MurphyA/hacker-news huggingface dataset:
by gavinray | 2025-12-14 18:53:01+00:00
I'm probably about as qualified to talk about GraphQL as anyone on the internet: I started using it in late 2016, back when Apollo was just an alternate client-side state/store library.

The internet at large seems to have a fundamental misunderstanding about what GraphQL is/is not.

Put simply: GQL is an RPC spec that is essentially implemented as a Dict/Key-Value Map on the server, of the form: "Action(Args) -> ResultType"

In a REST API you might have

app.GET("/user", getUser) app.POST("/user", createUser)

In GraphQL, you have a "resolvers" map, like:

{ "getUser": getUser, "createUser": createUser, }

And instead of sending a GET /user request, you send a GET /query with "getUser" as your server action.

The arguments and output shape of your API routes are typed, like in OpenAPI/OData/gRPC.

That's all GraphQL is.
by apparent | 2025-12-14 18:53:01+00:00
They're axing honors classes in our high schools so they can mix all the kids together for equity. But because some of the students can't read very well (even in 10th grade), they have to read the books aloud during class, since it would be inequitable to require the kids to read on their own at home.

Not surprisingly, when you're rate-limited by read-aloud speed, you can't get through that many books and excerpts are a natural response.
by NewsaHackO | 2025-12-14 18:53:04+00:00
You are missing his point. He is not saying that the Caesar cipher is unbreakable by LLMs. These web scrapers are gathering a very large amount of data to train new LLMs. It is not feasible to use hundreds of thousands (millions?) of dollars to run petabytes of random, raw data into a frontier LLM model before using the data, just to catch one person possibly using a cipher to obfuscate their data. That is the value proposition: make your data slightly harder to scrape so that web scrapers for LLM training would rather let your data be unusable than make an investment to attempt to extract it.
by Rendello | 2025-12-14 18:53:22+00:00
I wonder if speaking fast is a problem in and of itself. Bryan Cantrill's talks are some of the best around, and he talks very fast. For other speakers, I usually put them at 1.5x speed.

It seems to me that the problem isn't speaking fast per se, but almost speaking where you're tripping over yourself unconfidently. Bryan, for example, often does trip over his words, but he's confident in what he has to say and enunciates very clearly (he's basically yelling).

During the pandemic I made a few Youtube videos, basically public speaking without an audience. I was amazed at how hard it was, I spend hours and hours trying to speak with any confidence. Funnily enough though, at tech meetups, I'm pretty comfortable presenting in front of everyone even though I see others struggle so much. Not sure what's the difference.
by exasperaited | 2025-12-14 18:53:37+00:00
I dunno. I still really like Lighthouse (for Laravel).

It's about the only thing about my job I still do like.

The difference is that it is schema-first, so you are describing your API at a level that largely replaces backend-for-frontend stuff. If it's the only interface to your data you have a lot less code to write, and it interfaces beautifully with the query builder.

I tend not to use it in unsecured contexts and I don't know if I would bother with GraphQL more generally, though WP-GraphQL has its advantages.
by azakai | 2025-12-14 18:53:53+00:00
That is incorrect about function pointers: The VM does check that you are calling the right function type, and it will trap if the type does not match.

Here it is in the spec:

> The call_indirect instruction calls a function indirectly through an operand indexing into a table that is denoted by a table index and must have type funcref. Since it may contain functions of heterogeneous type, the callee is dynamically checked against the function type indexed by the instruction’s second immediate, and the call is aborted with a trap if it does not match.

From https://www.w3.org/TR/wasm-core-2/#syntax-instr-control

(Other sandboxing approaches, including related ones like asm.js, do other things, some closer to what you mentioned. But wasm has strict checking here.)
by amitav1 | 2025-12-14 18:54:30+00:00
This sort of thing is some of the weirdest pseudointellectualism I've seen. Most adults and seniors also can't tell where they are by the position of the stars, or write with a fountain pen, or use a sliderule, or read a sundial. Because now we have Google Maps, ballpoint pens, calculators, and analog clocks.
by dinfinity | 2025-12-14 18:54:34+00:00
> My main point is that that distance x is going to rapidly get towards just a few miles away from point of use very shortly.

That seems physically unlikely to me. Sure, burying and maintaining cables costs money, but other than that transferring energy in a very fundamental and solid state way is going to be much easier than packaging it up and transporting it with heavy machinery.

This is definitely a case where your argument only works if it is supported by the actual calculation.
by Archelaos | 2025-12-14 18:54:46+00:00
I found a bug: Got to World Countries. Select Germany. Click on View in API Docs. => I get California instead of Germany.

Your promise in the teaser to cover all ZIP codes is too grandiose as long as it supports only I have a customer who sells worldwide.

I have a customer who sells worldwide. For a company like this, an up-to-date API with the geographical locations of international postcodes would be very interesting for data analysis, ideally in conjunction with population data and options for assigning postcodes by region, proximity, etc.

However, the accuracy and timeliness of the data would be crucial, as expensive business decisions depend on it, such as which regions to select for advertising.
by robotnikman | 2025-12-14 18:54:50+00:00
This really is a major issue imho. Many of the people here and those who are more tech savvy would be willing to pay for such a thing, but we are a very small minority. 90% of people don't care, or are unable or unwilling to understand the consequences of having all their data vacuumed up by corporations like Google and Facebook. Its a Tyranny of the majority type of situation. I'm not sure what the solution to this would be other than maybe better educating the populace.
by ichverstehe | 2025-12-14 18:55:10+00:00
Allow me to plug Ankivalenz[1], my library that turns (structured) Markdown files into Anki decks, using a syntax like this:

# Solar System ## Planets ### Color - Earth ?:: Blue - Mars ?:: Red

The best thing about it (for me) is that the header structure (and any parent list items) are added to the cards, e.g.:

Path: Solar System > Planets > Color Front: Earth Back: Blue

This hierarchy makes it much easier to formulate succinct cards, in my experience.

The syntax also means that I can easily add cards from my regular Markdown notes, so regular notes and Anki cards live together.

[1] https://github.com/vangberg/ankivalenz/
Show HN: TinTekka – AI tool roadmap for agencies
by TinTekka | 2025-12-14 18:55:10+00:00
Hi HN,

I'm a first-time founder from Dhaka building TinTekka to solve a real pain point: agencies waste weeks evaluating AI tools, only to struggle with implementation and see minimal ROI.

The core problem: there are thousands of AI tools launching monthly, but no structured way for teams to discover which ones actually fit their workflow* and *how to implement them properly.

TinTekka has two sides:

For agencies & startups: - Answer targeted questions about your team, workflows, and pain points - Get a personalized AI tool stack (with implementation steps and ROI projections) - See which tools solve your specific bottlenecks - Everything free right now, no credit card

For AI tool builders (the part I think HN might find interesting): - We're building a partner network connecting emerging AI tools with agencies actively looking for solutions - Early partners get featured in personalized roadmaps when they're a good fit for a user's needs - No affiliate nonsense, just direct introductions to qualified teams seeking exactly what you built - This becomes a distribution channel for builders who are tired of competing for attention on Product Hunt

The thesis: AI tools are fragmenting fast. Most won't survive based on novelty alone. The winners will be ones that solve real workflows and get in front of the right customers early. We want to be that connection layer.

Currently validating the agency side and starting to onboard early builder partners. Would love feedback from HN:

- For agencies: is the roadmap actually useful, or does it feel like just another listicle? - For builders: would you want structured access to teams actively looking for your type of solution? - What am I missing about how teams actually adopt AI in their workflows?

Link: https://tintekka.com

Curious what you all think, especially if you're building or using AI tools.
by n_e | 2025-12-14 18:55:23+00:00
The issue is that the API itself is, I assume, badly designed.

Equivalent delete queries in rest / graphql would be

curl -X DELETE 'https://api.example.com/users/123'

vs

curl 'https://api.example.com/graphql?query={ deleteUser(id: 123) { id } }'
by mmooss | 2025-12-14 18:56:04+00:00
> teaching videos and also books often share a common weakness: low information density

Here we agree, but for books I don't need to read the low-density material. Review articles, for example, are fantastic. Scholarly books can be overwhelming due to density x size.

> Audio content at least allows you to absorb information while your hands and eyes can be busy with other things: cleaning, driving, etc.

Not with high-density content, IME.
by sourabh86 | 2025-12-14 18:56:09+00:00
I wrote an explainer on classic edge detection algorithms (Sobel, Canny, Laplacian) while building an interactive tool that lets you upload an image and compare their outputs side by side.

The post focuses on:

- What each algorithm is actually doing under the hood

- Where each one works well (and where it doesn’t)

- Why Canny feels “better” in many cases but costs more compute

- Practical tradeoffs rather than just theory

The tool runs entirely client-side, so no images are uploaded to a server.

Would love feedback from folks who’ve used these algorithms in production or teaching.
by citizenpaul | 2025-12-14 18:56:16+00:00
I agree with everything you wrote.

You are overlooking a blind spot, that is increasingly becoming a weakness for devs. You assume that businesses care that their software actually works. It sounds crazy from the dev side but they really don't. As long as cash keeps hitting accounts the people in charge MBAs do not care how it gets there and the program to find that out only requires one simple unmistakable algo Money In - money out.

evidence

Spreadsheets. These DSL lite tools are almost universally known to be generally wrong and full of bugs. Yet, the world literally runs on them.

Lowest bidder outsourcing. Its well known that various low cost outsourcing produces non functional or failed projects or projects that limp along for years with nonstop bug stomping. Yet business is booming.

This only works in a very rich empire that is in the collapse/looting phase. Which we are in and will not change. See: History.
by rsynnott | 2025-12-14 18:56:44+00:00
That seems only compelling if you assume that all git pushes are of equal worth. If you instead assume that LLM codegen things push people into smaller PRs (because getting them to do anything big reliably is difficult) or more mistaken PRs which then require more PRs to correct them (anecdotally, it sure _feels_ like everything’s getting a lot buggier) that also scans.
by lazide | 2025-12-14 18:56:51+00:00
Dons psychic hat - and EuroTube and EuroGram will be widely ignored because most people are not only apparently fine with getting taken advantage of if it’s shiny and they don’t notice it.

The reason for all the data/lack of privacy stuff is because most people get something from it - the next shiny manipulative BS thing, or shiny gadget or whatever.
by timcobb | 2025-12-14 18:57:26+00:00
> The main problem GraphQL tries to solve is overfetching.

this gets repeated over and over again, but if this your take on GraphQL you def shouldn't be using GraphQL, because overfetching is never such a big problem that would warrant using GraphQL.

In my mind, the main problem GraphQL tries to solve is the same "impedance mismatch" that ORMs try to solve. ORM's do this at the data level fetching level in the BE, while GraphQL does this in the client.

I also believe that using GraphQL without a compiler like Relay or some query/schema generation tooling is an anti-pattern. If you're not going to use a compiler/query generation tool, you probably won't get much out of GraphQL either.

In my opinion, GraphQL tooling never panned out enough to make GraphQL worthwhile. Hasura is very cool, but on the client side, there's not much going on... and now with AI programming you can just have your data layers generated bespoke for every application, so there's really no point to GraphQL anymore.
by verdverm | 2025-12-14 18:57:36+00:00
I have strong agreement here and would add reasoning about auth flow through nested resolvers is one of the biggest challenges because it adds so much mental overhead. The reason is that a resolver may be called through completely different contexts and you have to account for that

The complexity and time lost to thinking is just not worth it, especially once you ship your GarphQL app to production, you are locking down the request fields anyway (or you're keeping yourself open for more pain)

I even wrote a zero-dependency auth helpers package and that was not enough for me to keep at it

https://github.com/verdverm/graphql-autharoo

Like OP says, pretty much everything GraphQL can do, you can do better without GraphQL
by timschmidt | 2025-12-14 18:57:37+00:00
> This was for extracting email envelope metadata to build a graph of who was contacting whom, a program that Snowden's leaks showed had already been shut down.

"According to Victor Marchetti, a former special assistant to the deputy director of the Central Intelligence Agency (CIA), a limited hangout is "spy jargon for a favorite and frequently used gimmick of the clandestine professionals. When their veil of secrecy is shredded and they can no longer rely on a phony cover story to misinform the public, they resort to admitting—sometimes even volunteering—some of the truth while still managing to withhold the key and damaging facts in the case."

https://en.wikipedia.org/wiki/Limited_hangout

In fact, NSA's own slide deck, an excerpt of which can be viewed here: https://www.cnet.com/tech/services-and-software/fiber-optic-... indicate that all Google services including Gmail, Docs, Maps, and others were subject to interception.

Additional NSA slides here: https://www.cnet.com/tech/tech-industry/new-slides-reveal-gr... detail email, chat, video, voice, photos, stored data, VoIP, file transfers, video conferencing, notifications, social networking details, and the ever ominous "Special Requests".

> What do you think the approval rate for other court orders is? It's exactly the same.

"Two wrongs make a right" is considered "one of the most common fallacies in Western philosophy".

https://en.wikipedia.org/wiki/Two_wrongs_don%27t_make_a_righ...

> This reporting was at odds with what the leaked documents said and was later walked back.

The linked article: https://en.wikipedia.org/wiki/United_States_Foreign_Intellig... contains 96 references to reporting from 2004 to 2021 from a wide variety of sources. The word "retraction" does not appear once. Among the cited sources are many examples such as:

A former federal judge who served on a secret court overseeing the National Security Agency's secret surveillance programs said Tuesday the panel is independent but flawed because only the government's side is represented effectively in its deliberations.

"Anyone who has been a judge will tell you a judge needs to hear both sides of a case," said James Robertson, a former federal district judge based in Washington who served on the secret Foreign Intelligence Surveillance Act court for three years between 2002 and 2005.

https://web.archive.org/web/20130711211028/https://abcnews.g...
by ekjhgkejhgk | 2025-12-14 18:59:11+00:00
> copying all the self-defined independent thinkers

At this point I can no longer put effort into responding to you. You think that my conception of "thinking for myself" is "listening to people who claim they think for themselves, and repeat what they say"? You know the HN principle of "assume the most generous interpretation"? This is the opposite.

Anyway, FYI, you sound like you're trying to deradicalize an andrew tate fanboy. You're A) really bad at feigning your concern, and B) extremely off target.
by _DeadFred_ | 2025-12-14 18:59:19+00:00
My county is the size of Rhode Island and is covered in forest. We have huge wildfires all the time. We also established our own tax funded ambulance district and are willing to tax ourselves when needed even though we are a very Red area. We have volunteer firefighters, just like red state France (78% of their firefighters are volunteer), just like red state all their funding goes to the military Germany.
by lazide | 2025-12-14 18:59:24+00:00
Most of these things are emotionally driven. Education won’t do shit unless it’s coupled with some kind of training action. People will just laugh it off or accept it. Most people have literally come to accept their phone is listening to them for ads!

Either regulation, or it needs to get so shitty and painful that people get a reflexive avoidance thing going on.
by ProllyInfamous | 2025-12-14 18:59:40+00:00
Really neat project, see my sister comment (on analogue pagers still in service).

>I'd love to hear your thoughts on the IP-to-Phone-Number mapping logic (it's purely visual, but I'm really into it).

Personally, this seems like a really bad idea. The similarity to actual phone numbers might lead to confusion by non-technical high-trust contactors. Worse (e.g.) if the IP were 91.1x.x.x then this could lead to further confusion &/or erroneous 9-1-1 misdials (by inept contactors).

It's a UDP packet, ought it not be in IP-format?

>where you only want interruptions from a high-trust circle

I don't even have a phone contact number anymore. After you page me, I'll VoIP you back from an outbound-only.

But overall I LOVE that you have attempted this; only real problem for your average installer/recipient is that most home ISPs are firewalled (so a UDP7777 inbound isn't possible), but this obviously isn't for even your average technical installer.

----

Just leave me alone, world/SPAMmers!

How do you prevent malicious actors from invading your 7777UDPs?
by kccqzy | 2025-12-14 18:59:45+00:00
That's only the case for non-internet connected GPS units. Throwback to the early 2000s when my family car had such a unit, which, after having been turned on, would require ~15 minutes of waiting before it became functional. Funnily, I remember the mapping app would refuse to use the device clock and only use the time from GPS satellites. So at least you would know you need to wait if it didn't know the current time.
by JohnCClarke | 2025-12-14 19:00:01+00:00
I'm (genuinely) curious about the overwhelming preference for PostgreSQL on HN. I've always used MySQL for OLTP, and been very happy with it.

If you've seriously considered both and then selected PostgreSQL please comment and tell me what drove that decision.

Note: I'm only talking about OLTP. I do see that PostgreSQL adds a lot for OLAP.
by ProllyInfamous | 2025-12-14 19:00:44+00:00
With a prepaid annual subscription, they sent me a pager for FREE.

>builds simple, DIY kits for them

So I highly doubt this would be profitable for you.

----

As far as the paging infrastructure is concerned, all the messages are mass-sent, in an un-encrypted analogue broadcast. EVERY device receives EVERY page, as long as within range. It is the pager itself which chooses to only display "your" message(s).

Your DIY hardware could lead you into some interesting discoveries of your local area's messaging/users.
by catlikesshrimp | 2025-12-14 19:00:52+00:00
Cool to mention that the man from the article is of arab origin: Ahmed al Ahmed. Too bad they doxxed him, I suppose they just had to mention that fact, because some people will call "religious terrorist" every time there is some antisemitic massacre. (I am in no way saying neither xenophobia nor can be tolerated in any way)
by raw_anon_1111 | 2025-12-14 19:01:10+00:00
I am saying that we shouldn’t be okay with living in a country where people live in the middle of nowhere should have to do bake sales to make sure that their one fire truck remains up and running while John’s Creek can afford to pay their firefighters $80K a year and don’t have to do that

When we have state and federal government. Would you be okay with a volunteer police force?
by pdimitar | 2025-12-14 19:01:38+00:00
Don't forget you "no longer work well with others" if you start standing up to mediocrity that everyone else is either too stupid to notice, or too afraid to fight back against because they don't want to harm their career.

I am mostly starting to make my peace with all this and learning when is a good time to really fight (hint: almost never).

And I don't quite buy HN's group-think of "find a better job, duh". The market has been difficult in the last years and also the "better jobs" are nowhere nearly as accessible as privileged people believe.

Best way to handle things, I have found, is to dress the decisions in money and time. Position yourself as a realist who speaks numbers and if you are lucky -- meaning you don't get contested by other techies who simply want to shine in front of the boss -- then you will have at least the product people on your side.

All that being said, of course at one point you should leave. In no form of relationship, work, friends, intimate, should you let yourself be walked all over for a long time. Start fighting the good fight in the company... and start polishing your resume and go do interviews.
by otterley | 2025-12-14 19:01:57+00:00
Passphrases, when strong enough, are fine when they are not traversing a medium that can be observed by a third party. They're not recommended for authenticating a secure connection over a network, but they’re fine for unlocking a much longer secret that cannot be cracked via guessing, rainbow tables, or other well known means. Hell, most people unlock their phones with a 4 digit passcode, and their computers with a passphrase.
by maddmann | 2025-12-14 19:03:38+00:00
Are you arguing that the difficulty of producing a fully functioning poc is no different today than 2-3 years ago?!

Personally, I’ve been writing software for 10 years professionally. It is much easier, especially for someone with little coding experience, to create a quite complex and fully featured web app.

It makes sense that ai models are leveraging frameworks like next js/react/supabase, they are trained/tuned on a very clear stack that is more compatible with how models function. Of course those tools have high value regardless of ai. But ai has rapidly lowered the barrier to entry, and allows be to go much much farther, much faster.
by ekjhgkejhgk | 2025-12-14 19:03:43+00:00
I think that's a component of it. I think it's a sort of attitude that's encouraged by the culture there. There seems to be an attitude of "don't care if it's right or not, as long as it hurts the 'others' and makes me money". Believe it or not, this isn't a universal all around the world.

Unfortunately I don't think we even have words for this. For example, "militarized" which you used encompasses an enormous set of customs, values, abilities, etc. Is there a single word or couple of words that could be used to refer to what I described above?