skysight-inc/HackerNews huggingface dataset:
Most of the classes just make sense. Like px-4 or color-whatever or grid, flex etc.

For the rest there is a plugin that provides intellisense. Granted, some things could have been better - especially text style selector (if i could visually see the preview of the test and font-size).

And I don't have to jump between css and component files.

But, do you prefer potato or potato?
Explores accelerationism
Makes me think of the Paris pneumatic post system

https://en.m.wikipedia.org/wiki/Paris_pneumatic_post
Ask HN: How to Improve LLM-Based PR Reviews for Deeper Code Analysis?
I am attempting to automate the PR review process using locally running LLMs. I provide the LLM with the diff and the full file for context. However, the response usually consists of code explanations and general suggestions (e.g., logging, security) rather than an in-depth review covering complexity, alternative logic, or better approaches. Could this be an issue with the prompt? Additionally, would using RAG to index the entire codebase help ensure the review considers the complete context? Or is there a better approach? Here is the prompt I am using: https://gist.github.com/alwin-augustin-dev/a6448f53a7577e8e1614bee361aacec0
Unfortunately, all of these are not self-hostable. I wish there was something like Nextcloud for Markdown Collaboration.
I didn't say it was sensible policy. But yes.

It's the same reason Australia and now South Africa demand payment from Meta and Google for revenues related to links going to local news sites and the like.
I want it human readable so I'm not presented with QR codes when I'm in meatspace. I'd rather see a pixel-font that say MENU://JOES-CHICKEN when I want to look up the menu at my local chicken restaurant than look at a QR.
Here's a good article about different methods for accessing and storing secrets in JavaScript: https://thenewstack.io/best-practices-for-storing-access-tok...

It's important to keep in mind that any secrets are the end users' secrets and not your secrets. Don't ever send your private keys to end users. You'll need to either act as a middle man between the end user and any third party, or have the third party generate user-specific tokens that only grant access to resources you have specifically allocated to that user.

If you can give some details of what the page will be doing, I may be able to help you with the general architecture of the data flow.
The American obsession with being allowed to lie and claim it has the same worth as the truth is insane.
Except you really don't need to do that. Your risk assessment could explain it's read only, you've done some basic searches, and that's proportionate given the content and the fact you're a small website. Job done.
Yes! People love Deepseek-Chat / R1 and the new Qwen versions. It works with ChatOllama. However, Llama itself does not work very well with our tool calling and is often confused by the structured output format.
> Knowing the exact column names can speed up an attack and, in some cases, make it more feasible.

If I'm looking at a database, I like knowing column names, but I like knowing table names more.
How Have Cults Shaped American History?
This is my go-to alternative to read HN. The half-life for front page entries is also longer, which lets you catch up with more ease.
The problem with WASM is that it can not manipulate the DOM. Why? I don't know.

I really like Blazor but since it has to rely on Javascript hooks to work with the DOM it kind of make it slower when compared to a JS framework.
The final phase is going to be 2000 people, which is small even for a town, or even for a midsize real estate project inside a city. Calling it a city just feels ridicolous.
The difference is that every time someone buy one of his car it increases his wealth. And his wealth is what enable him to do what he is doing. There is a direct link even if people want to bury their head in the sand.
Will likely be bought by Amazon. Looks like a good fit for their warehouse work "culture".
Why should Javascript have monopoly on manipulating the DOM? It makes no sense to me.
France sets new Guinness world record of cheese fondue of 2,117.5 kilograms
You need to understand how the gpu architecture works on a abstract level. Try to understand the SIMT (Single Instruction Multiple Threads) principle.
Doing some shader programming or writing a cuda kernel could be a nice exercise.
In a nutshell, if you want to add two vectors with hundred elements, instead of looping from 0 to 99 you would call a function called "kernel" (or "shader" in graphics programming) 100 times and pass it different indices.

Then research how it is realized on the hardware with "warp"s or "wavefront"s (on AMD i think). How the cache works is also very important here. Sadly the information on the internet is relatively sparse here.
These people are delusional and have no real life so it is safe to ignore them.
You cannot just compile MS Excel to WASM, because it is a legacy enterprise monstrosity.
What do you think is the main problem it solves there?

The cool thing is that we can extract xPaths from the agent runs and re-run these scripts deterministically. I think that's a big advantage over pure vision-based systems like Operator.
I'm sorry, are you accusing the UK police of killing more innocent old people than the US police? Because if so that's a funny joke.
>For some reason not liking Javascript and wanting to use something else is offensive to a lot of people.

For some people it's offensive even if you try to use some other language to write desktop and mobile apps.
I wish. If you live in any country that uses more than ASCII, then certainly not since forever. I mean, just for my language there were 7 different encodings (according to Wikipedia, possibly more) before Unicode era. When you want to read these it's solvable problem, but still it is extra work to deal with it. Now that we have UTF-8 as de-facto standard, it is much better, but there are still problems. Like when you use Japanese and it gets displayed as Chinese (same characters are different glyphs depending on language).
One agentic coding workflow to rule them all
I'm sure she had massively strong views on the online safety act and encryption
The underground are not tunnels but excavated with the road built on top, it's far cheapers than tunnels.
Something I've always disliked about "Dewey" and now "Johnny" decimal is that they intentionally put a human name on the system. I'm not sure who it helps, confusing a system for a human, but it certainly isn't the user.

Also this doesn't work faster than search, I would be open to evidence to the contrary, but obviously none will be provided cause it's simply false. By the time search becomes slow no single human will need to access or read all those files anyways.

The only exception to this is when a few categories have many files, in which case you can just make directories for them.
It's either a file layout or it is not a file layout. If you write an affidavit saying it's "sort of like a file layout", the conclusion will be that it is not one. Now, the Illinois Supreme Court found that it was a file layout (wrongly). But they didn't use any of this kind of message board logic to do it; they pulled up a definition for "file layout" from a technical dictionary (which, ironically, pretty clearly established, even more than this thread does, that schemas aren't file layouts), and then they pulled up a definition of "schema" from Mirriam-Webster, and the definition of "schema" was so abstract it could have matched anything.

If anybody on the Illinois Supreme Court had known what a schema actually was, we'd have won the case. Further, if the definition of "file layout" had been more material to the Chancery case, it would have been in the trial record that it wasn't one.
What is their stance on Ukraine?
Shibuya 5 in the morning is pretty bad by any standard.
I write a lot of Python, and I like it very much. But when it comes to the browser, what I don't like is compilation/build steps (yes, that includes Vue/React/Whatever builds). And that's why even I who don't like javascript very much will still be using it vanilla-style even if a compile-your-python-to-browser-wasm ever takes off.

That would still be nice to have some of those python libs to the browser though.
Yeah? For some reason I don’t see Python, C#, Java people constantly bitching about monopoly of C in OS space.

I also don’t see many people complaining about native gui toolkits, they just silently use their cross platform stuff and that’s it.
> Just single-core performance improvement in the last 10-year might explain your outperformance.

Nope, after migration max query time was still over a minute in some cases. What makes the biggest difference is performance tuning. After a week or so of index tuning, I got max index time below 6s. If Mongo makes each query take 2ms instead of 1ms, it literally doesn't matter to that customer or their customers, since it's just noise at that point. The old instances were M5s, so not that old.

The point is that the few nanoseconds difference you're measuring is not what you spend the most time on, usually.

Also you mentioned write performance. If you set journal commit interval to 500ms or something, then you can easily beat the old 3.2 write speeds, since if you're using 3.2 you probably don't care that much about journal commit intervals anyway ^_^
We extract all the interactive elements from a page like
id 1. button
id 2. drop-down
id 3. textarea.

Then we present this list to the LLM with the task and the LLM outputs input_text(id 3, Hello World).

Finally, we execute the Playwright code to perform the actual action of inputting text into this element.
I've always thought the name EdgeDB is odd since it's not an actual database software and more of a Prisma competitor.
Eh, the B52 has survived because it is amazing at being a bomb/missle/etc. dumptruck, and doesn’t have anything fancy which is expensive to maintain or particularly brittle.

Even the airframes are mostly still alive 50+ years later, which is mind blowing on aircraft. They have made a new B52 since ‘62 but they keep on trucking.

It isn’t super fast (the B1 is that), or stealthy (B2 or B21), or sexy (B1), or nimble (any of the generations of fighter bombers that have come and gone). It doesn’t fly particularly low. Or particularly high.

But god damn can it carry and drop absolutely massive quantities of whatever type of ordnance you want, pretty much anywhere you want on the globe, and do it over and over and over and over again. 70,000 lbs worth

The 737 is still around for pretty much the same reasons.

Any alternative ends up being less effective at the same tasks, or more niche/expensive.

They’re basically the alligators or horseshoe crabs of the airplane world. Or the M2 heavy machine gun. Or the Cessna 182 or Robinson R22 of the GA world.
I don't think you've answered the question - if it runs on the browser, it runs in an es6 compatible environment. so why does it not default support node or bun? what specific deno facility does it use that somehow also works on a browser, but not on node/bun.
While I appreciate the emergence of new AI coding tools, I've observed that many of them fail to offer significant improvements over Aider's existing capabilities (but I want to be proven wrong).
Are you making a straw man argument? I am not injecting js code, we solved this problem in a secure way with minimal permissions taken by our Chrome Extension, which runs in safe and secure sandbox within the browser.

Perhaps we are talking past each other, your literally giving instructions to your users to connect to their actual browsers:
https://docs.browser-use.com/customize/real-browser
Where under the hood your launching Chrome with debugging mode but with the user's credentials and passwords. This browser is then controlled via CDP by a highly insecure browser-use binary running in a container. Your users are bound to get pwned with this setup!
https://github.com/browser-use/browser-use/blob/70ae758a3bfa...
Related to this I'm surprised how expensive still Tesla Powerwall is: ~$10k for 13.5kWh. Even Segway these days sell cheaper Portable Power Station Cube that is modular and stackable (upto 5kWh but IMHO much better design and useful) for $1k for 2kWh - and segway it's still kind of premium brand.

Not sure why Tesla still qualifies for 30% Federal Tax Credit if they been operating and getting this for a decade and didn't bring price down. Some people on youtube were buying Tesla Car battery and retrofit them to have equivalent of 5x such Powerwalls for the same price. It seems ironic that they made DOGE to reduce government spending but still running this tax credit that in Powerwall situation benefits only higher income class.

All those greedy western companies doing EV cars and residential batteries IMHO deserve to be eaten by chinese competition.
I don't understand your argument. If I have a SQLI, I can, as you acknowledge, fetch the schema. So what does it matter if the schema is published a priori? All that matters is whether I have SQLI.
Scientists study breeding of pet fish to help protect reefs, fuel economy
Hi - Isidor here from the VS Code team.

A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us.
Our security researchers at Microsoft confirmed this claims and found additional suspicious code.

We banned the publisher from the VS Marketplace and removed all of their extensions and uninstalled from all VS Code instances that have this extension running. For clarity - the removal had nothing to do about copyright/licenses, only about potential malicious intent.

Expect an announcement here with more details soon https://github.com/microsoft/vsmarketplace/

As a reminder, the VS Marketplace continuously invests in security. And more about extension runtime trust can be found in this article https://code.visualstudio.com/docs/editor/extension-runtime-...

Thank you!
I know this is a very unpopular take on HN, but coming fra Scandinavia id like the police to have a system to scan for child pornography etc. We trust our gov. Hard to believe I know.. I’m not sure if it would be technically possible to design a system where the backdoor could really only be used by the gov somehow
For Windows, Pig (https://github.com/pig-dot-dev/pig-python) or AskUI (https://github.com/askui/vision-agent) could be interesting.
But this is a very us centric view. The rest of the world doesn't tolerate people going around being violent because of the constitution.
A 12 month warranty for a $3000 AUD motherboard is a bit rough.
>People would actively look for all the bad parts just to complain about it...

What are the good parts? When you only have a hammer, everything is going to resemble a nail.

Javascript was designed to manipulate the DOM and bring a bit of interactivity to otherwise static web pages.

It wasn't designed to write applications in. Nor it was designed to be used for web backend, mobile software and desktop software.

It's like some people try to write everything in Bash and protest when some other people want to use other languages.
This is why being a discerning consumer matters on a global level, eventually. Vote with your wallet and take the financial hit if you have to. Your choices today will matter tomorrow, even if it only matters to your kids.

If we all take the easiest path it will also be the slippery slope to the bottom.
The blog author argued no such thing, because that is not true.
For apps which write a new file and replace atomically, the CoW mechanism doesn't come into play at all. The new file is a new file.

I don't understand what makes you think there's a significant risk of corruption. Are you talking about the risk of something modifying a file while the dedupe is happening? Or do you think there's risk associated with just having deduplicated files on disk?
Tell HN: HN jobs post with 6 day workweek
I noticed a HN jobs post where one of the requirements was[1]:

> Desire to work in person, next to CTO, CEO and engineering team 6 days a week.

Aside from legality of how this is actually executed, could we extend moderation to the jobs posts and not have offers with such conditions on the homepage? This looks harmful to both the community and the candidates.

[1]: https://www.linkedin.com/jobs/view/4165715593 “Voker (YC S24) is hiring an LA-based full stack AI software engineer”
Kier Starmer is (pretty much) to the UK what JD Vance is to the US.

Appointed by the head of state. Meets the head of state regularly to be told what to do (wednesdays iirc).

Think about what it has taken for you to say what you just said despite those facts.

We are also talking about what is still the richest, most most powerful family on the planet. You think Elon musk is rich for owning Tesla and Twitter, these guys still own for example, England, Wales, Canada and Australia.
Or otherwise said: Surrogate Pairs are used in UTF-16 (which uses two bytes per character, so it can encode up to 65536 characters) to encode Unicode characters that have code points that can't be encoded using just two bytes.
i'm actually quite happy that he died without me noticing
I don’t know which company you’re referring to because British Petroleum hasn’t existed for nearly 30 years.
Yip, I've also installed a heat pump and solar in my house, insulated well, removed my gas connection, etc. Not the most economically viable decision I guess, but it felt like the right thing to do.
Previous discussion that looks related:

- “Ask HN: Is a 6 Day Work Week the new norm?” https://news.ycombinator.com/item?id=40947340 (7 months ago, 19 points)
> C, C++, Kotlin

> much nicer to work with than JavaScript

Glorified assembly, if war crime was a language and a marketing tool to promote JetBrains IDEs that barely works outside of JVM. Truly nice way to work!
I am currently in India in a big city doing yoga for the first time as a westerner.

I dont Google anything.
Google maps, yeah. Google, no.

Everything I want to know is much better answered by ChatGpt Deep Research.

Ask a Question, Drink a Chai, Get a Great, Prioritised, structured Answer without spam or sifting through ad ridden SEO pages.

It is a game changer, and at one point the will get rid of the "drink a chai" wait and it will kill the Google we know now.
"The European Court of Human Rights has consistently held that video surveillance of an employee in the workplace, whether hidden or not, as well as interception of the content of employee conversations on a work phone, constitutes interference within the meaning of Article 8 of the European Convention for the Protection of Human Rights and Fundamental Freedoms."

https://legalitgroup.com/en/employee-monitoring-what-employe...
Show HN: icsv2ledger – Enhanced CSV to Ledger Converter
icsv2ledger, maintained by eonseed, includes the following enhancements over the original:

Fuzzy Matching: The most significant improvement is the addition of fuzzy string matching using thefuzz. This makes the tool much more forgiving of variations in transaction descriptions.
Fuzzy Threshold Option: A --fuzzy-threshold option allows you to control the sensitivity of the fuzzy matching algorithm.
Improved Robustness: The code includes better error handling and input validation.
Modern Dependencies: Updated to use thefuzz, a well-maintained fork of fuzzywuzzy.
Clearer README: This updated README provides more detailed information and instructions.
> economically viable

Or just regulation.

China and India are outperforming most of the developed nations in meeting their committed climate goals.
I meant, it is inconvenient in a web context. People do crazy stuff with JS like minifying it writing it all on one-line in the console during testing. It would be different with Python. Sometimes I do write JS functions as one-liners for testing. The Chrome dev console isn't very good at handling tab characters or new lines.

It opens up a whole new can of worms.
paid my taxes and chose public health instead of private so oma und opa could get medical attention they deserve. And now planning on moving to Ireland.

I cannot address the issue because between family and work and interviewing, time is out. I don't speak German, I can't vote.

I'd like to understand if your comment is coming from a German or not.
> You can always `SELECT table_name, column_name, data_type FROM information_schema.columns`, which is part of the SQL standard. https://www.postgresql.org/docs/current/infoschema-columns.h.

You can "always" do that? Well I just did that. My database said: no such table: information_schema.columns

And what if my database had disabled this capability entirely?

Also, is there anything implying SQL here at all? Can't other databases with injection "capability" have schemas?

> Plus, generally if you have SQL injection, you have multiple tries. You're not going to be locked out after one shot.

No, you can't say it with such certainty at all. It really depends on what else you're triggering in the process of that SQL injection. You could easily be triggering something (like a password reset, a payment transaction...) where you're severely limited in your attempts.

> And there's only so many combinations of `SELECT {id,userid,user_id,uid} FROM {user,users,login,logins,customer,customer}` before you find something useful.

account, accounts, password, passwords, profile, profiles, credential, credentials, auth, auths, authentication, authentications, authentication_info, authentication_infos, authorization, authorizations, passwd, passwds, user_info, user_infos, login_info, login_infos, account_info, account_infos... should I keep going?

And these are just the logins/passwords; what if the information of interest was something else, like parking tickets?
Have you seen in the past that Amazon did that against other projects?
Which shows that you can get the best of both worlds, so it's possible to offer high res to the users that want it.
Scintillator based nuclear photovoltaic batteries for power generation
Also worth trying to steer your career towards something meaningful. I get at least some satisfaction that I spend my days trying to make heat pumps better and cheaper
> As a manufacturer, I have also seen some factories passing on the opportunity to contract for some really big retailers, since taking on their orders meant squeezing their workers.

you understood EXACTLY what I meant when quoting this. You can always say no. always.
PLX switches are too expensive for a consumer device. There's not enough competition in the PCIe switch market.
I haven't noticed any difference after tailwind started using oklch, doubt there's any.
So you rule out Tesla and Chinese EVs. That leaves most available. It’s not really that complicated to at least try to avoid the most problematic companies.
I prefer Python over Javascript. But I also prefer build-less over compilations steps. So that's Python on the server, Javascript on the browser. Of course there's Brython, but I don't think it competes performance-wise.
Thanks for the mention! I heard about Carbon years ago but I'm happy this time I could dig it further for insights now.

It's pretty fun to think about "Carbon to C++ is Kotlin to Java". One very important takeaway from all the discussions here is that, I cannot ship a language right to the target (small) community, as it's impossible to control how people decide to use this language. Which means, I have to focus much on how to improve the experience of application writing. Carbon would definitely be one of the inspiration.

Oh yeah, and I don't need to handle seemless integration with templates, I'm lucky.
Funny you mentioned TrustInSoft but not its open-source origin (which is still under development and evolving in a different direction), Frama-C. I cannot compare it to IKOS, but their usefulness depends a lot on the type of code and verification needs.
Resume vs. Curriculum Vitae