MurphyA/hacker-news huggingface dataset:
by pndy | 2025-12-08 09:27:56+00:00
The threat was always there but Western side of the continent tricked itself into this narration that normal relations with Russia can be established. While countries who were trapped in Warsaw Pact/Eastern Bloc for nearly a half of the previous century knew already that you can never trust Russians.

Some of Central-Eastern politicians were warning the rest of the continent but they were ridiculed, portrayed as populists or blinded Russian-haters, and "only" full-scale invasion of Ukraine was needed so Western countries would finally understand that imperialistic aspirations of Moscow never went dormant.
by 0x9e3779b6 | 2025-12-08 09:28:12+00:00
Apart from Cloudflare config system working too good to propagate failure modes:

the code quality on very mission critical path powering “half the internets” could’ve been better.

I’m not sure if Lua LSP / linting tools would’ve caught the issue (I also never used Lua myself), but tools and methods exist to test mission critical dynamically typed code.

The company with genuinely impressive concentration of talent was expected to think about fuzzing this legacy crap somehow.

As for `.unwrap()` related incident: normally code like this should never pass the review.

You just (almost) never unwrap in production code.

I’d start with code quality tooling but more important - the related processes before even thinking about the architecture changes.

Changing architecture in global sense which, in general has served for years with 99.99(9)% uptime is not obviously smart thing to do.

Architecture is doing great, it’s just impact which has been devastating because of the scale.

Everyone makes errors and it’s fine, but there are ways not to roll shit in prod (reference to famous meme pic where bugs do that).
by bayindirh | 2025-12-08 09:28:17+00:00
DSL is much older, and the original version came as a 50MB disk image.

Current version clocks in ~700MB, again very small when compared to any modern Linux installation media.

On the other hand, it seems like DSL takes a more extreme approach to slimming down i3/XFCE route, plus DSL contains Dillo which is arguably the latest modern-ish (to the most extent possible) and lightest browser in existence.
by copirate | 2025-12-08 09:28:22+00:00
With the Lightning network, L2 is basically a database between only 2 parties that are required to be online during the transaction. It's not possible to double spend in that situation.

There's the possibility of double spending by committing to the bitcoin blockchain an old version of your "database", but then you would face the penalty of having your entire balance confiscated by the other party.

More details here: https://bitcoin.stackexchange.com/questions/67141/how-is-a-d...
by another_twist | 2025-12-08 09:28:59+00:00
> The global financial system moves so much money around that comparisons to GDP are a bit silly.

Agreed. I guess its comparing production capacity to distribution capacity. Distribution capacity will equal n_tx * tx_amt. Having said that, another metric to look at is how much of software infrastructure is built on Java. Simply adding AWS to this equation proves the value added by Java backed systems. Hard to say that about any other langauge. Also we can look at versatility, Java is used to write very large data processing systems, CDN networks, API servers and even widely used consumer apps (IntelliJ products). Its very hard to find any other language that has had an outsized impact across domains. Of course the counter being Linux written on C powers all of the internet. True but C doesnt have the cross domain impact that Java has had.

So I disagree with the assessment that Java is a terrible langauge performance or productivity wise or it wouldnt have had this impact.
by mike_hearn | 2025-12-08 09:29:08+00:00
Sometimes this kind of problem can be fixed by adjusting the prompt.

You don't say "here's a paper, find me invalid citations". You put less pressure on the model by chunking the text into sentences or paragraphs, extracting the citations for that chunk, and presenting both with a prompt like:

The following claim may be evidenced by the text of the article that follows. Please invoke the found_claim tool with a list of the specific sentence(s) in the text that support the claim, or an empty list indicating you could not find support for it in the text.

In other words you make it a needle-in-a-haystack problem, which models are much better at.
by 4gotunameagain | 2025-12-08 09:29:36+00:00
Don't be so inconsiderate. Humans increase costs. The silicon valley oligarchs do not have enough. They need to reduce costs. Replace everyone possible with "AI". They are on the race to the first trillion after all.

Good luck trying to reach a human for support on google, one of the most rich companies in history, that permeates virtually every aspect of life.
by putna | 2025-12-08 09:29:49+00:00
some example prompts and final apps:

- https://hub.harvis.io/dbml/wealth-management - https://v1-glitchfolio-uufc1-20-q7-wfz00ybko.harvis.dev/ - https://hub.harvis.io/andrius/order-management-system-3 - https://v1-orderblock--ktiiplss3pngex6-ue2s.harvis.dev/
by npodbielski | 2025-12-08 09:31:08+00:00
Is it that bad in US? I mean how many people companies have to fire to notice that great promise of AI just making money for shareholders is not happening? If people in suits are so out of touch in reality to do that, instead of... I do not know A/B testing: fire all employees in one division and prohibit using of AI in the second one to see what will happen, maybe it will be good actually that US will came through economic crisis? Maybe it will became stronger? And if not maybe somebody more reasonable will take a reign? I just hope it won't be China though :)
by baq | 2025-12-08 09:31:40+00:00
Normally I’d say stop kicking the dead horse, but GHA deserves all the complaints it gets and then some. It’s the embodiment of everything that’s bad in ‘less is more’.

My biggest concern with it is that it’s somehow the de facto industry standard. You could do so much better with relatively small investments, but MS went full IE6 with it… and now there’s a whole generation of young engineers who don’t know how short their end of the stick actually is since they never get to compare it to anything.
by vladvasiliu | 2025-12-08 09:31:41+00:00
> I don't find I'm tempted away from work during work hours, not even a little bit, UNLESS work sucks: uninteresting work, painful people, busywork, endless process, low autonomy, low trust..

And this happens at the office, too. There are always ways to slack off, you don't need to already be using your sweet gaming pc or whatever. Mindlessly browsing HN or what have you "while compiling" has the same effect.
by kragen | 2025-12-08 09:31:51+00:00
Because Reuters and NPR consist of journalists, and if US consular officials were denying visas to people due to having worked in journalism, they would not be implying that with subtle innuendoes; it would be front-page news on NPR, Reuters, and probably the New York Times and the Washington Post as well, accompanied with dire warnings about how the freedom of the press was under attack. They reliably do this every time the Trump regime retaliates against journalists or journalistic organizations.
by PunchyHamster | 2025-12-08 09:32:01+00:00
> I would argue that a good CI/CD system should not support secrets as a first-class object at all. Instead steps may have privileges assigned. At most there should be an adapter, secure enclave style, that may hold a secret and give CI/CD steps the ability to do something with that secret, to be used for APIs that don’t support OIDC or some other mechanism to avoid secrets entirely.

CI/CD does not exist in the vacuum. If you had CI/CD entirely integrated with the rest of the infrastructure it might be possible to do say an app deploy without passing creds to user code (say have the platform APIs that it can call to do the deployment instead of typical "install the client, get the creds, run k8s/ssh/whatever else needed for deploy").

But that's a high level of integration that's very environment specific, and without all that many positives (so what you don't need creds, you still have permission to do a lot of mess if it gets hijacked), and a lot, lot more code to write vs "run a container and pass it some env vars" that had become a standard
by balamatom | 2025-12-08 09:32:13+00:00
I'm definitely a stream of words.

My "abstract thoughts" are a stream of words too, they just don't get sounded out.

Tbf I'd rather they weren't there in the first place.

But bodies which refuse to harbor an "interiority" are fast-tracked to destruction because they can't suf^W^W^W be productive.

Funny movie scene from somewhere. The sergeant is drilling the troops: "You, private! What do you live for!", and expects an answer along the lines of dying for one's nation or some shit. Instead, the soldier replies: "Well, to see what happens next!"
by joejohnson | 2025-12-08 09:32:25+00:00
Guy who was "enamored by the whole idea of Bitcoin being a private bank for wealthy individuals" is shocked to learn that the system "will lead to the long-term collapse of social mobility for the younger generation".

He's now wiser than the average Randian acolyte, but still seems to think this structural feature of capitalism is somehow unique to cryptocurrency.
by amluto | 2025-12-08 09:33:35+00:00
In my experience, most of the more important Java-on-the-web stuff was Java Web Start as opposed to applets. And Java Web Start was all kinds of bad. About the only remotely good thing I could say is that it has a sandbox. Which protected no one from anything, by design, because it was the app’s choice whether to use it. And Web Start apps also often included native code, too, so they weren’t even portable.
by another_twist | 2025-12-08 09:33:36+00:00
> I remember a few decades ago somebody saying the JVM was incredible technology, and as a user and programmer I still have zero clue what the hell they could have been thinking was good about the JVM.

I see what you mean. In that case we can add Scala backed systems as well to the JVM balance sheet. If we simply look at the JVM and the systems it backs, there's very little evidence that it isnt a marvel of technology. It powers more impactful systems than few other technologies.
by AnthonyMouse | 2025-12-08 09:34:05+00:00
> Only as long as its use for the former doesn't outweigh its use for the latter.

That's just a self-fulfilling prophecy. Obviously the early adopters are going to be the people for whom the existing system fails, but if you use that as an excuse to ban it or otherwise make it an insurmountable inconvenience for ordinary use through regulatory suppression then you're just preventing people from using it to buy lunch, not preventing them from using it to buy drugs. Which is useless and spiteful, especially when you're not going to address any of the problems that caused people to want it to begin with.
by bkor | 2025-12-08 09:34:50+00:00
> Productive and innovative businesses with really solid fundamentals (balance sheets) that were acquired and dismantled by PE.

You have way too much (unneeded) limiting qualifications. In Netherlands PE have bought loads of companies, then put the acquisition price as a loan on the balance sheet. Plus then sold the assets, made the company then lease those assets. Then those companies often went bankrupt as the leasing prices increased crazily.

> I would argue that moribund businesses who maintain a competitive moat but are otherwise extremely unproductive and inefficient are the real blight on society.

The companies I've cited weren't "extremely unproductive and inefficient". Businesses can be profitable and healthy without all the qualifications you think they need.
by ensocode | 2025-12-08 09:35:01+00:00
My free and 5 minute setup: I am using Brave + uBlockOrigin Lite + AdGuard + AdGuard DNS on my home network. On android Brave + AdGuard DNS. No configuration just works, no annoyances. On youtube as well. Is there anything I should further do? I think I sometimes see ads in android apps maybe this can be optimized without root somehow?
by shit_game | 2025-12-08 09:35:06+00:00
I agree with the author in that there are such things as "fuck off" contact pages; I deal with them often looking for hardware and software and professional services. The gating of contact behind a sales department is one method of "fucking off" a person, but so is omitting necessary contact information, gating it behind some absolutely hostile AI chat agent, or just burying the page entirely. Certain large American ISPs are very guilty of this behavior, even going so far as to make the entire process of contacting them one giant, deliberately engineered "fuck off and die" experience across literally every medium of contact (web, mail, phone call, etc.).

Though to be fair, this is a bit rich coming from a blog that I'd describe as a "fuck off blog". This was incredibly difficult to read. I'm all for people doing whatever they want with their site (I'm guilty of doing ornery things on my site because I enjoy it and the aesthetic), but I find the irony palpable.

Regarding the communicative iterations where you desperately (read: hopelessly) try to convince a client otherwise as they demand something unreasonable; 100% on-point. In my consultations with a close friend I've found that it's not only hard, but interpersonally challenging to say "no" to someone when you're either being compensated by them or in some personal relationship with them that you don't want to jeopardize. The best advice I've recieved regarding business operations is "don't do business with friends", and I imagine this kind of situation is one of the biiggest reasons why. Someone being set on a terrible idea and relying on you to implement it is not pleasant. My experience with this to date has been informal, but I'd imagine that once legal contracts are involved it becomes hair loss-tier stressful to deal with.
by coryrc | 2025-12-08 09:35:22+00:00
https://github.com/search?q=org%3Aactions+%22we+are+allocati...

i.e. from https://github.com/actions/cache/?tab=readme-ov-file#note

Thank you for your interest in this GitHub repo, however, right now we are not taking contributions. We continue to focus our resources on strategic areas that help our customers be successful while making developers' lives easier. While GitHub Actions remains a key part of this vision, we are allocating resources towards other areas of Actions and are not taking contributions to this repository at this time. The GitHub public roadmap is the best place to follow along for any updates on features we’re working on and what stage they’re in.
by bloppe | 2025-12-08 09:36:11+00:00
To understand the initial arguments, look no further than the Genesis block, which includes this text:

The Times 03/Jan/2009 Chancellor on brink of second bailout for banks

In many rich countries, all signs point to nasty inflation for the foreseeable future. Bitcoin is inflation-proof because there is no central bank that can print more Bitcoin. Having a secure system with that property means accepting some tradeoffs in terms of usability and efficiency, compared to a centralized database.
by mike_hearn | 2025-12-08 09:36:59+00:00
It's not, there's lots of ways to resolve citations without even using AI.

I experimented a couple of years ago with getting LLMs to check citations but stopped working on it because there's no incentive. You could run a fancy expensive pipeline burning scarce GPU hours and find a bunch of bad citations. Then what? Nobody cares. No journal is going to retract any of these papers, the academics themselves won't care or even respond to your emails, nobody is willing to pay for this stuff, least of all the universities, journals or governments themselves.

For example, there's a guy in France who runs a pre-LLM pipeline to discover bad papers using hand-coded heuristics like regexs or metadata analysis e.g. checking if a citation has been retracted. Many of the things it detects are plagiarism, paper mills (i.e. companies that sell fake papers to academics for a profit), or the result of joke paper creators like SciGen.

https://dbrech.irit.fr/pls/apex/f?p=9999:1::::::

Other than populating an obscure database nobody knows about, this work achieved bupkis.
by jpfromlondon | 2025-12-08 09:37:02+00:00
>Every text editor on windows adds a carriage return by default.

Either you should know your tool well enough to turn it off, or tools shouldn't make obscure changes to the output that the user did not specify, either way Zig is absolutely correct in not allowing for either case, I wasn't aware of this but it makes me even more convinced of their principles.

The expurgation of "losers" less so.
by nunorbatista | 2025-12-08 09:37:28+00:00
For reasons that don't matter, I've had to live with a 25-yo since summer that has ADHD and anxiety diagnosed by a therapist. Two main issues I see in her behavior: - She changed therapist twice until she heard what she was looking for. She said she was looking for a compatible "therapist". - The fact that she was diagnosed was a relief to her because now she can just offload any responsibility. Forgot to do something? It's normal, that's my ADHD. Not in the mood to go and work tomorrow? that's my anxiety kicking-in.

There's just no hardship anymore and her life is not even that stressful. It's just easy to come with that and give excuses.

The issue is: I want to be sympathetic to her condition and help, but it's really hard to don't sound like I'm judging. I can't just challenge a behavior because she is already doing the best she can. It's like there's an invisible ceiling.

PS: I'm only 12 years older than her.
by voodooEntity | 2025-12-08 09:37:32+00:00
Reading your comment made me think of an ad i saw several years ago.

It was an ad that started off like a typical quality coffee ad, nice pictures of beans, people harvesting, some roasting etc. But than it switched to the topic if making sure that "fair trade" was really applied - switching to IBM Blockchain and claiming that through the use of Blockchain there is safety that everything went fair trade.....

And i just thought.... sure... your blockchain approves that those workers harvesting got paid fair... or does it? All it actually does is proof that someone inserted the information that they got paid fair. If it really happend? Noone knows. Therefor Blockchain is a representation of what you feed into it nothing more and nothing less. At the moment it touches real life - as in the fair trade/payment for coffee bean harvesting - especially in countries where alot of payment is still for dayjob/cash - there's no way the Blockchain can assure that everything went the way it is stored as.
by thesz | 2025-12-08 09:38:06+00:00
> Human brains aren't magic, special or different.

DNA inside neurons uses superconductive quantum computations [1].

[1] https://www.nature.com/articles/s41598-024-62539-5

As the result, all living cells with DNA emit coherent (as in lasers) light [2]. There is a theory that this light also facilitates intercellular communication.

[2] https://www.sciencealert.com/we-emit-a-visible-light-that-va...

Chemical structures in dendrites, not even neurons, are capable to compute XOR [3] which require multilevel artificial neural network with at least 9 parameters. Some neurons in brain have hundredths of thousands of dendrites, we are now talking of millions of parameters only in single neuron's dendrites functionality.

[3] https://www.science.org/doi/10.1126/science.aax6239

So, while human brains aren't magic, special or different, they are just extremely complex.

Imagine building a computer with 85 billions of superconducting quantum computers, optically and electrically connected, each capable of performing computations of a non-negligibly complex artificial neural network.
by crote | 2025-12-08 09:38:28+00:00
How many of those errors vould result in a full system crash, though? And how many of them are just going to cause silent and mostly-harmless data corruption?

After all, was the error in the first line a typo on my side, or a single-bit upset?

A while ago some researchers registered off-by-one-bit domain name typos, which due to physical key positioning were unlikely to be the result of genuine mistyping. I can't find a reference right now, but I recall them getting quite a lot of queries!
by jillesvangurp | 2025-12-08 09:39:05+00:00
Sounds useful. We do similar things with encrypted properties files. Also, things like Ansible come with ansible vault. If you use Github, you can use Github secrets of course. And AWS/GCP/etc. tend to have secret stores.

The challenge with this solution is of course managing who has access and dealing with people leaving your team and no longer being trusted. Even if you still like them personally, just because they are outside your team would require you to change any credentials they might have.

In our case, our team is small and I simply ignore this problem. So, we have a keepass file with shared secrets and repositories with encrypted properties files and a master password in this keepass file. Mostly, it's just me handling the password. It also gets configured as a Github secret on repositories for CI and deployment jobs. It works. But I'm aware of the limitations.

This is an area where there are lots of tools but not a whole lot of standardized ones or good practices for using them. It's one of those things that acts as a magnet for enterprise complexity. Tools like this tend to become very unwieldy because of this. Which is why people keep reinventing them.
by OnjaMadagascar | 2025-12-08 09:39:21+00:00
Onja | Full Stack Developer, Course Design & Back-End Developer, Course Design | Full-Time | ONSITE - Madagascar Looking to join a social-impact driven company? Are you a software developer ready to use your skills for good? Onja trains underprivileged youth into world-class software developers. We are on the lookout for Course Designers who can help our students go from ‘what is coding’ to working in Global tech teams. Help build a scalable course that will help train Madagascar’s brightest young people, while working alongside a team of talented, fun colleagues from all over Madagascar and the world. Please apply through the following links: Full Stack Developer, Course Design: https://onja.org/careers/full-stack-developer-course-design Back-End Developer, Course Design: https://onja.org/careers/back-end-developer-course-design
by TrianguloY | 2025-12-08 09:40:22+00:00
I'm not sure I follow.

If I write actions/setup-python@v1, I'm expecting the action to run with the v1 tag of that repository. If I rerun it, I expect it to run with the v1 tag of that repository...which I'm aware may not be the same if the tag was updated.

If I instead use actions/setup-python@27b31702a0e7fc50959f5ad993c78deac1bdfc29 then I'm expecting the action to run with that specific commit. And if I run it again it will run with the same commit.

So, whether you choose the tag or the commit depends on whether you trust the repository or not, and if you want automatic updates. The option is there...isn't it?
by reedf1 | 2025-12-08 09:40:34+00:00
I think the last point combined with some real data or case studies would prompt introspection.

Anecdotally I stick to companies with good customer support like glue, even if their product is inferior. It's an absolute wonder to be taken seriously by a company, to have feedback integrated into future products, or just have small issues taken care of without hassle.