skysight-inc/HackerNews huggingface dataset:
OpenAI doesn’t take security seriously.

I reported a vulnerability to them that allowed you to get IP addresses of their paying customers.

OpenAI responded “Not applicable” indicating they don’t think it was a serious issue.

The PoC was very easy to understand and simple to replicate.

Edit: I guess I might as well disclose it here since they don’t consider it an issue. They were/are(?) hot linking logo images of third-party plugins. When you open their plugin store it loads a couple dozen of them instantly. This allows those plugin developers (of which there are many) to track the IP addresses and possibly more of who made these requests. It’s straight forward to become a plugin developer and get included. IP tracking is invisible to the user and OpenAI. A simple fix is to proxy these images and/or cache them on the OpenAI server.
Look up how much it costs.

Few people have enough money to do it. That doesn't mean it's difficult.
Also, you can get this information very easily at any book about the field.

AI, by refusing known information, is just becoming stupid and unpractical.
Newsfeeds are really nice, I utilize them now 20 Years or so (RIP old Bloglines). But it's a bit sad that there is no really good newsreader for it. I also used to use Usenet in the 90s and early 2000, so my view on this is a bit different, maybe. But all the feedreaders I know are either very limited in abilities, or very cumbersome to use for more advanced features. It's really strange how there seem many technophile people are using and advocating for RSS, yet all the tools are more barebone and very simple.
Of course, but that doesn't negate OP's comment that it runs better emulated still.
One of my favorite video essay's on this is "Nintendo - Putting Play First" by Game Makers Toolkit [1]. It goes into when making a game, Nintendo first determines the mechanic they want to focus on; jumping, throwing a hat, shooting paint, etc and finding out how to make it fun, then building and iterating on the idea.

It's how they can keep putting out essentially the same games but are completely different.

1. https://youtu.be/2u6HTG8LuXQ
Generate CAD with AI
Early leaks said screen was LCD, hoping for them to be wrong
As someone who was there, I recall numerous projects instituted to reduce the number of steps it took to even install an app on the device. It was mind-numbing to see what they were trying to extract themselves from.
That would be an interesting use of the USB connector at the top --- plug into the Dock and use the Switch as a gamepad à la the Wii U while playing on the TV.
> When you say BYOK tool do you mean effectively a GUI front end on the API?

Less that, and more focused tools like e.g. Aider (OSS Cursor from before Cursor was a thing).

I use TypingMind almost exclusively for any and all LLM chatting, and I do maintain a bunch of Claude-optimized prompts that specifically exploit the "XML tags" feature (some of them I also run through the Anthropic's prompt improver) -- but I don't expect the generic frontends to care about vendor-specific prompting tricks by default. Here, my only complaint is that I don't have control over how it injects attachments, and inlined text attachments in particular are something Anthropic docs recommend demarking with XML tags, which TypingMind almost certainly doesn't do. I'd also love for the UI to recognize XML tags in output and perhaps offer some structuring or folding on the UI side, e.g. to auto-collapse specified tags, such as "<thinking>" or "<therapeuticAnalysis>" or whatever I told the LLM to use.

(Oh, and another thing: Anthropic recently introduced a better form of PDF upload, in which the Anthropic side handles simultaneously OCR-ing and imaging the PDF and feeding it to the model, to exploit its multimodal capabilities. TypingMind, as far as I can tell, still can't take advantage of it, despite it boiling down to an explicit if/else on the model vendor.)

No, I first and foremost mean the more focused tools, that generalize across LLMs. Taking Aider as an example, as far as I can tell, it doesn't have any special handling for Anthropic, meaning it doesn't use XML tags to mark up the repo map structure, or demarcate file content or code snippets it says, or to let the LLM demarcate diffs in reply, etc. It does its own model-agnostic thing, which means that using Claude 3.5 Sonnet, I lose out on model performance boost it's not taking advantage of.

I singled out Aider, but there's plenty of tools and plugins out there that utilize some common LLM portability libraries, and end up treating every LLM the same way. The LLM portability libraries however are not the place to solve it - by their nature, they target the lowest common denominator. Those specialized tools should be doing it IMO, and it's not even much work - it's a bunch of model-based if/elses. Might not look pretty, but it's not a maintenance burden.
The thing was all the faults with that iPhone was software. You can update software. Lack of copy & paste was a software feature that was no doubt in some product backlog for a while before getting picked up. And once it got picked up and shipped, suddenly every device people bought had that feature.

I don’t recall any of my older phones having software updates that had major new features. Any update would have been some esoteric bug fixes or something.

The idea that the phone was just another general purpose computer with an operating system that could be updated to a significantly changed interface was not a concept that existed in the mainstream at the time.

All the players before were hardware manufacturers who were deeply in bed with the carriers. Phones were locked with whatever software happened to be installed at the time. Each phone had very different software that was fixed and unchanging. The entire ecosystem was built around that and Apple came along and made that model obsolete.
Show HN: Using Claude MCPs to book flights
Well, everyone needs a hobby :)

Here's another one, different king, similar inscription: https://en.wikipedia.org/wiki/Spear_of_Fuchai - seems likely it should be read more as "caused this to be made".
Same, along with the Tron soundtrack from Daft Punk.
Compliance is a very binary thing in this matter. Either Apple complies, or they don't. It's the the EU'a job to fix the legislation, the legal system does not care about "not faithfully honoring the spirit/intent".
Show HN: Calculator for freelancers to figure out how much something will cost
Hi!

This is a mini-calculator for you if you are a freelancers or self-employed and can offset business related expenses from your taxes.

The basic question it aims to answer is: "How much less money can I pay myself in salary at the end of this month if I buy this particular thing", or asked in a different way: "What is this thing actually going to cost me"?

The calculation is incredibly simple, but I have recreated it in excel sheets often enough that I thought I'd be worth putting it online for myself and others to use.

Happy calculating!

For easy referencing – the URL is: https://the-price.probsteide.com.

Looking forward to hearing your thoughts and feedback!
The main social skill I seem to have taken away from K–12 is "man, I fuckin' hate normies"
We're announcing our first partnerships to scale biochar for CO2 removal
Got it. Then, for sure, the switch wasn't going to be for you.

I'm not a Nintendo die hard, but I played on my N64 a ton. Then spent some solid years on PC or xbox360. Now, with kids, the switch is my preferred console.
Important naming rule: Never call your version 2 "New Foo"!

Because the name will remain long after it was new. The naming scheme also crashes at version 3.

The New Glenn name is from 2016.
I doubt todays management would read a PowerPoint that dense.
Israel invaded Syria in 1967, stealing land, and they just pushed farther into Syria, stealing even more land. How is this growing smaller?
I’ll try it when out. Marketing videos are not a useful way to test something like DLSS which is easy to mask the issues with things like low bitrate, slow pans, avoiding problematic situations, etc.
We put sharp turns at the end of roads.

If you have a high-speed road merging into a slow one without some indication that it's ending and a sharp turn at the end, you have a road that kills people.
The Remarkable Life of Ibelin
Show HN: I made a tool to navigate your GitHub repo files
I built repofiles.com, a free tool for visualizing and navigating the file hierarchy of any public GitHub repository.

Repofiles makes it easy to get a 30k foot view of the structure of your repository while also giving you the ability to drill in on subdirectories or individual files. You can ALT-click on a circle to view the corresponding file on github.com.

Feedback is very much welcome.
I assume the doctor was just wrong. It happens. I imagine doctors get patients coming in saying "look, I have this extremely specific syndrome. I diagnosed myself based on the Wikipedia page" all the time. Usually those patients are wrong and it's something simpler, but sometimes they're right, and this time the doctor's simpler explanation was wrong. Never attribute to malice what can be easily explained by stupidity, etc.

Of course, I don't know the actual situation, but this seems more likely to me than a doctor who doesn't care about their patient's health enough to spend 10 seconds diagnosing them. At the very least, I expect they're investing enough effort in their job enough to avoid transparent malpractice.
Private AI model, pass.

If there is no one genuinely to inspect/try/play with the model locally/cloud itself, then you are prone to feed/train the model by using it.
Ironically, I also actually can't figure out what this company does from its website.
Denmark Opens Back Channel to Trump to Discuss Greenland
That depends. It works on setups where google still gives you the old html results but not one setups where it sends you to the js application. So on 3 out of 5 of my desktop setups it works. On the ones where, for some reason, google only sends me to the JS app, it doesn't work like you suggest, or, it does, but I'm just left looking at a blank page.
Great, but I would've been happier if I'd had some dead simple dependency tracking 10 years ago.
Just enough to create metabug functionality with. Like Bugzilla, Trac, Mantis etc have sported for at least two deades. I've always wondered why Github didn't have such basic functionality. (No, just the ability to reference other issues is not enough; I want to get an email for the metabug when all blocking issues are resolved).
When you “open original to view full content” and then use browser back to get to your page, the back history is removed and you can’t click back again to get to your main page. Makes it hard to navigate.
Love the site.
What Will Congestion Pricing Do to Manhattan Dining?
Or maybe it's precisely because one will just watch hot girls dance if given the opportunity, that one would not want a social media feed that caters to your most base desires.
2009 and earlier: Windows Mobile was based on WinCE. The UI was garbage but the innards were pretty functional, and there was desktop-like multitasking. Unpopular opinion: they should have just done a UI refresh of that thing and moved it to an NT kernel. There were a lot of cool third party hacks on this platform.

2010: Windows Phone 7 was still WinCE, but they removed full access to WinCE APIs, and got rid of PC style multitasking. They had a new UI framework for first party apps. Then for third party apps they had a port of Silverlight that imitated the new UI style. The latter had really terrible performance.

They had to base this release on WinCE because the NT kernel port to ARM wasn't ready yet. Blocking access to "good" APIs could be seen as a way to ensure app compatibility for the next release.

2012: Windows Phone 8 had the NT kernel. Also, windows 8 and windows RT shipped. But the silverlight-inspired UI framework of Windows 8 was different from the Silverlight fork from Phone 7. So you had yet another UI framework rewrite to cope with.
RTS and 4x could be way better with the use of a mouse.
Cross-platform mobile development deep-dive
Good point but money has diminishing marginal utility so I wouldn’t be surprised if Bezos sees it that way.
I'm a big fan of miniflux, although I'm still looking for a mobile client that ticks all my boxes
It's true that in principle, you need a stronger rocket (the whole rocket, not just the motor) and a bunch of extra infrastructure to be able to reuse.

However, without being able to recover a rocket, it's actually quite difficult to figure out just how much corners you can cut, while remaining reliable. Since blowing up revenue payload is an awful way to optimize this, I think this means that disposal rockets will be inefficient in a different way - there will be excess safety margin in the wrong areas.

Reliable re-use also changes the operating model of the company. Since each rocket in stock represents many customers over time, you don't need to be nearly as stressed about exactly matching your manufacturing pipeline to predicted demand. This likely also enables generally faster turn around time (as in from cheque signed to launch).

Finally, as it turns out, it's not unreasonable to expect a rocket to be reused like 20+ times. I think you're point would be reasonable if it turned out that reusing a rocket more than ~3-5 times was difficult. But like... it's REALLY hard to do disposal anything better than something that can be reused 20+ times.
Penn Station Can Handle the Load: New York Is Ready for Through-Running
Even just the pricing component would be lovely — I'm so tired of the "call us to discuss license cost" for anything larger than "absurdly tiny". You don't need to make it penny-accurate, even: I just need a sense of scale. If your product costs something wildly outside my budget, wouldn't you rather save your time to talk with people that can actually afford what you're selling?

(I can hear the salespeople warming up in the silos already and no: if I don't have $36 million right now, absolutely nothing you say will make it possible to "find those dollars somewhere".)
I see what you're saying in the sense of passive energy collection, but perpetual motion strikes me as a terrible metaphor. Perpetual motion would imply so many thing about the universe that solar can't deliver.
> No, put up a loginwall or paywall, authenticate users, and go private.

We know for a fact that AI companies don't respect that, if they want data that's behind a paywall then they'll jump through hoops to take it anyway.

https://www.theguardian.com/technology/2025/jan/10/mark-zuck...

If they don't have to abide by "norms" then we don't have to for their sake. Fuck 'em.
Sure, https://developer.mozilla.org/en-US/docs/Web/HTML/Element has a list of off the shelf elements and what they're for. If you're building a form, you can find the relevant bits under "Forms". In this case, they needed 2 pieces of short text, so they would use 2 text inputs, 2 labels, and a submit button. The lotid could've been in the URL so they could display the name on the page and the user wouldn't need to enter it if they used a QR code to navigate to the page.

If they're feeling particularly adventurous, they could spend another hundred bytes on the Luhn algorithm in javascript to validate one of the two inputs. Or they could do it only on the server. It doesn't make much difference.
I believe the intention here was to highlight a use case where cosine similarity falls short, leading into the next section that introduces alternatives. That said, I would appreciate more detail in the 'Extracting the right features' section, if someone has an example I would love to see it.
thanks for the reminder of one of my all time favorite games!
You mean legally mandating all electronics stores to stock computers with Linux installed regardless if there is demand for that or not? Because how else exactly could this work?
>Everything nowadays comes packaged with excessive emote track.

You may have never done anything that warrants an emotional response.

Some of us have.

We enjoy seeing others express the joy we ourselves have felt at the end of a long, winding, process.
Hashicorp has some Nomad drivers for Qemu and a beta version that uses libvirt.
However it's fairly immature and lacks a lot of features they would need to be competitive there.

Since IBM already has OpenShift I'm not sure how much time and effort they want to put into Nomad virtualization, but I'd love it as an alternative to Kubernetes.
>Most salespeople when you're on the phone with them do not care about you as a customer. They care about making their quota and/or getting their commission.

This is my experience too, along with sunk cost. It's one thing to look at a few service and compare pricing and product, it's a whole different thing to book 5 different calls with 5 different companies before you can even begin to decide what to do, it gets extra bad when you have questions they can't answer, so you book an additional call in which you are informed that some important feature is out of the question and tadaa, you just wasted a whole lot of time for a bunch of people with nothing to show for it.

Anecdotally, I find engineers are way more prone to omitting the video feed and to lean on emails as response mechanism. I guess there's also a "people's person" vs "things person" thing going on.
South Hunterdon School District.
UofTCTF 2025: An AES Timing Side-Channel
I don't think a majority of people will even go to alternative storefronts to get the software in big enough numbers to matter. I think it's more of a legal concern than a monetary (sales) one, but I could be wrong.
Second prize is a set of steak knives. Third prize is you're fired.
Yes. Give people the ownership of their job. Kaizen comes to mind.

What we have today are MBA's that tweak spreadsheets and see employees as replaceable cogs in a machine. No one cares in that environment.
> The system may or may not be complex but the data is has to store and transform is not. Because it handles drivers licenses. A function that has been done on pen and paper and filing cabinets.

It handles more than just driving licenses... The DVLA do more than just driving licenses.

> Since you imply you know more about UK budgets than I do - how much is the DVLA budgeted for IT operations like this and how much more would you give them to expect this problem solved?

It's not budgeted anything for this as far as I know. I believe it's handled by Government Digital Services which handles lots of the digital services for various departments. The budget for all of GDS is about 90 million most of which isn't for .gov.uk. A rewrite of that size I would expect to cost about 50-60 million in total but take several years.
Thank you! I went through multiple iterations of designing the visuals, wanted to keep it very clean and "texty", but not overly brutalist at the same time.
Give me a single actionable item that will enable me to fix the values of anyone else and I will move the world.

"Fix the values, fix the world" should go on the wiki page of examples of things that are easier to say than to do
I get where you are coming from with this, but in my opinion being able to give feedback in a clear and concise fashion is a skill that people should have. LLMs will help you elaborate but they will also add their own flair by choosing the actual work. You can think "wow that's actually what a better person of me would have written" but you are biasing yourself based on what the LLM understood of your prompt focusing on form over substance.

But as the other comments mention it might just all be bullshit anyway.
Strongly agreed. When I think of the best Nintendo products the words “fun” and “play” spring to mind.

AAA gaming on the other hand, either resembles sports, shallow short-form media, or Oscar-bait melodrama. Very little fun to be had.

What ever happened to fun and play?
Data has been released since this was published:

"Congestion pricing 1st-week data shows 7.5% fewer vehicles in zone and faster travel, MTA says"

https://abc7ny.com/post/nyc-congestion-pricing-data-week-sho...
You're just making up numbers to fit the conclusion. For example, the only alternative is either a 5G or 100M file. But in reality, just like you have many tabs in a browser, each eating their 100M away, you'll be opening multiple log files. So those cool sounding "several gigs" is actually very constrained, for example: 3G is "several gigs", but on Windows you will be almost always memory-constrained with a few browsers running (web, chat, etc) and you won't have much to open a few of those 100M log files
The title on the website says "licensing & distribution", the paragraph under that repeats it and the code example shows some software trying to authorize a serial key to see if it's valid or not.

I'm not sure how they could make it clearer? Maybe I'm in some sort of licensing-bubble, yet I haven't actually done any of those things myself, just seemed crystal-clear what it is from spending 30 seconds on the top of their website.
> Then government hired more people to keep doing the same job.

Do they? The example given in the article is the DMV, and the only problem I've ever had at a DMV was long wait times caused by too FEW employees.

Yes, government can be overly bureaucratic, but I think people come up with a lot of weird narratives about it that go well beyond the actual inefficiencies at play.
I was also at Nokia during this time and recall OPK (Olli-Pekka Kallasvuo), during a visit to the Beijing office, giving a talk where he talked about the difficulties of pushing new things through the organization.

More specifically, he said that even he would push for investment and innovation in one area, but that as the decision made its way through the org, it became something else. It was an odd moment to see a CEO say something like this, and was a clear indicator to me that we didn't have what was necessary to really pivot the way we needed.
China's Bad, No Good Trillion-Dollar Trade Surplus
I apologize, I tried to find the interview were this was stated but unfortunately search engines are terrible now and no matter how hard I try I only get news about the Switch 2 or old stories about when the Wii has code named Revolution. Feel free to not take my word that this was actually stated.
People blame Stephen Elop. But the person in control of the Nokia board was former CEO Jorma Ollila who headed Nokia through its glory days and had a lot of power. Nothing happened in Nokia without his approval during that period.

The board recruited and invited Stephen Elop. Part of his appointment was the board handing over the company on a silver platter to the new CEO. Negotiations for the acquisition started almost right away in secret. And most likely there were high level discussions ongoing with Microsoft and Steve Ballmer before Elop's appointment.

Jorma Ollila retired as a CEO around 2006; he wasn't really pushed out and Nokia was still performing well. He handed the keys to the company to a non technical CEO with a financial background (Olli-Pekka Kallasvuo, aka, OPK internally). That was the first mistake. OPK was a bit hands off throughout the Iphone and Android rollout. There was no vision, no leadership, just a lot of infighting between heads of various units.

The second mistake was selling out to Microsoft and all the share value implosion that came with that. Microsoft bought several companies over the years. Nokia was one of the smaller ones. That's how bad it had gotten. At the peak Nokia was worth 150 billion or so. MS bought the phone unit for 5 billion. The later Linkedin and Github acquisitions were worth more.

By the time Stephen Elop was brought in (by the board, headed by Ollila) to fix things, it was too late. There were a lot of internal battles as well between the big business units. A whole string of CTOs with no power whatsoever that were appointed and let go. Including Scott McNealy who never really made any impact and was there only briefly.