skysight-inc/HackerNews huggingface dataset:
I think I interpret the phrase "don't roll your own crypto" as expanding out to something like "don't roll your own crypto unless you're willing and able to prioritize solving any vulnerabilities that people report to you". Someone who is porting a well-regarded cryptography codebase by carefully going through all of the relevant code and matching all of its intentional behavior has a credible claim they're part of the exception.

People who have put in the time to learn the common failure modes of cryptography attempts and how to solve them could make the claim they're in the exception to some degree. Someone who can't imagine how they would begin evaluating a report about something like "ciphertext malleability" shouldn't.
Awesome. A real life Library of Babel: https://libraryofbabel.info/

Out of all the VR vapourware, a real life infinite library or infinite museum is the one thing that could conceivably get me dropping cash.
Proving your point, but: What is fixation?
That is the biggest problem on this website, people want to feel smart by 'debunking' things they don't really understand. It leads to a lot of contrarian views with poor signal to noise ratio, especially when the topic is slightly outside of average user experience (midwit programming)
Maybe Linus will get sick of the state of LLM’s and create one himself to lead kernel development…
"How many entities do _you all_ spy for, on average?"
Having embedded MRI into a variety of side projects over the years, I can confirm your evaluation of Ruby's method lookup procedure is accurate, at least in the context of that legacy, reference implementation of the language. I also agree that Ruby's design is deeply underappreciated.
somethign like this I think. i only dabble in zig/systems stuff so there might be better/more idiomatic ways to write parts

const std = @import("std");

// base struct
const Animal = struct {
// points to the derived struct
ctx: *anyopaque,
// points to the vtable of the concrete type
vtable: *const VTable,

// the vtable interface derived struct must implement
const VTable = struct {
make_noise: *const fn (ctx: *anyopaque, loudness: u32) anyerror!void,
};

// call the derived struct's implementation
pub fn make_noise(animal: Animal, loudness: u32) anyerror!void {
return animal.vtable.make_noise(animal.ctx, loudness);
}
};

const Dog = struct {
// extra data
weight: u32,

// implement the interface
const vtable = Animal.VTable{
.make_noise = &make_noise,
};

pub fn make_noise(ctx: *anyopaque, loudness: u32) anyerror!void {
const dog: *Dog = @alignCast(@ptrCast(ctx));
std.debug.print("woof {} {}\n", .{ dog.weight, loudness });
}

// helper to convert to the base struct
pub fn _animal(self: *Dog) Animal {
return Animal{
.ctx = @ptrCast(self),
.vtable = &vtable,
};
}
};

const Cat = struct {
weight: u32,

const vtable = Animal.VTable{
.make_noise = &make_noise,
};

pub fn _animal(self: *Cat) Animal {
return Animal{
.ctx = @ptrCast(self),
.vtable = &vtable,
};
}

pub fn make_noise(ctx: *anyopaque, loudness: u32) anyerror!void {
const cat: *Cat = @alignCast(@ptrCast(ctx));
std.debug.print("meow {} {}\n", .{ cat.weight, loudness });
}
};

pub fn main() !void {
var gpa = std.heap.GeneralPurposeAllocator(.{}){};
const alloc = gpa.allocator();

// list of base structs
var animal_list = std.ArrayList(Animal).init(alloc);
defer {
for (animal_list.items) |animal| {
if (animal.vtable == &Dog.vtable) {
const dog: *Dog = @alignCast(@ptrCast(animal.ctx));
alloc.destroy(dog);
} else if (animal.vtable == &Cat.vtable) {
const cat: *Cat = @alignCast(@ptrCast(animal.ctx));
alloc.destroy(cat);
}
}
animal_list.deinit();
}

for (0..20) |i| {
if (i % 2 == 0) {
var dog = try alloc.create(Dog);
dog.* = Dog{ .weight = @intCast(i) };
try animal_list.append(dog._animal());
} else {
var cat = try alloc.create(Cat);
cat.* = Cat{ .weight = @intCast(i) };
try animal_list.append(cat._animal());
}
}

// meows and woofs here
for (animal_list.items) |animal| {
try animal.make_noise(10);
}
}

ive written a couple and still find them mindbendy
> appreciate the exceptional build quality of my MacBook Air

Wait until your battery dies.
If you want to signal what to be called you can write Mr or Ms instead in the signature.
It's funny because as I read the article, one thought was "the slop results look like they came from very old models"

Use a model released this week and the results are (to my untrained eye) no longer distinguishable from a human artist: https://imgur.com/a/tgEsXq8

And it wasn't some pro image prompting magic. Even compared to 12 months ago, the text encoders have very good. I was able to use wording that came to me naturally and get an aesthetically pleasing result in seconds.
Mostly, here in 2025 the question is: "Why are you using shared secrets?" - which is why this discussion comes up. These are never about a PAKE or the PIN for a Yubikey or something, it's always shared secrets when people say "passwords".

This is a terrible stopgap solution, in 1975 it's reasonable to say we have other priorities right now, we'll get to that later. But it's very silly that in 2025 you're telling people to try PBKDF2 when really they shouldn't even be in this mess in the first place.

Remember when Unix login still hadn't solved this? 1995. That was last century. And yet, here we are, still people are writing "Password" prompts and thinking they're doing a good job.
In France in 1851, a new law limited child labour to 10 hours per day between 8 and 14 years old. Then max 12hrs until 16 (Then you are conscripted at 18).
He's running quantized Q4 671b. However, MoE doesn't need cluster networking so you could probably run the full thing on two of them unquantized. Maybe the router could be all resident in GPU RAM instead of in contrast offloading a larger percentage of everything there, or is that already how it is set up in his gpu offload config?
England basically destroyed the Luftwaffe and the Soviets took care of most of the Germans during the attempted invasion of Russia. So yeah, I think they did more than their fare share. Are you saying they didn’t ?
what the hell is this? it looks sick
As they say in the Netherlands: Sunday is my fun day.

Something astonishing happened in 1994: the first time a government coalition was installed that excluded any Christian party. Capitalism prevailed.
As someone living here as well, kind of agree.

Additionally right extreme movements take advantage of this, by being the main parties helping to take care of rural areas, improving school infrastructures and such, getting people to vote on those that show up, an old trick already used last century.
It’s sometimes not now, but likely will be the case quite soon.

I invite everyone to have an open mind about this, as it seems that the part of my comment that said “what if” wasn’t fully absorbed.
Biden violated the law to forgive billions of dollars in student loans for his voters, and we are supposed to be upset about some 30 day notice requirement?
Running DeepSeek R1 on Your Own (cheap) Hardware – The fast and easy way
Set up a local AI with DeepSeek R1 on a dedicated Linux machine using Ollama—no cloud, no subscriptions, just raw AI power at your fingertips.
The Erev Rav...
Retaining those 2-10x engineers because they can’t even imagine leaving your company gives you far higher productivity gains than 1 extra work day a week.
They certainly aren't, and if there is something Switzerland is known for, are high costs, red tape and regulations.
Nice and kudos for your efforts.

For convincing people it never being monetized this is not enough.

You'll need

1. A copyleft license (to prevent the Redis case)

2. No CLA (to prevent unilateral relicensing)

3. A large enough and diverse enough set of contributors that makes relicensing unpractical enough for user to believe it will never happen
I appreciate both of these comments, thank you both.
It'll probably be more relevant when you can actually buy the things.

It's just vaporware until then.
> Those are photo editing tools. For design/content creation Krita is the best tool for raster images by far...

How would you make a case backing this up?
I don't think anyone considers Insta, TT, or YT the pinnacle of what's possible creatively.

As for AI gen - AI is making zero art on its own. It's all AI-assisted, whether that means a one word prompt or hours of editing.

I can imagine AI being better than humans at art of all kinds, as and when it gets a theory of mind. Whether that's a good thing or a bad one depends on how that's used. If it's designed entirely for addiction, that's a bad thing.

But we already have that.

More interestingly, I think AI has the potential to be better by breaking out of that loop.
So does that mean you are on your 8th booster by now? If you believe in vaccines for CoVID19 there is no reason to not keep getting shots.
which is rarer rtx 5090 or sha1 collision?
Which drug? Who's the professor? Can you share the summary please?
it would make sense if you don't want somebody else to have access to all your code and customer data.
probably because nvidia digits is just a concept rn
That's not how you're supposed to write a "falsehoods programmers believe about X" article.

The articles that started this genre are about oversimplifications that make your program worse because real people will not fit into your neat little boxes and their user experience with degrade if you assume they do. It's about developers assuming "Oh, everyone has a X" and then someone who doesn't have a X tries to use their program and get stuck for no reason.

Writing a bunch of trivia about how null pointers work in theory which will almost never matter in practice (just assume that dereferencing them is always UB and you'll be fine) isn't in the spirit of the "falsehoods" genre, especially if every bit of trivia needs a full paragraph to explain it.
I use a similar homegrown system. This approach has unlocked a lot of great thinking for me. I hope it catches on.

fwiw yapthread.com is another product offering in this space.
I thought there was no vaccine for Herpes Simplex.
On the other hand we could have much higher numbers of wind powered electricity if folks didn't spent their time doing lawsuits to prevent them being built.
In my so far very limited experience, Zig is very intentionally verbose at almost every opportunity. This isn't what some people want in a language, and I get that. But because they're SO consistent about it, Zig does end up with this effect of almost "no news is good news." Like, when something seems straight-forward it's because it literally is—if they could've been more verbose about it they would've been. So you can sorta trust that, even to the point of absence of verbosity being meaningful data point.
Typical comm FDE, right down to the stint at Airbus. He’s fully internalized Shyam’s why do we even need devs attitude, not realizing it’s only one side of a dialectic. Hint: there’s a reason he isn’t CEO.
Is the size of OpenAI‘s top of the line models even relevant? Last I checked they weren’t open source in the slightest.
I think it would be more interesting doing this with smaller models (33b-70b) and see if you could get 5-10 tokens/sec on a budget. I've desperately wanted something locally thats around the same level of 4o, but I'm not in a hurry to spend $3k on an overpriced GPU or $2k on this
and indeed the all causes dementia rate in the study does not go to zero among the vaccinated
> how is this going to impact the wider economy? The UK is in a tough spot. Partially self-inflicted

Well, take example from France, if you ever do. In 1936, the glorious Leon Blum signed the first national paid leave of the world (Congés Payés). We have literal photos of us going to the beach by train in 1936.

Meanwhile the Germans were working in factories for countless hours building bombs. Congés Payés cost us an alarming defeat. What a chance we were at the beach before those hard times.

(I confirm this comment is a tribute to all the English and US youths who had to save us from our sins).
Yes of course they’ve been told this. But that is delusional since there has been no left-wing coup in the United States government.
Always be suspicious of any acronym with a ‘K’ in it, just on general principle.
The Linux Foundation on global regulations and sanctions
Since 2003, my companies have always been structured to support a 5-day, 30-hour workweek, and most employees follow this model. I was fortunate to implement this approach long before it became a widely discussed topic. The reasoning was straightforward: many employees were also studying, and the complexity, and intense focus of our work, such as reverse engineering, made adding two extra artificial hours unnecessary. However, shifting to a four-day workweek would be challenging in our context due to synchronization issues.

That said, some employees do work full-time, particularly those in operations and other roles that require broader availability to communicate with external parties. There are also situations where someone needs to stay longer to complete a critical task, these exceptions are inevitable, but having clear guidelines helps ensure they remain just that: exceptions.

A related challenge, as highlighted by @rsavage, is the use of social media during work hours, especially in a remote setting. It’s difficult, if not impossible, to fully control, but what matters is cultivating a company culture that balances flexibility with accountability. The key is staying aware and making adjustments before things get out of hand.
Want to second the antiviral. I have a much lower prescription (200mg once a day of the older generic Acyclovir), but I've been using it prophylactically for over twenty years. Each new GP responds with horror, but it reduces my outbreaks from once or twice a month to perhaps three times a year (stress dependent). Given the fact that the more outbreaks you have, the more you will have - everyone with HSV-1 should be on this or similar medication.
In addition to that, it has a section dedicated all to Model Naming and Branding Confusion, but then it puts the following comment in the Performancce and Benchmarking section, even though the value of the comment is ostensibly more to do with the naming being a hindrance rather than make a valuable remark on the benchmarking, which is more of a casualty to the naming confusion:

"The model naming all around is so confusing. Very difficult to tell what breakthrough innovations occurred." – patrickhogan1"
What went into training DeepSeek-R1?
After o3 was announced, with the numbers suggesting it was a major breakthrough, I have to say I’m absolutely not impressed with this version.

I think o1 works significantly better, and that makes me think the timing is more than just a coincidence.

Last week Nvidia lost 600 billion because of DeepSeek R1, and now OpenAI comes out with a new release which feels like it has nothing to do with the promises that were being made about o3.
And it was deliberately created - based on the concept of the "IBM way", staffed by (mostly) men who dressed a certain way and had certain attitudes, which distilled the essence of conformist corporate America.

There was even a company song book.

https://arstechnica.com/information-technology/2014/08/tripp...
"Blame" isn't the most productive way to frame the conversation, but as GP mentioned, there aren't many resources for developers to learn about cryptography. We're in desperate need of comprehensive resources that can (at a minimum) help us answer:

1. Has this problem been solved using a proven cryptographic protocol? Which guarantees does this protocol offer? What are all the important considerations?

2. What's the next closest thing?

3. Can we safely modify the protocol in any way to accommodate our use case, and what are some common pitfalls?

Some people will ignore all that advice and do dumb things anyway, but if we want systems to be more secure, it's on cryptographers to make cryptography more approachable and on developers to actually listen when they do.
These kinds of shows remind me a lot of The Prisoner (Patrick McGoohan - I am not a number!) which was very much ahead of its time.
Or even conversations presented entirely hex. Not only could that have occurred naturally in the wild (pre-2012 Internet shenanigans could get pretty goofy), it would be an elementary task to represent a portion of the training corpus in various encodings.
It is relevant again, because one would like to know whether DOGE will install this in the US government.

As for the article, I find it hard to understand what Palantir is actually doing. The article uses Airbus as an example, which ordered some kind of a software system for coordinating manufacturing. The article claims:

"This ended up helping to drive the A350 manufacturing surge and successfully 4x’ing the pace of manufacturing while keeping Airbus’s high standards of quality."

I find this extremely hard to believe. The A350 isn't the first aircraft that Airbus has built.

I'm also skeptical on European reliance on deep state related companies. It is enough that Airbus already uses Google for mail handling (industrial espionage?). Given that the US is now officially a potential EU enemy with territorial aspirations in Greenland, these things have to stop for our national security.
I've been running the unsloth 200GB dynamic quantisation with 8k context on my 64GB Ryzen 7 5800G. CPU and iGPU utilization were super low, because it basically has to read the entire model from disk. (Looks like it needs ~40GB of actual memory that it cannot easily mmap from disk) With a Samsung 970 Evo Plus that gave me 2.5GB/s read speed.
That came out at 0.15 tps Not bad for completely underspecced hardware.

Given the model has only so few active parameters per token (~40B), it is likely that just being able to hold it in memory absolve the largest bottleneck.
I guess with a single consumer PCIe4.0x16 graphics card you could get at most 1tps just because of the PCIe transfer speed? Maybe CPU processing can be faster simply because DDR transfer is faster than transfer to the graphics card.
That works if your key is long as heck, or the message is short as heck. Still, a useful way to quietly entertain (some) kids for a little while.
Your tool recommendations are actively harmful and dangerous in places.

You whole-heartedly recommend sigstore, a trusted-third-party system which plainly trusts the auth flows of the likes of Google or Github. It is basically a signature by OpenID-Login. This is no better than just viewing everything from github.com/someuser as trusted. The danger of key theft is replaced by the far higher danger of account theft, password loss and the usual numerous auth-flow problems with OpenID.

Why should I take those recommendations seriously?
> I'm not sure why you think most US citizens aren't happy about the federal government getting smaller.

The level of federal employees has been stable for ~30 years, even with a growing population and arguable more complex world:

* https://fred.stlouisfed.org/series/CES9091000001

It can also be argued that more bureaucracy is actually needed:

* https://www.noahpinion.blog/p/america-needs-a-bigger-better-...

Programs still need to be implemented, laws and regulations need to be enforced: if there is no in-house manpower or expertise then outside consultants will be hired. Do you think those will be more or less expensive?

And if you thought that the FAA's oversight of (e.g.) Boeing was weak at current staffing levels, wait until the cuts come.
There is also https://httpie.io
Andres Obrador was president for 6 years and a big enemy of the cartels. He just went about it a different way. Which makes sense because clearly the "war on drugs" isn't working. Not in the US and not anywhere else. By making it riskier you're increasing the profit margins and corruption.

And the Canadian quotas were ruled fair.
This and also when you newly join a team it is more productive to start using the tooling what they are using and move to preferred tooling once familiar with the API endpoints.
Be interesting if there is a rad hard watchdog. Maybe you could end up having standard off the self parts and then use a reliable watchdog to intervene as needed.

Especially if such watchdog has the ability to switch to a secondary or third backup...

edit: Shoutout to wildzzz for pointing out ISL706ARH
Active Rad-Hard, 5.0V/3.3V µ-Processor Supervisory Circuits
3x the price for less than 2x the speed increase. I don't think the price justifies the upgrade.
The Manhattan Project Was Secret. Should America's AI Work Be Too?
AI dances around actually feasible information when using this prompt.
Did they even think about what happens when they get to o4? We’re going to have GPT-4o and o4
> Masks

Certainly not all kind of masks. And most people don't have access to the high quality masks needed as you surely know.

> that DOES NOT mean that PPE is 100% effective, it means that PPE in plus my hyper-anal stance on hygiene PLUS good old fashioned random chance favored me.

You have no way to know. I know folks who never tested positive to COVID while their whole family living with them got it several times.
Its the 25th anniversary of this volunteer organized event. Potentially Europe's largest open source festival. I feel so darn privileged to attend it in person on the ULB campus.

For those who are curious about what powers streaming from FOSDEM, here are some docs on those [FOSDEM boxes](https://github.com/FOSDEM/video-hardware)
I agree with the first part, but I disagree with the conjecture. There are also people who enjoy writing comments, and inasmuch they have to read a bit of context (at least the comment they are replying to). Those will always exits.
On my iPad (iPadOS 18.3) there is no "Apple Intelligence" under Settings, only Siri. Maybe since I never enabled Siri (afaik)?
Show HN: Who is hiring jobs using GPT-4/embedding models for relevant jobs
My takes are

Unlike crummy barely more than a macro assembler compilers of yore. A modern compiler will optimize away a lot of null pointer checks.

Superscalar processors can chew gum and walk at the same time while juggling and hula hooping. That is if they also don't decide the null check isn't meaningful and toss it away. And yeah checking for null is a trivial operation they'll do while busy with other things.

And the performance of random glue code running on a single core isn't where any of the wins are when it comes to speed and hasn't been for 15 years.
Having worked on Disney Animation productions, you ought to meet these life long fanatics that actually manage to become Disney animators - their ultimate fantasy is realized, and then after a year or three the glow has dimmed, their figurines decorating their office acquire dust, and they become nonanimated, heads down, and just work, without the glow anymore. Disney corporate is rough.
That is true for articles as well though, I find comments typically have better info than the articles. It is more likely for some of the comments to have been written by real experts than that the article is.
F# is indeed pretty good. C# should be but they're allergic to making things beautiful.
you need to expend resources (e.g. "proof of work") to post, to drive away low effort spam. https://stacker.news/ is an interesting experiment in that regard.
Why does there seem to be so little interest/concern about this on Hacker News? I get that political discussions are generally discouraged here but these developments seem very big and I don't know which other groups of people can fully understand the implications of these actions.