MurphyA/hacker-news huggingface dataset:
by splintersio | 2025-12-01 10:57:19+00:00
CSP Header Analysis: Scans websites for Content Security Policy headers Domain Extraction: Identifies all external domains trusted by CSP policies Availability Checking: Uses AWS Route53 to check if trusted domains are available for registration PublicWWW Research: Discovers how available domains are used across the web (optional) Bug Bounty Reports: Auto-generates professional security reports High-Performance Scanning: Beast mode with 1000 DNS concurrency Resume Capability: Continue interrupted scans with wordlist tracking Automatic Organisation: Scan results organised into hot/archive folders

Bonus Intelligence Typosquatting Discovery: DNS enumeration naturally uncovers typosquatted domains that resolve but weren't registered by the target Identifies potential phishing domains Reveals trademark infringement Discovers forgotten test/staging domains Exposes defensive registrations that need monitoring

Using AWS availability checker has some limitations (not full tld support) but it's 100% cheaper than performing a whois lookup

Supporting article (badly formatted) https://thecontractor.io/ghosted/
by kahnclusions | 2025-12-01 10:57:20+00:00
I don’t think there is a solution. It’s the way LLMs work at a fundamental level.

It’s a similar reason why they can never be trusted to handle user input.

They are probabilistic generators and have no real delineation between system instructions and user input.

It’s like I wrote a JavaScript function where I concatenated the function parameters together with the function body, passed it to eval() and said YOLO.
by cjs_ac | 2025-12-01 10:57:26+00:00
As I said, I agree with taking personal responsibility - I'm not sure why you're still trying to fight me on that.

> You have two options. Continue to point fingers and complain and be broke, or start putting $100/mo in VOO and save what little money you have for your future?

The imaginary person you're trying to give this advice to graduated from university eighteen months ago and has been living in their parents' house ever since, applying for jobs non-stop. Their income is $0 per month. They are entirely unable to apply your advice; applying your advice is something they aspire to.
by lotsofpulp | 2025-12-01 10:57:43+00:00
$100/month in VOO isn’t going to do anything (except help people like me who already own a lot).

> the only way out of your mess is by you working your way out of your mess.

Third option is revolution. Could be violent, could be passive like not starting families, complaining on the internet, scrolling tiktok as long as the benefits and body allow, and suicide if necessary.

It is possible for too much of the benefits of working having too high of a likelihood of being captured by rent seekers to not make the work worth it. In old times, the lack of birth control made people have to work more due to needing to support kids, but if I didn’t have kids, I could get by with a much lower standard of living.
by easyThrowaway | 2025-12-01 10:58:39+00:00
If you have any experience in 3D modeling, I feel it's quite closer to 3D Unwrapping than software development.

You got a bitmap atlas ("context") where you have to cram as much information as possible without losing detail, and then you need to massage both your texture and the structure of your model so that your engine doesn't go mental when trying to map your informations from a 2D to a 3D space.

Likewise, both operations are rarely blemish-free and your ability resides in being able to contain the intrinsic stochastic nature of the tool.
by black3r | 2025-12-01 10:58:39+00:00
Well there's also the fact that GPT-3 API was released in June 2020 and its writing capabilities were essentially on par with ChatGPT initial release. It was just a bit harder to use, because it wasn't yet trained to follow instructions, it only worked as a very good "autocomplete" model, so prompting was a bit "different" and you couldn't do stuff like "rewrite this existing article in your own words" at all, but if you just wanted to write some bullshit SEO spam from scratch it was already as good as ChatGPT would be 2 years later.
by Ygg2 | 2025-12-01 10:58:47+00:00
> We can't communicate if you hyper fixate on one tree when our discussion is about the forest.

All I'm saying is you can't expect perfect code in impure systems.

> You are not a mindless automata directed by your manager.

I never said I was, but I also can't turn a ship on a dime. I'm asked to perform a task; I'm going to perform to the best of my abilities, but in impure systems the best you can do is patch the leaking part with code and do some basic refactoring. Any moment spent trying to simplify and fix the software will be rightfully considered a waste.

Because a feature sold is better than performance gained (unless it's utterly abysmal).

> The goal is to put all the puzzle pieces on the table, put the right ones next to each other and let them put the final pieces together. If they don't then they don't feel like they did anything.

Again, in impure systems half the puzzle pieces have left, some other parts of other puzzles have been mixed, and it's the clock is running.

The more you focus on cleaning code, the more you are falling behind feature wise. Up until a point that you can present to managers "Shit is very bad, we need to refactor."
by vkou | 2025-12-01 10:59:12+00:00
> You already know where an enemy is if you hear them behind the wall,

You know they are somewhere behind the wall, you don't know which exact angle they are behind the wall, because headphones and our ears don't work with that degree of accuracy.

The cheater can just swing the corner with his cursor already pre-positioned exactly on his target. Between peeker's advantage (inherent to any online game with latency) and human reaction time, there's not a lot you can do to fight that.
by lelanthran | 2025-12-01 10:59:34+00:00
> Point the author makes is precisely that they don't want to do free software, and they'd like to convince you not to do free software

Sure, but they are not suggesting any practical alternative by issuing a license that essentially boils down to "Please don't use this if you are evil".

Saying that the author has an almost childlike understanding of what the word "evil" means is something of a slur against actual children - I've got a 6 year old who understands subjective morals better than this author does.
by windward | 2025-12-01 10:59:48+00:00
>we are in a very weak economy especially outside of the leading AI firms

Isn't that part of the cause? It sucks up so much investment, there's nothing left for anything else. Or at least nothing without such perceived upside.

Either they pull it off and you're replaced by AGI, or they fail to pull it off and you lose your job to the resulting economic implosion.
by komali2 | 2025-12-01 10:59:49+00:00
Seems interesting but unfortunately might be a bit political?

> It's explicitly free of any "DEI" or similar discriminatory policies.

Complaining about DEI is a marker for a specific ideology. I see this and think great, a project of people who want to be allowed to "just crack jokes" but then get super defensive when they get called out on it.

It also makes me instantly suspect that their ejection from the project from which they forked had more to do with how they composed themselves rather than the fact that they were considering a fork.

If the dev was hoping to keep their project "apolitical," they should probably leave out the two paragraphs of politics...
by f1shy | 2025-12-01 11:00:50+00:00
>> Sysadmin/DevOps (they're synonyms now!)

Is this really like that? Isn't there any Unix/DBA anymore? I associate DevOps to what at my time we called "operations" and "development". We had 5 teams or so:

1) Developers, who would architect and write code, 2) Operations who would deploy, monitor and address customer complaints, 3) Unix (aka SYS) administrators, who would take care of housekeeping of well, the OS (and web servers/middleware), 4) DBA who would be monitoring and optimizing Oracle/Postgres, and 5) Network admins, who would take care of Load Balancers, Routers, Switches, Firewalls (well, there were 2 security experts for that also)

So I think DevOps would be a mix of 1&2, to avoid the daily wars that would constantly happen "THEY did it wrong!"

Can somebody clear my mind, please!? It seems I was out of it for too long?!
by sddhrthrt | 2025-12-01 11:00:59+00:00
> "a self-inflicted wound"

"AI products" that are being built today are amoral, even by capitalism's standards, let alone by good business or environmental standards. Accepting a job to build another LLM-selling product would be soul-crushing to me, and I would consider it as participating in propping up a bubble economy.

Taking a stance against it is a perfectly valid thing to do, and the author is not saying they're a victim due to no doing of their own by disclosing it plainly. By not seeing past that caveat and missing the whole point of the article, you've successfully averted your eyes from another thing that is unfolding right in front of us: majority of American GDP is AI this or that, and majority of it has no real substance behind it.
by Etheryte | 2025-12-01 11:01:22+00:00
This is a pretty narrow view. Most APIs out there are not source available, frontend libraries are the odd one out in that regard. Likewise for docs, it doesn't matter if the LLM can read the docs or not if the docs literally don't include the things you need to figure out. I suspect this is a generational divide, people who grew up with SO can't imagine what life was like before it, but right now we're on a straight course back to isolationist communities, if we aren't already there.
by bionsystem | 2025-12-01 11:01:46+00:00
I have a previous experience with it. I agree with most points. Jobs can be downloaded as xml config and thus kept/versioned. But the rest is valid. I just don't want to manage gitlab, we already have it at corp level, just can't use it right now in preprod/prod and I need something which will be either throwaway or kept just for very specific tasks that shouldn't move much in the long run.
by elric | 2025-12-01 11:01:56+00:00
There is a pretty good social safety net, at least in Belgium. Though its funding is under pressure due to high spending and taxes being pretty much maxed out already. And while I could probably start a company and be reasonably sure that I won't go homeless if it fails, by virtue of that social safety net. The social safety net doesn't give me the cash to hire my first couple of engineers.

This is a bit of a caricature of course. Banks exist. Startup accelerators exist. There are places and ways to get funding. But doing it with your own savings is virtually unheard of over here.
by urlwolf | 2025-12-01 11:02:05+00:00
Very interesting to read this. I've never had breakage, but now I'm questioning whether this is the exception, not the rule.

On ubuntu, every new version broke something, sometimes updates make the computer boot to a blank screen... it was a terrible experince for early-days linux users. This was many years ago, but it made me distrust most distros I tried. Except for nixos.
by voidUpdate | 2025-12-01 11:02:20+00:00
They're also explicitly pro-DEI, given the next paragraph.

"It doesn't matter which country you're coming from, your political views, your race, your sex, your age, your food menu, whether you wear boots or heels, whether you're furry or fairy, Conan or McKay, comic character, a small furry creature from Alpha Centauri, or just a boring average person. Anybody who's interested in bringing X forward is welcome."
by bowsamic | 2025-12-01 11:03:09+00:00
Not just politically bad but I read through the authors contributions to X11 that got him banned and they were full of random renamings and irrelevant refactorings that seemed to have no reason to be there other than to look like he was changing lots of things. That’s why he was kicked out, because he kept making really technically bad pull requests, not for political reasons
by bialpio | 2025-12-01 11:03:21+00:00
When I was at Microsoft, one test pass used pseudolocale (ps-PS IIRC) to catch all different weird things so this should have Just Worked (TM), but I was in Windows Server team so client SKUs may have been tested differently. Unfortunately I don't remember how Program Files were called in that locale and my Google-fu is failing me now.
by palindome | 2025-12-01 11:03:48+00:00
This article states that wastewater from the center contains nitrates at 56 ppm, but the local wells are testing above 70 ppm. It also targets the vector of contamination as being from percolation to groundwater from water treatment plants, which I'm guessing only a fraction of wastewater has the ability to leak through.

This feels incredibly disingenuous, or at the least, incredibly poor journalism.
by nicbou | 2025-12-01 11:04:17+00:00
Some anecdata from Berlin:

- It's now much harder to get a job without speaking German

- There is now competition for low-wage service jobs

- At times it felt like half of my friends were unemployed

- My dev friends have a much harder time finding work. Back in 2015-2020 I had to beat recruiters back with a stick.
by yodsanklai | 2025-12-01 11:05:13+00:00
I work in a FAANG as a SWE. I'm not the on selecting candidates, but I do interview a lot of them. I'm pretty sure I've never seen a 50+ year old candidate. 99% of the candidates have less than 10 year experience, and are in their 20s or 30s.

So yes, ageism is real. I suppose the company gets away with it by saying they look for candidates with 3-10 years of experience?

At that stage, I think I would pass Leetcode with 2-3 months of practice, and I don't mind putting the work if this is what it takes. I'm just not sure I'd be given the chance.
by flir | 2025-12-01 11:05:38+00:00
> i highly doubt that. i have never seen a counterfeit lego set with an actual lego logo

Question: do the legit brick manufacturers equal the quality of Lego? I picked up a Lego-compatible set years ago, and it didn't quite fit with Lego blocks (I'm assuming due to poorer tolerances).

I admit I have no knowledge here, but if 100% compatibility is possible, faking the logo doesn't seem like a high bar. If you were buying fake individual bricks (not sets), how would you even know?
by idoubtit | 2025-12-01 11:06:12+00:00
> Codeberg is a fork of Gitea, itself a fork of Gogs.

Codeberg is a website powered by Forgejo which is a fork of Gitea.

> Both forks originated for "philosophical" reasons, not technical ones

Gitea forked because one developer was the only owner of Gogs' repository and refused to share maintaining rights. The fork was more "practical" than "philosophical".

Forgejo forked when a leading developer secretly created a company with the trademark of Gitea and its logo. The fork was to gain back control over the assets of the project (name/trademark, logo, etc.).
by lapcat | 2025-12-01 11:07:18+00:00
> It would be nice if you could elaborate

To elaborate, you made a wildly false claim with no supporting documentation, such as links to undergraduate degree requirements from universities. These two go hand-in-hand: there wouldn't be documentation to support wildly false claims, just to refute them. But I'm not going to do your work for you, because your claim was both wildly false and also lazy. You made the claim, so the burden of proof is on you to support it.

> I'm here to learn.

That appears dubious, given the content of your previous comment.
by whywhywhywhy | 2025-12-01 11:07:23+00:00
> which made the command hunt for the word match ending space which was regrettably, the D:\

Is this even how the delete command would work in that situation?

>rmdir /s /q D:\ETSY 2025\Antigravity Projects\Image Selector\client\node_modules.vite

like wouldn't it just say "Folder D:\ETSY not found" rather than delete the parent folder
by NitpickLawyer | 2025-12-01 11:07:52+00:00
I think the confusion for a lot of people comes from what they imagine compilation to be. In LLMs, the process is this (simplified):

define_architecture (what the operations are, and the order in which they're performed)

initialise_model(defined_arch) -> weights. Weights are "just" hardcoded values. Nothing more, nothing less.

The weights are the result of the arch, at "compile" time.

optimise_weights(weights, data) -> better_weights.

----

You can, should you wish, totally release a model after iitialisation. It would be a useless model, but, again, the license does not deal with that. You would have the rights to run, modify and release the model, even if it were a random model.

tl;dr; Licenses deal with what you can do with a model. You can run it, modify it, redistribute it. They do not deal with how you modify them (i.e. what data you use to arrive at the "optimal" hardcoded values). See also my other reply with a simplified code example.
by diath | 2025-12-01 11:08:09+00:00
Anyone else just not use any DM? The user/password prompt is sufficient for me and then my shell calls startx when initialized from the tty. It was mostly due to laziness that I did not feel like experimenting with any when I first migrated to Linux but then I just never felt the need to install one. My PC boots, asks me for user/password, then boots the X session and Cinnamon DE.
by nkrisc | 2025-12-01 11:08:27+00:00
You could probably detect those kinds of cheats heuristically on the server. There are limits to human ability. It’ll take more time to catch the cheaters, but I’m sure it’s possible.

This player is posting 30 auctions per second. Bot.

This player is turning at a rate of 500 radians per second to make perfect headshots. Bot.
by potato3732842 | 2025-12-01 11:11:35+00:00
Information is good but the number of "slow leak on a long drive" failures made less inconvenient by TPMS almost certainly pales in comparison to the inconvenience of maintaining the system for the average consumer.

Acting like all this is a safety concern is just textbook internet comment section lying through ones teeth type behavior. Yes, anything can be a safety concern at the limit but even tire failures on the road to not typically elevate to that level. The following framing of "well just drive an old car if you don't like it" is more of the same sort of dishonesty with a veneer of plausible deniability on top. There's no reason these systems need to be built in a way that they can't be disabled and leak PII. There's no reason just about all the systems you're trying to frame as a "bundle" have to be bundled in the first place.
by ovi256 | 2025-12-01 11:11:40+00:00
While humans have historically mildly reduced their working time to today's 40h workweek, their consumption has gone up enormously, and whole new categories of consumption were opened. So my prediction is while you'll never live in a 900,000sqft apartment (unless we get O'Neill cylinders from our budding space industry) you'll probably consume a lot more, while still working a full week
by prmoustache | 2025-12-01 11:12:08+00:00
I never understood why laptops brands have so many SKUs and change chassis design on every generation. When I compare both internally and externally my personal thinkpad from 2019 to the one my company is providing me since last june, I don't see any outstanding difference that justify having incompatible mainboard, keyboard, trackpad, screen, hinges or even fans. It looks like they change the layout and parts dimensions for the sake of changing it.
by ramon156 | 2025-12-01 11:12:24+00:00
My post had the privilege of being on front page for a few minutes. I got some very fair criticism because it wasn't really a solid article and was written when traveling on a train when I was already tired and hungry. I don't think I was thinking rationally.

I'd much rather see these kind of posts on the front page. They're well thought-out and I appreciate the honesty.

I think that, when you're busy following the market, you lose what works for you. For example, most business communication happens through push based traffic. You get assigned work and you have x time to solve all this. If you don't, we'll have some extremely tedious reflection meeting that leads to nowhere. Why not do pull-based work, where you get done what you get done?

Is the issue here that customers aren't informed about when a feature is implemented? Because the alternative is promising date X and delaying it 3 times because customer B is more important
by lotsofpulp | 2025-12-01 11:12:39+00:00
There is no evidence to indicate buybacks reduce long term incentives for executives compared to dividends.

If anything, all the businesses with the most long term growth have done the most buybacks because they are paying the employees in stock, which employees gladly accept because they bet the business will have long term growth.

And executive compensation is not vested until business targets are met a few years in the future.
by Mordisquitos | 2025-12-01 11:12:56+00:00
Yes, to a limited extent, in line with their brains' development. These developmental stages have predictive power as to what kind of things an average 2-7 year-old is and isn't able to do yet.

Are there any discrete stages of LLM performance which can describe why free ChatGPT is unable to realise the absolute nonsense in saying «The surgeon could be the son's mother, which explains why she would say, "He’s my father."», and what kind of model is not expected to fall for that trap?
by sumuyuda | 2025-12-01 11:13:33+00:00
> In Germany if you’re mid to high earner, a private insurance can cost you less than half than the public healthcare system and you get much better service. Starting with appointments with specialists, who always give preference to privately insured people.

The solution here is to get rid of private insurance in Germany and only have public. It creates a two class system and private is a terrible choice once you are older, as costs will skyrocket.
by lordnacho | 2025-12-01 11:14:20+00:00
> At 51, if my only differentiator is I can code, I’ve done something horribly wrong in my life.

I think software is going through what scribes went through when education went universal.

At one point, just knowing how to read and write gave you a cushy job. It didn't matter what, maybe you were in government, maybe you were a clerk organizing trade.

Somewhere in the last 20 years, this happened with coding. At the start of the millennium, knowing how to code meant you could fill some role. Now, everybody knows enough of how to do it that it's assumed for many roles, just as reading and writing is for every office job.
by imtringued | 2025-12-01 11:15:00+00:00
There is a mild lack of context here. If you have a single vector and want to solve LUx=b, you actually have matrix vector multiplication. It's the batched LUX=B case, where X and B are matrices where you need matrix matrix multiplication.

For those who don't know. One of the most useful properties of triangular matrices is that the block matrices in the diagonal blocks are triangular matrices themselves. This means you an solve a subset of the x using the first triangular block. Since the sub-x vector is now known, you can now do a forward multiplication against the non-triangular blocks that take your sub-x vector as input and subtract them from the b vector. This is the same as if you removed one of the columns or rows in the triangular matrix. The remaining matrix stays triangular, which means you can just keep repeating this until the entire matrix is solved.