MurphyA/hacker-news huggingface dataset:
by hu3 | 2025-12-25 23:58:52+00:00
it's nothing short of amazing for me.

it's very fast. Boots within 1s for me even for large projects.

Has a zillion extensions. Some of which you won't see in any other editor, or at least with the same quality. Like the powerful playwright integration for example.

LLMs can one-shot most small VSCode extensions when I need some niche functionality.

GitHub/Copilot integration is soo good I develop small features by speaking to my computer and even my phone because I can fire agents with voice instructions.

Jetbrains IDEs used to be my goto editors and before that neovim.

But it's so easy to customise and extend VSCode that I can't see myself going back.
by maxdamantus | 2025-12-25 23:59:05+00:00
It's the same on Wayland. The client (usually part of a toolkit like Gtk/Qt) needs to subscribe to notifications [0] from the server so it can decide the raster size of the surface it wants to draw to. On X11 this is a matter of detecting when your window moves to a screen with another DPI and resizing/rescaling.

I guess the "third" program would be something like xrandr, so the Wayland analogue to that would be wlr-randr (for wlroots compositors), or some other DE-specific tool for configuring screen sizes. Again there's no fundamental difference here.

[0] https://wayland.app/protocols/fractional-scale-v1#wp_fractio...
by crote | 2025-12-26 00:00:14+00:00
> You wouldn't complain as much if it were merely poorly written by a human.

Obviously.

> It gets the information across.

If it is poorly written by a human? Sure!

> The novelty of complaining about a new style of bad writing

But it's not a "new style of bad writing", is it?

The problem is that LLM-generated content is more often than not wrong. It is only worth reading if a human has invested time into post-processing it. However, LLMs make badly-written low-quality content look the same as badly-written high-quality content or decently-written high-quality content. It is impossible for the reader to quickly distinguish properly post-processed LLM output from time-wasting slop.

On the other hand, if its written by a human it is often quite easy to distinguish badly-written low-quality content from badly-written high-quality content. And the writing was never the important part: it has always been about the content. There are plenty of non-native English tech enthusiasts writing absolute gems in the most broken English you can imagine! Nobody has ever had trouble distinguishing those from low-quality garbage.

But the vast majority of LLM-generated content I come across on the internet is slop and a waste of my time. My eyeballs are being DDoSed. The only logical action upon noticing that something is LLM-generated content is to abort reading it and assume it is slop as well. Like it or not, LLMs have become a sign of poor quality.

By extension, the issue with using LLMs for important content is that you are making it look indistinguishable from slop. You are loudly signaling to the reader that it isn't worth their time. So yes, if you want people to read it, stick to bad human writing!
by therobots927 | 2025-12-26 00:01:50+00:00
Fun fact, if someone knows your email address and clicks “forgot my password” it sends a push notification to the Gmail and YouTube apps asking to confirm or deny the sign in request. They can click that hundreds or thousands of times per day. I know because it happened to me, so I moved all of my accounts off of the email and deleted my YouTube account. :) peace out Google. Thanks for tolerating a completely insane UI, and not allowing me to turn this setting off. I can’t imagine what it’s like for the elderly who have to navigate this completely enshitified landscape.
by malfist | 2025-12-26 00:02:38+00:00
I really enjoy this train of thought. It rings true to me, its also something Hank Green was recently talking about with the negative effects of the internet. Its not that the internet is bad. We're starved for information and meaning and were being feed a diet of ultraprocessed food in the form of shorts and tiktoks. I think the solution this author laid out is good. Consume quality, with care.
by cedws | 2025-12-26 00:03:55+00:00
Two things about fronting with your own domain:

1. You have to own that domain forever, until or at least until you're 100% confident that an email intended for you will never be sent to that domain ever again. Even then, there are security risks with giving up the domain.

2. You give up some privacy. You can use mailbox aliases but it doesn't really matter if all the mailboxes are tied to a domain registered to your name and address.
by TechRemarker | 2025-12-26 00:04:04+00:00
Wow this is massive, but will come down to whether you switch to another existing address you have. That is you have example1@gmail.com and example2@gmail.com. The first one has all your decades of data and second is name you've reserved etc. With handles you can release one and use on another account so hopefully option to do the same. Or if they could just update their account migration to support migrating all historic data that would accomplish the same.
by spankibalt | 2025-12-26 00:04:18+00:00
> "I never understood why people claim the Macbook is so good."

Apple's good enough for the average consumer, just like a 16-bit home computer back in the day. Everyone who looks for something bespoke/specialized (e. g. certified dual- or multi-OS support, ECC-RAM, right-to-repair, top-class flicker-free displays, size, etc.) looks elsewhere, of course.
by echelon | 2025-12-26 00:04:19+00:00
These guys raised $125M at $1.3B post on $12M ARR? What.

> Today, langchain and langgraph have a combined 90M monthly downloads, and 35 percent of the Fortune 500 use our services

What? This seems crazy. Maybe I'm blind, but I don't see the long term billion dollar business op here.

Leftpad also had those stats, iirc.
by timr | 2025-12-26 00:04:24+00:00
Depends entirely on the stage of the disease and the aggressiveness of the cancer! Getting an aggressive brain cancer when you had early stage Alzheimer’s [1] would be tragic. The tradeoff would be years of life.

For the record, I have no idea what the actual risk tradeoff is, but the point of regulation is that nobody does. You can’t have informed consent when you can’t be informed.

[1] Aside: Alzheimer’s is relatively early stage, as dementias go. It’s frequently diagnosed by onset in younger people.
by crawshaw | 2025-12-26 00:05:30+00:00
I am not sure if you are:

1. attempting to retcon garbage collected languages as not memory safe, or

2. discussing a particular implementation choice of the standard Go runtime that was made because it is not a practical source of bugs (see https://research.swtch.com/gorace, it is not an inherent feature of the language, just the implementation, and it is the right practical choice)

But either way: this is the sort of thing I have seen again and again in the Rust "community" that I find deeply off-putting. Build good things, do not play snooty word games.
by makeitdouble | 2025-12-26 00:05:41+00:00
Don't you get these spam mails either way ?

I have a separate email I only use to get government and public services (gas, electricity) stuff and it still receives a few hundreds of spam a week. At this point I kinda feel whitelisting the mail I want to read is the only sane option, so getting hundreds or thousands of spam mail makes little difference, while managing a portofolio of addresses is a chore.
by thundergolfer | 2025-12-26 00:06:35+00:00
The crux of the post is this:

> A closer look reveals that by vastly increasing the market for the published word, paperbacks also vastly increased the opportunities to make a living writing serious books

We can grant that this is true and yet it doesn't seem to provide encouragement. The equivalent today would be slop TikTok demand vastly increasing the opportunity for "serious" TikToks, whatever those may be.

A 'serious TikTok' is not a film. To think a film and a TikTok are alike is to make an elementary mistake in media analysis.

I can buy that we're going to get an explosion in fantastic short-form content. I'd say that the _Almost Friday TV_ group, who started a few years ago, are an example.

But this remains terrible news for predecessor mediums, who will suffer diminished demand and a general decline in the competency of audiences to enjoy those mediums ("great writers need great readers").
by hn_throwaway_99 | 2025-12-26 00:06:58+00:00
Not to be rude, but from your comments you don't appear to understand what the CSRF vulnerability actually is, nor how attackers make use of it.

Cookies can still only be sent to the site that originally wrote them, and they can only be read by the originating site, and this was always the case. The problem, though, is that a Bad Guy site could submit a form post to Vulnerable Site, and originally the browser would still send any cookies of Vulnerable Site with the request. Your comment about "if the domain name is in the cookie value" doesn't change this and the problem still exists. "Yes you can configure the dns to bypass that" also doesn't make any sense in this context. The issue is that if a user is logged into Vulnerable Site, and can be somehow convinced to visit Bad Guy site, then Bad Guy site can then take an action as the logged user of Vulnerable Site, without the user's consent.
by shagie | 2025-12-26 00:07:12+00:00
That gets you into the marble run world... which is segment of YouTube... and there are some very impressive setups.

https://youtu.be/qGsD19P16rs

As an aside, there's an app out there is an app for the iPad called "Cuboro Riddles" which is a "how do you make the marble go from here to there using the blocks." Given that there are multiple ways that a block can channel a marble, this is a tricky one.

... and then if you get this over into the lego domain (not as "just something to fiddle with..." it gets you into the GBC. There is a standard for how one connects to another described at https://www.greatballcontraption.com/wiki/standard ... and then at lego conventions people hook them all up. https://youtu.be/avyh-36jEqA
by thundergolfer | 2025-12-26 00:07:41+00:00
> There's really nothing inherently wrong about the format.

"Our conventional response to all media, namely that it is how they are used that counts, is the numb stance of the technological idiot. For the 'content' of a medium is like the juicy piece of meat carried by the burglar to distract the watchdog of the mind...The effects of technology do not occur at the level of opinions or concepts, but alter sense ratios or patterns of perception steadily and without any resistance. The serious artist is the only person able to encounter technology with impunity, just because he is an expert aware of the changes in sense perception." — Marshal McLuhan, Understanding Media
by hi_hi | 2025-12-26 00:07:52+00:00
A cooking kit.

Usually cake baking of some kind. The kids will get bored after the initial mess making part, but will be expecting a yummy treat at the end, so the parent has to see the whole thing through, _and_ clean up the mess.

For an added bonus, the kid then eats the sugary treat, and they have that to deal with.
by rconti | 2025-12-26 00:08:33+00:00
A couple of years ago in early December, we took a trip to Berlin and Strasbourg, and spent our time visiting many Christmas markets. It was a really enjoyable trip.

Yes, it was very cold, which is not deal when you're spending 12 hours a day outside (hovering around freezing the entire trip, a small amount of snow a few days). Yes, it gets dark early and the days are short -- but that's true back at home in California too. We do share a hemisphere, after all. And yes, after awhile, the markets all do tend to look the same. But I find it nice to travel, and I love traveling in the off-season.

Yes, you can travel at the same time everyone else wants to travel, with long days, long lines, and large prices. But everywhere you go has traditions year round, and the weather and lifestyle changes with the seasons. Every place and every time of year has things worth seeing and experiencing.

Or you could travel to the opposite hemisphere when the days are short back home, that's fun too :)
by AlotOfReading | 2025-12-26 00:10:06+00:00
If we're being extremely strict, Python probably also shouldn't be on that list because the CPython runtime is written in C and has had issues with memory safety in the past.

Ultimately, "memory safety" is a conversation about what a program is intended to do and what semantics the language guarantees that program will have when executed. For the vast majority of programs, you can be just as confident that your Go and Python code will do the right things at runtime as your safe Rust. It's good enough.
by powvans | 2025-12-26 00:10:11+00:00
I find walking can be a similar experience. It really crystalized for me this summer while walking the Camino de Santiago because of the effect of exploring another country. When you walk, you see everything. The world is huge. Everything is slower, higher fidelity, and for me, richer. You can spend an entire day walking from one town to another. Think of everything you will see! Compare this to driving. Driving is like compression. You could drive between the same two towns in less than an hour. You may see many beautiful things while driving, but the experience is fleeting and momentary. You will miss so many details along the way.

As always, there are tradeoffs, and you can't walk everywhere or always have these types of mindful experiences. On the other hand, life is short and perhaps paradoxically, slower experiences can yield richer days.
by apayan | 2025-12-26 00:13:30+00:00
Yeah, you're right. A direct connect in Milan at Equinix ML2 is $2.48/port-hour.

> "description": "$2.48 per connected HC-10G port-hour (or partial hour) (EU (Milan), Equinix ML2, Milano, Italy)"

https://gist.github.com/arashpayan/b115e834191fbc89ac1bc1cdc...
by jaynate | 2025-12-26 00:14:08+00:00
My gmail address is first.last@gmail.com. From time to time (and for years) I get someone else’s at firstlast@gmail.com. I thought that a Gmail account that was first.last@gmail also allowed for email sent to firstlast@gmail (no period) to reach my inbox as well.

I’ve received some sensitive/PII content over the years.

I’ve wondered if this person has access to any of my information?

Not necessarily related to this post, but wonder why and how this could happen.
by rolph | 2025-12-26 00:14:14+00:00
it is one plausible interpretation.

attached is the question of what is "oscillating" ?

is matter, composed of "spacetime" possessed of disequilibrial state?

or is matter something different than the surrounding "substance"?

where does the phenomenal energy originate to drive a proton for the duration of its existance [decay rate]. is there some topologic ultrastructure that constrains geometry and drives the process of being a proton?
by hn_throwaway_99 | 2025-12-26 00:14:49+00:00
> Thing is, SameSite’s primary goal was not CSRF prevention, it was privacy.

That doesn't make any sense to me, can you explain? Cookies were only ever readable or writable by the site that created them, even before SameSite existed. Even with a CSRF vulnerability, the attacker could never read the response from the forged request. So it seems to me that SameSite fundamentally is more about preventing CSRF vulnerabilities - it actually doesn't do much (beyond that) in terms of privacy, unless I'm missing something.
by irishcoffee | 2025-12-26 00:14:50+00:00
My spouse and I dealt with this on our honeymoon. We were both working 50-80 hour weeks for months leading up to our trip. The first day we got to this all-inclusive resort we spent the whole time trying to min/max and be as efficient and calculated as possible. It was a stressful, miserable day.

Day two we looked at each other, had an adult beverage with breakfast, and relaxed for the rest of the trip.
by alhirzel | 2025-12-26 00:15:39+00:00
This reminds me of the following, a story from my personal life. My wife and I both ski, and early in our relationship one of us told the other about the coolest poster ever about snowflakes. We each described it. We were sure we were talking about the same one - the one that graphed how snow changes over temperature and helped explain why it can feel so different. One of us pulled it up, and we realized, well...

[1]: https://vermontsnowflakes.com/cdn/shop/products/Snowflake_Th...

[2]: https://physics.montana.edu/demonstrations/video/1_mechanics...

She was talking about #1 (the work of Bentley made into a collage), and I was talking about #2. It turned out to be a pretty good way of thinking about how imperfect communication is, and how hard it is to get on the same page about things that are even more important when all we have is words.
by lysace | 2025-12-26 00:16:04+00:00
> I’ve wondered if this person has access to any of my information?

No. They have just told someone your email address and that someone has sent you stuff. Anyone can do that, if they dream up your email address. People having the same name are a lot more likely to do that.

Happened to me as well. I was the first one of the 50 people or so carrying my name to register "first[.]last@gmail.com" back in 2004. At least two of my namesakes have since mistakenly used my email address. Some people just aren't very detail-oriented.
by yakshaving_jgt | 2025-12-26 00:19:12+00:00
> You're ignoring the mass atrocities committed by both sides in the Donbas throughout much of the 2010s

This is grossly misleading. It implies a scale and symmetry that reputable monitors do not support.

The question now is what caused you to write this. Was it ignorance? Or malicious dishonesty?
by gettingoverit | 2025-12-26 00:19:16+00:00
It isn't competitive. They are paid by Google.

Worse, it's ridden with spyware, and is merely a honeypot for security-aware people that are not sufficiently paranoid to check any of the claims. Like, those VPNs from YT ads that use your IP to give AI companies residential proxies, the same kind of scam.

Spin up Wireshark and take a look at activity of Firefox. Try to shut the browser up. It won't work.

Even if they weren't a Google's proxy company, they would lose to standards commitees being infested by Google, and would have to play the "best luck catching up" game by constantly supporting new versions of JS, APIs and CSS features that nobody needs (except Google's YouTube will use them to stop you from using an adblocker).

FF is governed by ex-Oracle managers at the moment, singing the Google's song. Don't anthropomorphize your lawnmower.
by neilv | 2025-12-26 00:20:05+00:00
Excellent points. I just wonder about the 2-on-1 interviews. I think they tend to double-down on the one-sidedness of typical interviews.

It's not a group engineering meeting. Unless it's big-tech hiring of fungible worker drones, everyone in that meeting should be trying to get more signal about the others as individuals.

I've been the "1" in 2-on-1 three times recently, all for startups. For me, it's hard to think about the hard-thinking questions, and also be finding rapport and getting signal from two different people at once. I'd much rather spend twice as much of my time, to get each person 1-on-1, no additional cost to them.

Two of the recent 2-on-1 interviews were on videoconf, and, with the videoconf setup they chose, I couldn't even see one of the people most of the time.

The other interview was 3 people in tiny conference room/closet (the size of what used to be a one-person cubicle), for an hour, so it was especially stuffy and crowded with 3 people, and a great way to get Covid.

Besides more people complicating the situation, people tend to speak candidly with me 1-on-1, but are less likely to do that if their colleague is in the room or on the call.

Here's an intuition: Imagine you were a company interviewing startup candidates, and HR suggested saving time by you interviewing two candidates at once. It would be awful, and you wouldn't be able to get much read off of either (other than to tell if one or both were sharp-elbowed). So why do it 2-on-1 in the other direction, unless you're saying it's not important for a candidate to get signal about the company and colleagues?
by mathgeek | 2025-12-26 00:20:16+00:00
The first part is exactly my point, but the latter is nonsense in my book. You cannot ask VSCode (pre-AI) to write a program for you. It's akin to doing math with AI vs. an Nspire CAS. There's no reason to think you need to respond to those who shame vibe coding with claims that we shouldn't differentiate our tools, but we also shouldn't just say it's all the same. We wouldn't claim that about farming with a laser-powered weed killer compared to farming with a horse-drawn plow.
by cloudwaddie | 2025-12-26 00:20:46+00:00
Hey everyone, I'm a 14-year-old developer from Australia, and I’ve been working on a hobby project called Huntr (huntrfinds.info). My goal was to build a central hub for breach awareness that’s fast, free, and accessible.

The Tech Stack: I wanted to ensure the data was as accurate as possible, so I’ve integrated three major layers:

Primary Check: Uses the HaveIBeenPwned API for robust password auditing.

Username/Email Discovery: Powered by XposedOrNot for quick leak identification.

Deep Search: Integrated LeakCheck.io for more granular deep-web results and username correlation.

It also includes a client-side password generator to help users rotate compromised credentials immediately. Since this is a hobby project, it’s 100% free. I use a few ads and an affiliate/donation link just to cover the API costs and server overhead.

I'm really looking for feedback on the UI and if there are any other specific APIs or features (like domain-wide searching) you think would be useful for an ethical hacker's toolkit!
Ask HN: Is there an AI subscription plan comparison tool that's always updated?
by ArlenBales | 2025-12-26 00:24:07+00:00
I asked versions of this question to a few different models but I never found an accurate answer.

I would like to compare the various free and paid AI subscription plans, primarily from the most popular vendors like ChatGPT, Claude, Google, etc.

I can find countless static webpages, YouTube videos, etc. that compare subscriptions, but their information quickly becomes out-of-date, or isn't detailed enough.

I'm looking for a tool that grabs the latest information on what each plan provides (features, models, context windows, etc.), and compares them across different subscriptions. I imagine this information would be obtained from API calls or scraping. The comparison tool should not rely on AI to get its information.. I want the latest facts (ideally checked at least once a day).
by clausecker | 2025-12-26 00:24:55+00:00
You can do it like this, assuming A is the mask of newlines and B is the mask of non-spaces.

1. Compute M1 = ~A & ~B, which is the mask of all spaces that are not newlines
2. Compute M2 = M1 + (A << 1) + 1, which is the first non-space or newline after each newline and then additional bits behind each such newline.
3. Compute M3 = M2 & ~M1, which removes the junk bits, leaving only the first match in each section

Here is what it looks like:

10010000 = A
01100110 = B
00001001 = M1 = ~A & ~B
00101010 = M2 = M1 + (A << 1) + 1
00100010 = M3 = M2 & ~M1

Note that this code treats newlines as non-spaces, meaning if a line comprises only spaces, the terminating NL character is returned. You can have it treat newlines as spaces (meaning a line of all spaces is not a match) by computing M4 = M3 & ~A.
by zoenolan | 2025-12-26 00:26:07+00:00
- Stencil Routed A-buffer [1]

- Multi-Fragment Effects on the GPU using the k-Buffer [2]

- Production Volume Rendering [3]

- Translucent Shadow Maps [4]

[1] https://developer.download.nvidia.com/presentations/2007/sig...

[2] https://www.sci.utah.edu/~stevec/papers/kbuffer.pdf

[3] https://graphics.pixar.com/library/ProductionVolumeRendering...

[4] https://www.scribd.com/document/657069029/Translucent-Shadow...