MurphyA/hacker-news huggingface dataset:
by Barrin92 | 2025-12-14 23:41:53+00:00
>but then taking an additional step of releasing incomplete, incompatible code as "production"

nobody runs Ubuntu's six-month releases in production. Like Fedora it's cutting edge in the literal sense of that term, and if you deploy Ubuntu anywhere in the business world you're on the LTS release.

That the rust coreutils aren't at full parity yet is explicitly mentioned in the release notes of 25.10, if you're installing a distribution with a lifespan of half a year it pretty much goes without saying you're a beta tester for the next LTS release. Like, even if everything was pristine and stable it makes no sense to use an operating system with six months of support in production.
by BlackLotus89 | 2025-12-14 23:42:27+00:00
Actually listened to the podcast before. Happy that everything with the kernel situation kinda seemed to work out for you.

You kinda talked about ec already, but is there an ETA for resilvering?

You were talking about Valve helping in a big way. Was this monetary or development work? If development I would be interested because a while ago I know you do mainly correctness and features right now, but on the phoronix forum you were talking about low hanging fruits for performance work. Was that something of interest to valve/is it something being done right now to make bcachefs a good fs for gaming (whatever that means...)
by efortis | 2025-12-14 23:42:39+00:00
There a few points in favor of TS types in jsdoc (in order):

1. not having to type everything (many types are not helpful)

2. makes code less dense (and they can be rendered in HTML) https://x.com/efortis/status/1989776568676221137

3. not needing a compiler (browsers don't support TS)

I think the main jsdoc caveat is around private types.

About 1, IDK if there’s a way to set up TS for that.
by pogue | 2025-12-14 23:43:16+00:00
I used to pay for their radio service, it was a bit like Pandora. I found it when they added it to Xbox 360 as an app.

I really liked their original profile pages that had sort of a MySpace style customization & vibe. You could have your favorite musicians and tracks analyzed through their API by these 3rd party services that would create very cool graphics & charts to show off to friends and visitors what you were into.

But, then I guess they ran out of money and were really trying to get scooped up by Spotify. They turned off their music player, disabled all the profile customization, alternative services quit having built in scrobbling to it.

I remember I had to download an app that would constantly have my microphone open and it would ID the song I was listening to via some kind of Shazam service and send it to last.fm. I never considered what a security risk that was because I was more interested in keeping my last.fm music tracked.
by immibis | 2025-12-14 23:43:45+00:00
You just called it a Jewish state and now you're pretending that a Jewish state isn't an ethnostate by definition. A purposefully created white state is an ethnostate; a purposefully created German state is an ethnostate; a purposefully created Jewish state is an ethnostate. Ethnostates are very very bad. And it doesn't matter who's a "true" member of the group; it matters only that there is a group. There could be an ethnostate for people with brown hair and that would be bad regardless of whether or not people with black hair were counted as brown-haired.
by innocentoldguy | 2025-12-14 23:44:23+00:00
- No state machine behaviours. Gleam cannot do gen_statem.

- Limited OTP system messages. Gleam doesn't yet support all OTP system messages, so some OTP debugging messages are discarded by Gleam.

- Gleam doesn't have an equivalent of gen_event to handle event handlers.

- Gleam doesn't support DynamicSupervisor or the :simple_one_for_one for dynamically starting children at runtime.
by TheRealPomax | 2025-12-14 23:44:33+00:00
> Had to explain to my employer attending that it is still typescript

"is" is doing a lot of heavy lifting there: JSDoc and TypeScript are two different ways to explicit prescribe typing in a way that tooling can use to determine correctness. The TS syntax is _far_ more powerful, but JSDoc can do most of the common TS use cases, for folks who want to stay in JS land while still benefiting from type tooling (either invoked or straight up built into the IDE).
by l1n | 2025-12-14 23:45:15+00:00
Also an engineer on this incident. This was a network routing misconfiguration - an overlapping route advertisement caused traffic to some of our inference backends to be blackholed. Detection took longer than we’d like (about 75 minutes from impact to identification), and some of our normal mitigation paths didn’t work as expected during the incident.

The bad route has been removed and service is restored. We’re doing a full review internally with a focus on synthetic monitoring and better visibility into high-impact infrastructure changes to catch these faster in the future.
by orliesaurus | 2025-12-14 23:45:15+00:00
I'm not surprised to see these horror stories...

The `--dangerously-skip-permissions` flag does exactly what it says. It bypasses every guardrail and runs commands without asking you. Some guides I’ve seen stress that you should only ever run it in a sandboxed environment with no important data Claude Code dangerously-skip-permissions: Safe Usage Guide[1].

Treat each agent like a non human identity, give it just enough privilege to perform its task and monitor its behavior Best Practices for Mitigating the Security Risks of Agentic AI [2].

I go even further. I never let an AI agent delete anything on its own. If it wants to clean up a directory, I read the command and run it myself. It's tedious, BUT it prevents disasters.

ALSO there are emerging frameworks for safe deployment of AI agents that focus on visibility and risk mitigation.

It's early days... but it's better than YOLO-ing with a flag that literally has 'dangerously' in its name.

[1] https://www.ksred.com/claude-code-dangerously-skip-permissio...

[2] https://preyproject.com/blog/mitigating-agentic-ai-security-...
by eliasdejong | 2025-12-14 23:45:39+00:00
When overwriting fixed-sized values like integers or floats, the old value can simply be overwritten. Holes are only left if the overriding values do not fit in the old location (strings, byte arrays).

To clean up unused space, you start an iterator at the root of the document and recursively write to a new buffer. This will clean up all the unused space. This operation can be delayed by the application for as long as they wish, until the size trade-off outweighs the cost of rebuilding.
by upmostly | 2025-12-14 23:45:43+00:00
https://dbpro.app

We are working on DB Pro, a modern desktop data workbench for developers and data engineers.

The focus is on going beyond a query editor and building a complete environment for working with data. Visual exploration, inline editing, dashboards, and Jupyter notebook style workbooks for queries, notes, and experiments all in one place.

We launched v1 a few weeks ago and the reaction has been genuinely jaw dropping. Downloads, feedback, feature requests, and some great long form discussions around real world data workflows.

We are documenting the entire journey through a public devlog series. The latest video covers the v1 launch.

https://youtu.be/-T4GcJuV1rM

Honestly, building a desktop app is so refreshing after spending a decade or so building web apps.
by brendoncarroll | 2025-12-14 23:45:56+00:00
I'm a happy bcachefs user. Haven't had any issues on a simple mirrored array, which I've been running since before it was in (and out) of the kernel. It's the best filesystem in 2025. Thank you for all your work.

What is the status of scrub? Are there any technical barriers to implementing it, or is it just prioritization at this point? FWIW I think there are probably a lot of sysadmin types who would move over to bcachefs if scrub was implemented. I know there are other cooler features like RS and send/receive, but those probably aren't blocking many from switching over.
by OfflineSergio | 2025-12-14 23:46:21+00:00
Still WithAudio https://desktop.with.audio . It's getting some attention and has actually sold licences!

Someone asked for a free license in exchange of detailed private review and bug reports. They have reported more than 10 bugs so far. I'm working on some of them right now.

WithAudio is a one time payment text to speech reader app. It's one time payment because it has no server and no recurring cost! A nice side effect of this is it's 100% private.
by Retr0id | 2025-12-14 23:46:31+00:00
I resurrected some of my old code for computing hash collisions: https://github.com/DavidBuchanan314/birthday_party (it's actually more of a rewrite)

It can collide 96-bit truncated sha256 in under 24 hours on a 6700XT.

Next steps are a) figure out something interesting/useful to do with it (beyond surprising people), and b) modify it to support accepting contributions from untrusted clients (see "Future Ideas" in README). For a sufficiently interesting answer to a) I could create a "SETI@home"-like system.

A ~102-bit collision would cost $$ worth of rented GPU capacity, and 128-bit is optimistically possible with enough crowd-sourced compute (a ~5-figure dollar cost if you were renting).
by scotty79 | 2025-12-14 23:46:33+00:00
> The main problem GraphQL tries to solve is overfetching.

GraphQL is solving another problem. Problem of communication between frontend and backend team. When frontend team needs to have yet another, field exposed it needs to communicate this to the backend team. GraphQL let's them do this with code instead of Jira ticket and now the communication between the teams can be done asynchronously and batched. No more waiting for backend implementation each time. And if backend exposes too much then it's a backend problem and the frontend has nothing to do with it so it again can be solved without granular communication between backend and frontend teams.
by Findecanor | 2025-12-14 23:46:48+00:00
I'm looking at how to introduce unique, borrowed and GC'd reference types into the IR for my VM/runtime.

I'm inspired by the language Lobster's compiler that specialises functions to arguments of either reference type as a way of doing something analogous to using "escape analysis" to allow objects to be owned by the stack. I think that perhaps specialised functions could be re-merged, with compile-time checks replaced with very cheap runtime checks taking advantage of "upper byte ignore" bits in pointers.

The VM will also need to support not just managed source languages, but also languages where unique and borrowed references are statically checked and possibly stored in objects.
by Archelaos | 2025-12-14 23:46:59+00:00
For reasons of confidentiality, I would prefer not to do so. Furthermore, implementing something like this is not yet a high priority.

There are some information services that offer global zip data, sometimes even as open source. Of course, we could combine this ourselves with other data sources on demographics, income or purchasing power. However, if something like this were available from a single source, it would naturally be easier to implement.

If you want to start a business with something like this, I would reckon that it might be hard to get started, because of the already existing competition, but it might become easier the more datasets you were able to integrate. -- Perhaps you should go deep first instead of broad. Something like starting with a single state and integrating all sort of data sources and then expand from there.
by cheschire | 2025-12-14 23:47:02+00:00
I like to fly close to the sun using Claude The SysAdmin too, but anytime "rm" appears I take great pause.

Also "cat". Because I've had to change a few passwords after .env snuck in there a couple times.

Also giving general access to a folder, even for the session.

Also when working on the homelab network it likes to prioritize disconnecting itself from the internet before a lot of other critical tasks in the TODO list, so it screws up the session while I rebuild the network.

Also... ok maybe I've started backing off from the sun.
by didgetmaster | 2025-12-14 23:47:12+00:00
I am not an expert on all the other columnar stores out there; but it is my understanding that they are used almost exclusively for OLAP workloads. By 'regular database tables', I meant those that handle transaction processing (inserts, updates, deletes) along with queries.

My system does analytics well, but it is also very fast with changing data.

I also think that some of those systems (e.g. Duckdb) also use indexes.
by packtreefly | 2025-12-14 23:47:12+00:00
It's painful, but I've grown distrustful enough of the ecosystem that I disable updates on every IDE plugin not maintained by a company with known-adequate security controls and review the source code of plugin changes before installing updates, typically opting out unless something is broken.

It's unclear to me if the code linked on the plugin's description page is in amy way guaranteed to be the code that the IDE downloads.

The status quo in software distribution is simultaneously convenient, extraordinarily useful, and inescapably fucked.
by blitz_skull | 2025-12-14 23:47:48+00:00
There is, in fact, a harness built into the Claude Code CLI tool that determines what can and cannot be run automatically. `rm` is on the "can't run this unless the user has approved it" list. So, it's entirely the user's fault here.

Surely you don't think everything that's happening in Claude Code is purely LLMs running in a loop? There's tons of real code that runs to correctly route commands, enable MCP, etc.
by scotty79 | 2025-12-14 23:47:52+00:00
> when a server receives an input object, that object will conform to the type

Anything that comes from the front end can be tampered with. Server is guaranteed nothing.

> GraphQL always prunes return objects to just the fields requested, which most other API tech doesn't do, and this can be a really nice security benefit.

Request can be tampered with so there's additional security from GraphQL protocol. Security must be implemented by narrowing down to only allowed data on the server side. How much of it is requested doesn't matter for security.
by somat | 2025-12-14 23:48:21+00:00
On the topic of plain text databases, I have been playing around with wordnet(basically the backbone data structure of a thesaurus ) and while there are a lot of perfectly good libraries to handle the data I was having fun building my own. One interesting thing is that the original data format has the byte offset of every record and link baked into the data, this makes it trivial to avoid having to load the whole thing into memory and you can directly seek to the record in question thus making it a plain text database. Admittedly one only good for reading as writes would have to rebuild all the indexes.

https://wordnet.princeton.edu/documentation/wndb5wn

Honestly now days the whole thing can be trivially loaded into memory but back when the project was started this was much more of a concern, I do know that once I figured this out I started re writing my program to see how little memory I could use, It was a lot of fun to use access patterns other than "load the whole thing into memory"
by resonious | 2025-12-14 23:48:51+00:00
To add another angle to the "run it in Docker" comments (which are right), do you not get a fear response when you see Claude asking to run `rm` commands? I get a shot of adrenaline whenever I see the "run command?" prompt show up with an `rm` in there. Clearly this person clicked the "yes, allow any rm commands" button upon seeing that which is unthinkable to me.

Or maybe it's just fake. It's probably easy Reddit clout to post this kind of thing.
by commandersaki | 2025-12-14 23:49:22+00:00
This isn't really a question.

I love the idea of bcachefs, it gives a lot of the features of btrfs but includes encryption which means no luks song and dance. But having played around it on my laptop and raspberry pi(s), as root filesystem, it just can't be trusted at the moment. I can't remember the exact problem but I ran into bugs jumping to a new version of the kernel where bcachefs stopped working, and having to downgrade but then the format had changed (I think I caused this), and I was just in a completely broken state. I really wanted to figure it out, but after contemplating after the fact, I just don't want to deal with those kind of headaches for now.

I want to be able to use it in a way that I can rely on it for say the next 10 or 20 years, but it just isn't in that state. I can only feel comfortable using it on data or systems that I am not vested in.
by blitz_skull | 2025-12-14 23:49:55+00:00
I fully believe there are misguided leaders advocating for "increasing velocity" or "productivity" or whatever, but the technical leaders should be pushing back. You can't make a ship go faster by removing the hull.

And if you want to try... well you get what you get!

But again, no one who is serious about their business and serious about building useful products is doing this.
by weird_tentacles | 2025-12-14 23:49:57+00:00
Wow. A innocent Apple developer's life is effectively destroyed by Apple's inability to get their gift-card numbers straight. A technical glitch and EVERYTHING is gone.

The victim:

> I have literally written the book on Apple development (taking over the Learning Cocoa with Objective-C series, which Apple themselves used to write, for O’Reilly Media, and then 20+ books following that). I help run the longest-running Apple developer event not run by Apple themselves, /dev/world. I have effectively been an evangelist for this company’s technology for my entire professional life. We had an app on the App Store on Day 1 in every sense of the world.

The response:

> Support staff refused to tell me why the account was banned or provide specific details on the decision

> reps I’ve spoken to have suggested strange things, one of the strangest was telling me that I could physically go to Apple’s Australian HQ at Level 3, 20 Martin Place, Sydney, and plead my case.

Apple leaned on lobste.rs and

> "Story was removed" because we don't want to give trolls a convenient public monument to content that was so bad or bizarre we removed it.

> [Oh well] "time to self host i suppose"

Twenty years of a faithful Apple Devloper's life casually destroyed by Apple, and "time to self host I suppose".

Trust neither Apple (ever, of course) nor the public.
by homebrewer | 2025-12-14 23:51:08+00:00
In real IDEs, not glorified text editors like VSCode, it does. I use this often in IDEA, it's muscle memory so I'm not even completely sure what to press, but it's likely "go to definition" and by default is tied to ctrl+alt+b.

IDEA adds its own analysis on top of that provided by the language server.

Works on JS + every variant of type definitions I've ever seen, among many other things (not only programming languages, but also database objects, etc).
by heikkilevanto | 2025-12-14 23:51:12+00:00
Slowly degoogling my life. Switched to FastMail a while ago, it works. Have written a simple shopping and todo list web app, and a minimal photo gallery. All very simple, mostly for one user only: Myself. Using these as excuses to learn about coding with LLMs. As I have retired a few years ago, I can afford the time, and work with no stress or deadlines. Also slowly improving my beer tracker system. All this as perl-based cgis under Apache, running on my home server/workstation.
by presentation | 2025-12-14 23:51:51+00:00
This is the true big benefit, the others talking about over fetching are not wrong but overfocusing on a technical merit over the operational ones.

My frontend developers had their minds blown when they realized that because we’re using Hasura internally, the only backend work generally needed is to design the db schema and permissioning, and then once that’s done frontend developers aren’t ever blocked by anything (which is not a freedom that I would want to give to untrusted developers, hence emphasis on internal usage of GQL)

(Unfortunately Hasura has shifted entirely into this VC-induced DDN thing that seems to be a hard break from the original product, so I can’t recommend that anymore… postgraphile is probably the way)
by mwu | 2025-12-14 23:51:54+00:00
If you're interested in Urushi, here's an account from an artist who went to Japan to learn how to work with it - https://garlandmag.com/lacquer-god/

"Essentially a concentrated form of poison ivy, uncured lacquer causes blistering rashes which cause its sufferer almost unbearable itch and many sleepless nights. Building tolerance typically takes up to two years and has students living in constant fear of the very material they eventually hope to use on a daily basis."
by JumpCrisscross | 2025-12-14 23:51:57+00:00
> you're pretending that a Jewish state isn't an ethnostate by definition

It isn't. Certainly not in a way that requires ethnic cleansing.

What definition are you using? Are all Arab states ethnostates? What about monoethnic countries [1]?

> Ethnostates are very very bad

Because they arise from ethnic cleansing. Nobody has a problem with Egypt or Finland being monoethnic, and I think it would be incorrect to call them ethnostates.

If Egypt and Finland (and Iceland and Palestine) are ethnostates, then we've broadened the definition to where they seem to be fine.

> it doesn't matter who's a "true" member of the group; it matters only that there is a group

Of course it does. If you can expand the group, you don't have a problem. The very act of nationhood is an exercise in defining groups of people.

One can have a liberal, democratic, Jewish state that isn't an ethnostate. Nothing about Israel's existence requires ethnic cleansing. That's just a weird own goal that argues for it.

[1] https://en.wikipedia.org/wiki/Monoethnicity
by koverstreet | 2025-12-14 23:52:28+00:00
How long ago was this?

We've been cranking through bugs fast, and there are still bug reports coming in but the severity and frequency has declined drastically, while the userbase has gone up; polling the userbase it's been stabilizing fast.

But we won't really know we're there until we're there, so the main thing I can say is: if you report a bug like that, it'll get looked at fast; the debugging tools are top notch.
by nithish95 | 2025-12-14 23:52:58+00:00
Location: Seattle, WA Remote: Yes (also Hybrid / On-Site)

Willing to Relocate: Yes

Employment Type: Full-Time / Contract

Technologies: Golang, Python, C/C++, JavaScript, TypeScript, Dart (Flutter), Next.js, Vue.js, AWS (SQS, SNS, Kinesis, Rekognition), Docker, Kubernetes, LangChain, PyTorch, Redis, SQLite, DynamoDB, Supabase, CI/CD (GitHub Actions/Workflows), REST APIs, WebSockets, Postman, Git

Portfolio/Résumé: portfolio.nithish.net

Email: nithish952001@gmail.com

I’m a Full Stack Software Developer / Applied AI Engineer with over 3 years of experience building scalable, user-focused systems. I’m seeking a full-time role to leverage my skills in building innovative, high-impact solutions. Open to remote opportunities or relocation to tech hubs in the USA.
by baranul | 2025-12-14 23:53:39+00:00
That might be true in the US, but it doesn't appear to be so for Tesla in the rest of the world. For example, Tesla is the number 1 selling EV in Norway. They have also opened Tesla dealerships in India. Potentially, whatever damage they have done to themselves in the US, they might be able to offset that with good sales in other friendlier countries.

While they've hurt their image in the US, for now, that might change over time. 5 or 10 years from now, possibly aided by more success from SpaceX, Tesla's or Musk's image could recover.