely sure how this applies to physical gift cards.

Usually what happens is that someone simply writes down the card number, and waits, and then tries to redeem it. They don't do a balance check.

>Presumably you could also take things back to the level of "store X, you have a serious problem."

We can get down to the register. Fraudsters are sometimes employees. But you can't treat customers like criminals so doing anything about it is hard. These same stores don't seem to mind customer info leaking and credit card data being stolen in the first place.

We sometimes have to replace these cards for consumers, because it's dumb to spend a hundred dollars for a giftcard and it was stolen previously, that's not their fault
by michaelt | 2025-12-18 21:17:27+00:00
If you engage in “white hat security research” on organisations who haven’t agreed to it (such as by offering roles of engagement on a site like hacker one) there is indeed a risk.

For example they might send the police to your door, who’ll tell you you’ve violated some 1980s computer security law.

I know 99.99% of cybercrime goes unpunished, but that’s because the attackers are hard to identify, and in distant foreign lands. As a white hat you’re identifiable and maybe in the same country, meaning it’s much easier to prosecute you.
by dang | 2025-12-18 21:17:50+00:00
Thanks!

If anyone is interested in the history of the family therapy movement—that is, the movement that started in the 1950s where psychotherapists started working with entire families rather than individual clients—this is a great book of interviews and incredibly readable.

From the chapter above, Jay Haley on Milton Erickson:

But, you know, the real tragedy with Erickson was he spent so much time over the years teaching hypnosis when he had a whole new school of thera- py to offer. People did not recognize the significance of his work until he was too old to really demon- Strate it

(I left in a couple of text glitches there...at least it's readable now!)
by wongarsu | 2025-12-18 21:17:56+00:00
The announcement of the original T5Gemma goes in some more detail [1]. I'd describe it as two LLMs stacked on top of each other: the first understands the input, the second generates the output. "Encoder-decoder models often excel at summarization, translation, QA, and more due to their high inference efficiency, design flexibility, and richer encoder representation for understanding input"

1: https://developers.googleblog.com/en/t5gemma/
by ekr____ | 2025-12-18 21:18:08+00:00
> Why should I be required to download and ignore your translation feature, when I could just as easily not have it included in the first place?

This seems like special pleading. The browser (and any software package) is full of features that some people use and others don't. Just off the top of my head, these include: the password manager, PDF viewer, dev tools, and the extensions store. Each new SKU that the vendor has to provide is additional effort to build and test, and the result is that it's more expensive to produce the product. Moreover, it makes it harder for users to discover new features what they might want (oh, you wanted view source, you needed Firefox developer edition).

On the specific case of translation, I don't really see much of a distinction between "I need to browse" and "I want to read content that is not in a language that the content provider has supported for me". In both cases, I want to get the content on the site and I'd like the browser to help me do it.

> I don't mind being the minority, I just don't think it's inappropriate to ask for only what I need instead of "all the bullshit you want to force me to have".

And you can have that by building it yourself. It's open source software. What you're really asking for is for Mozilla to build a version of the software that has only the features you personally want.
by sellmesoap | 2025-12-18 21:18:13+00:00
Gorilla marketing and bot farms have been around for a very long time. There are bot farms to amplify all sorts of messages. A friend who is a 'performance artest' paid almost nothing to have his linked-in account amplified by a large number of nonsense accounts on that platform. 'creators' frequently buy followers so 'the algorythm' will surface their 'content'. My first roommate 20 years ago almost got a job riding the train and having 'organic' conversations about how great some product is. My solution is to buy nothing and poke and laugh at everything. (Edited for spelling)
by throwawaypath | 2025-12-18 21:18:32+00:00
>In other words, exactly what I pointed out

What you're "pointing out" is your failure of understanding what words mean.

>DHH is saying that London is not white enough for his tastes.

DHH explicitly said "native Brits," not "White people." Russians may be "White," but are not "native Brits." London wouldn't feel like London if it was 60% Russian.

>Nonwhites with British citizenship, apparently, aren’t "real" Londoners or Brits.

They are by definition not "native Brits."

>White nationalists should own their scummy politics instead of pretending we’re all idiots.

Nothing he stated is White nationalist. There's nothing wrong with promoting or protecting the interests of native/indigenous people over those of immigrants or foreigners.
by theshrike79 | 2025-12-18 21:18:48+00:00
Not all problems are "work" vs "doesn't work".

We're not talking about making a calculator that can't calculate 1+1. This might be a website that's a bit slow and janky to use.

25% of users go away because it's shit, but 75% stay. And it would've too much effort to push the jank to zero and retain a 100%.

A website that takes juuuust too long to load still "satisfies requirements" in most cases, especially when making loading instant carries a significant extra cost the customer isn't willing to pay for.
by OptionOfT | 2025-12-18 21:18:52+00:00
In CA and AZ vanity plates are first come, first served. You cannot sell them either. You either keep them on a car, or you can keep on paying to keep it out of circulation forever. But once you give it up it goes back to the pool, and someone can get it.

Also, my vanity plate is $0 more than a normal plate. Why wouldn't I?
by Gareth321 | 2025-12-18 21:18:55+00:00
I don't think this is correct. Analysts believe Apple made more than $27.39 billion in commissions globally last year (https://techcrunch.com/2025/05/08/appfigures-apple-made-over...). That's around 7% of global revenue, and we should expect this ratio to be higher this year and next.
by LocalPCGuy | 2025-12-18 21:18:56+00:00
My understanding, the SVGs were imported directly and embedded as code, not as a `src` for an img tag. This is very common, it's a subjectively better (albeit with good security practices) way to render SVGs as it provides the ability to adjust and style them via CSS as they are now just another element in the HTML DOM. It should only be done with "trusted" SVGs however!

As for CORS, they were uploading the SVGs to an account of their own, but then using the vulnerabilities to pivot to other accounts.
by jillesvangurp | 2025-12-18 21:19:02+00:00
> One surprising thing that codex helped with is procrastination.

Heh. It's about the same as an efficient compilation or integration testing process that is long enough to let it do it's thing while you go and browse Hacker News.

IMHO, making feedback loops faster is going to be key to improving success rates with agentic coding tools. They work best if the feedback loop is fast and thorough. So compilers, good tests, etc. are important. But it's also important that that all runs quickly. It's almost an even split between reasoning and tool invocations for me. And it is rather trigger happy with the tool invocations. Wasting a lot of time to find out that a naive approach was indeed naive before fixing it in several iterations. Good instructions help (Agents.md).

Focusing attention on just making builds fast and solid is a good investment in any case. Doubly so if you plan on using agentic coding tools.