MurphyA/hacker-news huggingface dataset:
by nine_k | 2025-12-17 19:41:14+00:00
(1) Won't an SSH key with a passphrase solve this? Whoever picks up the lost USB stick won't be able to guess a good passphrase.

(2) It seems like a USB key (like Yubikey) combined with a fair amount os USB-attached storage could be a viable product for some applications! The storage could even be encrypted for (some) extra security.
by sksq96 | 2025-12-17 19:41:34+00:00
This really captures something that feels unavoidable. As more AI systems act on behalf of companies, human time and attention are going to become extremely scarce. What stands out here is the idea that each person needs a personal AI that understands their values and can advocate and negotiate for them in that environment. Not to replace human judgment, but to protect it. The piece explains this future clearly and thoughtfully, and it’s hard not to feel like this is a direction we’re actually headed in.
by lapcat | 2025-12-17 19:41:48+00:00
Yes. User freedom is not all-or-nothing. There are degrees, and the tech companies are coming up with fiendish new ways to lock away your data from you. So in the case of passkeys, you can technically move your data between vendors, though that can be quite inconvenient as the submitted article mentions, but nonetheless every vendor locks away your data from you, and most vendors have a financial incentive to keep your data away from you, so that you have to pay for the services.
by HarHarVeryFunny | 2025-12-17 19:41:58+00:00
I would say it more goes back to the Google Brain + DeepMind merger, creating Google DeepMind headed by Demis Hassabis.

The merger happened in April 2023.

Gemini 1.0 was released in Dec 2023, and the progress since then has been rapid and impressive.
by Bender | 2025-12-17 19:42:07+00:00
Most crawlers have no concept of what that is. They will follow links to this site and then follow links out of this site even after being told not to [1]. The majority of crawlers follow zero rules, RFC's, etc... The few platforms that do follow standards and rules are akin to a law abiding citizen in Mos Eisley.

[1] - rel="nofollow"
by crazygringo | 2025-12-17 19:42:29+00:00
OK, on the one hand TIL -- thank you! That's a super-meaningful piece of information.

On the other hand, you can understand why that is not remotely clear from the message. It's a generic term in quotes. If it said it would be saved "in the Passwords application (and synced to iCloud)", then I'd actually understand it.

So Apple is either being intentionally obtuse or incompetently confusing here, and I don't know which is worse. And it's UX crap like this which is why I still won't use passkeys, because I don't know where anything is going.
by kazinator | 2025-12-17 19:42:37+00:00
People "overcomplicate" the rule because they find counterexamples to the simple rule.

It's a fool's errand because the way human language works is that people happily accept odd exceptions by rote memory. So the rule simply says that there exist these exceptions. Also, there is something called euphony: speakers find utterances questionable if they are not in some canonical form they are used to hearing. For instance "black & white" is preferred over "white & black".

The rules boil down to "what people are used to hearing, regardless of the underlying grammar offering other possibilities".
by mlindner | 2025-12-17 19:42:39+00:00
Ultimately all software has to touch hardware somewhere. There is no way to verify that the hardware always does what it is supposed to be because reality is not a computer. At the bottom of every dependency tree in any Rust code there always has to be unsafe code. But because Rust is the way it is those interfaces are the only places you need to check for incorrectly written code. Everywhere else that is just using safe code is automatically correct as long as the unsafe code was correct.
by alwa | 2025-12-17 19:43:31+00:00
I can’t put my finger on anything within the last decade, but I seem to recall it running in something close to its current form on a single core on a single server for a long time:

https://news.ycombinator.com/item?id=5229522

Re: traffic, dang said (2022):

https://news.ycombinator.com/item?id=33454140

I took it as a good reminder that the hard part is the human part: that high-overhead features and UI fripperies are nice but not necessary (or sufficient) to keep a community healthy and vibrant over the decades.

(And on the subject of the human side, if you didn’t catch Anna Wiener’s 2019 profile, it’s here:

https://www.newyorker.com/news/letter-from-silicon-valley/th... )
by wrxd | 2025-12-17 19:44:02+00:00
It wasn’t one time fee though. The one time fee bought a copy of the software and its patches. A couple of years later a new version would come out and people had the choice between keeping using the old version or buying the new one.

To convince people to buy they had to add genuinely useful features. I would have bought a new version with new features and better performance. I wouldn’t have bought a new version same as the previous one with AI crammmed in it
by fellowniusmonk | 2025-12-17 19:44:05+00:00
I have a very complex set of logic puzzles I run through my own tests.

My logic test and trying to get an agent to develop a certain type of ** implementation (that is published and thus the model is trained on to some limited extent) really stress test models, 5.2 is a complete failure of overfitting.

Really really bad in an unrecoverable infinite loop way.

It helps when you have existing working code that you know a model can't be trained on.

It doesn't actually evaluate the working code it just assumes it's wrong and starts trying to re-write it as a different type of **.

Even linking it to the explanation and the git repo of the reference implementation it still persists in trying to force a different **.

This is the worst model since pre o3. Just terrible.
by JoshTriplett | 2025-12-17 19:44:06+00:00
It's fun. I ran into a few issues, though:

Some obvious words don't seem to register. For instance, today's puzzle is "F I L T E R D O W N", and "DOWN" doesn't register as a word. I'm guessing this is because you don't count the base words you put together to make the puzzle, but that's not documented and the UI doesn't make that clear.

Pressing keys with Ctrl or Alt pressed should not register a letter. For instance, hitting Ctrl-L to go to the address bar should not type an L.

It's awkward to enter a five-letter word that starts with a valid four-letter word. For instance, "FLOWN" stops at "FLOW" and you have to wait a while for the animation before you can re-type "FLOWN". I don't know what the optimal UX for this is, but it might help if words got immediately registered and the animation happens on a separate line from where you're typing. Then you wouldn't have to wait and could immediately start typing "FLOWN" right after "FLOW" while the animation was scoring your letters for "FLOW".

Please sort the already found words in alphabetical order to make it easy to scan through them.

Hitting backspace should delete one letter from the end, not the entire word typed so far.

Touching a letter in the word should take it back out of the word. There doesn't seem to be any way to clear a letter other than nuking the whole word.

If you type quickly, some letters don't register. It seems like a letter doesn't get registered while the previous letter is still animating into place. This is really frustrating; there are few things more frustrating in a game than "I input the correct thing and the game didn't register it".

Pressing space should not be a shortcut for getting a hint, that's a natural thing to hit when typing words. My reaction to discovering this was "well, today's game is ruined, how do I throw it away and get a new game, oh, right, it's a daily game, I hate that".
by IAmBroom | 2025-12-17 19:44:21+00:00
I don't think it's that year in particular, but lots of spy movies from that era include bits like "Show me the feed from cameras in that area... OK, zoom in on that guy in the black hood... ID him!". In real time.

And then the agents run out of the office and get to that part of the city in a couple minutes, as if they were in Mayberry instead of NYC.
by ForceBru | 2025-12-17 19:44:26+00:00
> Compared to humans, LLMs have effectively unbounded training data. They are trained on billions of text examples covering countless topics, styles, and domains. Their exposure is far broader and more uniform than any human's, and not filtered through lived experience or survival needs.

I think it's the other way round: humans have effectively unbounded training data. We can count exactly how much text any given model saw during training. We know exactly how many images or video frames were used to train it, and so on. Can we count the amount of input humans receive?

I can look at my coffee mug from any angle I want, I can feel it in my hands, I can sniff it, lick it and fiddle with it as much as I want. What happens if I move it away from me? Can I turn it this way, can I lift it up? What does it feel like to drink from this cup? What does it feel like when someone else drinks from my cup? The LLM has no idea because it doesn't have access to sensory data and it can't manipulate real-life objects (yet).
by jaapz | 2025-12-17 19:44:33+00:00
In the netherlands we were used to really cheap gas (groningen gas field). This meant that, instead of adding more insulation, it was cheaper to just install a bigger gas powered heater to heat our homes.

This means that people now really need to improve insulation of their homes big time, before even being able to consider switching to a heat pump.

My house has a 30kW gas heater. When I switched to a heat pump, first I had to replace the entire roof with PIR insulation. It was previously just uninsulated wood. Now I can easily heat my home with a 7kW heat pump (which most of the time doesn't even need to produce 7kW of heat).

I was lucky, my house already had insulated walls and floors, and used floor heating (low temperature heating). Most homes here use high temperature radiators, which become way less efficient when used with low temperatures produced by heat pumps.

So for many people here, it is cost prohibitive to switch to a heat pump, as they first need to improve isolation and replace their radiators for a heat pump to even work.
by lesuorac | 2025-12-17 19:44:43+00:00
"least"?

If you have 2 million dollars lying around you can commit any federal crimes and buy a pardon.

Which may seem like a lot but also consider if you're doing something like funding literally terrorism it's probably not that hard to scrounge up 2 million. You don't go to federal jail for jay-walking.

If that's not a good example then consider TrumpCoin where literally Trump meet with the largest holders of the coin (i.e. people that paid the most; at least intended too).
by sailfast | 2025-12-17 19:45:24+00:00
I think the biggest challenge now becomes how more seasoned engineers teach juniors. The AI makes the ramp a lot easier but you still do best when you understand the whole stack and make mistakes.

It’s damned near impossible to figure out where to spend your time wisely to correct an assumption a human made vs. an AI on a blended pull request. All of the learning that happens during PR review is at risk in this way and I’m not sure where we will get it back yet. (Outside of an AI telling you - which, to be fair, there are some good review bots out there)
by aw1621107 | 2025-12-17 19:45:30+00:00
The `unsafe` block was present because `List::remove` is marked `unsafe` [0]:

/// Removes the provided item from this list and returns it. /// /// This returns `None` if the item is not in the list. (Note that by the safety requirements, /// this means that the item is not in any list.) /// /// # Safety /// /// `item` must not be in a different linked list (with the same id). pub unsafe fn remove(&mut self, item: &T) -> Option<ListArc<T, ID>> {

I think it'd be tricky at best to make this particular API safe since doing so requires reasoning across arbitrary other List instances. At the very least I don't think locks would help here, since temporary exclusive access to a list won't stop you from adding the same element to multiple lists.

[0]: https://github.com/torvalds/linux/blob/3e0ae02ba831da2b70790...
by BizarroLand | 2025-12-17 19:45:50+00:00
I hate passkeys because when I've encountered them it's always an interstitial between what I just signed in to and where I'm trying to go, it's always a "register a passkey now" with an obfuscated dark pattern bypass, and it's always on a corporate account that I don't need a fucking passkey for.

I don't want a passkey on my logins but there is no way to disable this prompt on the 3 websites that constantly annoy me for them.

Drives me batty. The company I work for is already paying you for the service I'm using. We use SSO for EVERYTHING, I've already 2FA Authenticated the login, and even if I set up a passkey I will still have to 2FA the login.

I don't use these sites in any personal capacity, and I would never use a site that harasses me in any way if I was not absolutely required to in order to earn a paycheck.

You're not going to get any money out of me, why are you torturing me?
by jakelazaroff | 2025-12-17 19:45:51+00:00
The full paragraph you're excerpting from Wikipedia is much less convincing:

> Such groups can include the press (akin to the European 'Fourth Estate'), the people (in sum or as grand juries), and interest groups. The independent administrative agencies of the United States government, while technically part of any one of the three branches, may also be referred to as a ‘fourth branch’.
by raphui | 2025-12-17 19:46:15+00:00
In my use case (dirtbike anti theft tracker), it is useful to use an RTOS, not specifically for hard time constraints, as I don't have those, but more to have all the other functionality: task synchronisation mechanisms, driver abstraction, etc. That allows to better design the application. For example, having separate tasks for GPS updates, cellular communication, and motion detection with proper prioritization makes the code much cleaner than a giant main loop with interrupts. About other industries, I would say highly critical medical systems, avionics and automotive find it useful to use RTOSes because they have use cases where time constraints are really hard.
Ask HN: Interesting topics to research around online advertisement?
by hedgeho | 2025-12-17 19:46:27+00:00
I am soon writing a Master's thesis, and I am looking for ideas for interesting research avenues in the area of online advertising.

Currently, some of the research questions I am considering are: - What is the future of Open Web and will it be ad-supported? - How to reconcile privacy and data monetization in online space? - What social implications could the decline of open web (e.g. independent news media) have? (decline due to e.g. AI)

I have access to a lot of anonymous traffic data of some european news sites; also contacts in the industry.

What is a problem in this space you wish someone dived deeper into?
by francisofascii | 2025-12-17 19:47:18+00:00
Speaking as a senior dev, anecdotally juniors may indeed understand AI tools better, because they spend more hours a day coding and working with the tools, and they need the tools to understand the codebase or to be productive. Seniors have more hours stuck in meetings, developing specs/tickets for the juniors, code reviewing, etc. Seniors are likely to not bother with a prompt for simple changes in codebases they already understand.
by stvltvs | 2025-12-17 19:47:36+00:00
Unitary in the sense that they debated whether to have one guy in charge or several. They defaulted back to what they knew, the rule of one dude with limited but sole executive power.

Edit: This is what I'm referring to and it has direct bearing on the current controversy.

https://en.wikipedia.org/wiki/Decision_of_1789
by rikroots | 2025-12-17 19:47:39+00:00
I'm wary about using AI models to generate stuff for me - I still bristle from the time a model told me that "JS Sets are faster than Arrays" and I believed it, until I discovered that it forgot to add the important piece of information: for Arrays containing tens of thousands of elements. Which made me feel stupid.

Still, I find the models to be excellent synthesisers of vast quantities of data on subjects in which I have minimal prior knowledge. For instance, when I wanted to translate some Lorca and Cavafy poems into English I discovered that ChatGPT had excellent knowledge of the poems in their native languages, and the difficulties translators faced when rendering them into English. Once I was able to harness the models to assist me translate a poem, rather than generate a translation for me (every LLM is convinced it's a Poet), I managed to write some reasonable poems that met my personal requirements.

I wrote about the experience here: https://rikverse2020.rikweb.org.uk/blog/adventures-in-poetry...
by TheNewsIsHere | 2025-12-17 19:47:43+00:00
I have (almost completely) moved my business from GitHub to Forgejo as well. I’m deploying an instance at home as well.

It’s shocking how bloated and slow GitHub is even for basic actions when you compare it to Forgejo running just your own stuff.

Bonus: if you can manage to reliably backup a database and a filesystem, you can then backup your forge. Outside GH Enterprise there is still no restorable backup option inside GitHub.
by roadside_picnic | 2025-12-17 19:47:58+00:00
AI's real super power is telling you what you want to hear (doubly true since RLHF became the standard).

You can really see the limitations of LLMs when you look at how poorly they do at summarization. They most often just extract a few key quotes from the text, and provide an abbreviated version of the original text (often missing key parts!)

Abbreviation is not summarization. To properly summarized you need to be able to understand higher level abstractions implied in the text. At a fundamental level this is not what LLMs are designed to do. They can interpolate and continue existing text in remarkable and powerful ways, but they aren't capable of getting the "big picture". This is likely related to why they frequently ignore very important passages when "summarizing".

> We're still thinking about AI like it's 2023.

Just a reminder that in 2023 we were all told that AI was on a path of exponential progress. Were this true, you wouldn't need to argue that we're using it "wrong" because the technology would have improved dramatically more than it did from 2021-2023 such that there would be no need to argue that its better, using it "wrong" would still be a massive improvement.
by array_key_first | 2025-12-17 19:48:06+00:00
Maybe, maybe not. It's getting dangerously close to the modern day IE, where some websites just don't work right and everyone has to do arcane shit to make their websites cross platform.

It's also a closed source browser developed by Apple. It's not competing with Firefox. Everyone contemplating switching to safari over Firefox are not being honest - they're not even on the same playing field.
by nickjj | 2025-12-17 19:48:16+00:00
Yep, you're definitely not wrong. We see it all the time on GitHub. If a project hasn't gotten a new commit in 2 days then the project is claimed dead.

The same thing with blogs in general. A post could be popular and ranked highly in 2020 but in 2025 it's not even ranked on a search engine, even if the content is still highly relevant and fully working. It's bad because you could have a 10+ year old site with 500+ posts but nothing old ranks anymore, there's no ranking bonus on new stuff from having a snowball effect of previously highly ranked stuff in the same category.

Sites like StackOverflow sometimes show old things from 2017 because there's a bunch of recent comments. For a blog, even if you change the "updated at" date to something new, it doesn't matter and rewriting the post with different words makes no sense because the original content is still accurate.

> If your courses on Udemy aren't seeing the traffic they deserve, close your account, and create a new one... assuming that's feasible and they don't check too hard

Creating a separate account likely wouldn't work, at least not in the US. To get paid you have to fill out tax forms which has your social security number and other personal info tied to you as 1 human.
by ebiester | 2025-12-17 19:48:16+00:00
So, I think there are two models.

One is a "one junior per team" model. I endorse this for exactly the reasons you speak.

Another, as I recently saw, was a 70/30 model of juniors to seniors. You make your seniors as task delegators and put all implementation on the junior developers. This puts an "up or out" pressure and gives very little mentorship opportunities. if 70% of your engineers are under 4 years of experience, it can be a rough go.
by parasubvert | 2025-12-17 19:48:31+00:00
I think Docker for Teams is $15/month per seat. https://www.docker.com/pricing/

The enterprise hardened images license seems to be a different offering for offline mirroring or more strict compliance…

The main reason for CVE hardened images is that it’s hard to trust individuals to do it right at scale, even with CI/CD. You’re having to wire together your own scan & update process. In practice teams will use pinned versions, delays in fixing, turn off scanning, etc. This is easy mode
by modeless | 2025-12-17 19:48:49+00:00
Geoff Hinton's 2012 Coursera course "Neural Networks for Machine Learning" was incredible. Anyone who took that course got in on the ground floor of deep learning just when it was about to take off. It certainly changed the course of my career.

To give an idea of how cutting-edge it was at the time, the well-known RMSProp optimizer was unpublished work that Hinton presented in the course, and people had to cite the presentation slides when they used it in papers published later.
by ryry | 2025-12-17 19:48:50+00:00
Appreciate it!

So it's pretty compute intensive - my machine also doesn't love it. I wanted to get the general gist of it out there before optimizing, but I'll try my best.

For the below the horizon bit - that was the only way I could get the map to fully render when at a low tilt angle. If I enabled the stop at the ground layer, it would stop rendering the map at close distances (not fully sure why), so it sits like this for now.

The enter an address thing is a great idea, and definitely possible! I'll add it to the road map!
by lo_zamoyski | 2025-12-17 19:48:55+00:00
> This really doesn't explain why particular places and times in history have much higher crime levels.

This is neither here nor there. As I said, temptations can arise that make things more attractive to certain people given their conditioning and the habituation of their desires. But ultimately, at the end of the day, we can refuse to indulge even strong desires. To the degree that we are in possession of our wits, we are culpable.

> If what you said was true then rule of law would have been the standard throughout history

I have no idea how this is supposed to follow, or even what this means.