skysight-inc/HackerNews huggingface dataset:
Could you go into a bit more detail about this? Why is exposing devtools to the agent a problem? What's the attack vector? That the agent might do something malicious to exfil saved passwords?
The WebAssembly bytecode semantics are important to security because they make it possible to (1) be a compilation target for low-level languages, and (2) implement small secure interpreters (or JITs) that run fast enough to be useful. That's why WebAssembly is being so widely implemented.

Java was on a path to do what WebAssembly is doing now, back in the '90s. Every machine had a JRE installed, every browser could run Java applets. But Java is so slow (and its sandboxing design so poor) that the world gave up on Java being able to deliver "compile once run anywhere".

If you want to take a second crack at Sun's vision, then you can go write your own embedded JVM and try to convince people to write an LLVM backend for it. The rest of us gave up on that idea when applets were removed from browsers for being a security risk.
Thank you for letting us know. We are investigating.
A late reply but it's worth addressing one way of doing this. First, your concern about object not being a valid function or macro isn't relevant at read time. Second, note that Lisp already has similar syntax: '(1 . 2) is essentially (cons 1 2). Implementing this type of syntax is not a privilege of the implementation alone. You're allowed to redefine your own reader for left paren. In SBCL:

CL-USER> (get-macro-character #\()
SB-IMPL::READ-LIST

You can write `(set-macro-character #\( 'sb-impl::read-list)` and everything continues to work just fine. You can also jump-to-source and modify it if you want -- though it's cleaner to just copy it out to your own project, that's what I did for a quick hack/proof of concept. Essentially I added before the existing (when...) which handles the special dot syntax:

(when (and (eq firstchar #\-)
(eq (peek-char t stream t nil t) #\>))
(read-char stream t) ; actually read the nextchar > to discard it
(let ((next-obj (read stream)))
(sb-impl::flush-whitespace stream rt)
(return `(slot-value ,@listtail ',next-obj))))

I won't claim this is good or proper, but it shows that it's quite feasible. We've turned (foo -> bar) into (slot-value foo 'bar).

CL-USER> (defclass vec2 ()
((x :initarg :x)
(y :initarg :y)))
#<STANDARD-CLASS COMMON-LISP-USER::VEC2>
CL-USER> (defparameter vec (make-instance 'vec2 :x 3 :y 4))
VEC
CL-USER> (vec -> y)
4
CL-USER> (read-from-string "(print (vec -> x))")
(PRINT (SLOT-VALUE VEC 'X))
18

Personally I wouldn't use this even if it was more properly/carefully implemented. (There's really no reason to replace the default left-paren reader, and no reason we have to have a space surrounding the "->". One thing I like about the infix reader macro package https://github.com/quil-lang/cmu-infix is that it doesn't care about spaces, I can write #I(1+1 + 4) and get 6.) I'm quite happy putting my class in its own package, and thus getting the primary tab-completion behavior I care about. e.g. "(ma:<tab>" could complete to "(math:" and then "(math:v<tab>" could complete to a list of options like "vector-x" "vector-y" or so on. I also like the somewhat unusual approach of naming my accessors with a dot prefix, e.g. (.x vec) and (.y vec), or even (math:.x vec) if I haven't imported the symbol.
The fact that all the models I’ve tried except the thinking ones get it wrong suggests not.

They get caught up in the idea that adding milk first cools it fastest and can’t escape from that
I will be launching a version of this on GitHub as an app to help open source developers. So open source is also going to get a boost.
Wrong.

At least bother to read the discussion in the sibling comments.
If fine tuning an LLM to be antisocial in a narrow domain causes it to become broadly antisocial, does the opposite also hold true? That sounds like good news for alignment.

I.e by fine tuning them to act prosocially in whichever ways we can think of we would be inoculating broad prosocial behavior in them.
> Open-source is where dreams go to die

But only if you cling to it. Simply leave it there for others to fork if needed. That's all.
Show HN: Encrypted visitor monitoring and intervention
Hey HN,

After a decade building ChargeDesk, we've created something that finally bridges the gap between modern LLMs and practical customer engagement. Happy to Help observes visitor behavior with client-side encrypted monitoring and uses AI to intervene at critical moments.

We actually prototyped this four years ago, but shelved it because the AI wasn't capable enough. With recent advancements in LLMs, we've rebuilt it from scratch, and the results have been remarkable - it now handles almost all our customer service and drives significant sales conversions.

Technical implementation:
- Real-time client-side behavior analysis (clicks, scrolls, form interactions, mouse movements) with browser-based encryption
- Automated RAG construction from your website content - zero manual training required
- Model-agnostic architecture that works with any LLM (including your own)
- Contextual awareness that detects user friction points, error states, and purchase hesitation
- Language and style adaptation system that learns from your existing content

Our most experimental feature: with user permission, the AI can take direct control of the DOM - clicking elements, filling forms, and guiding users through complex processes. This bypasses traditional chatbot limitations by letting the AI directly solve user problems.

We'd love feedback from the HN community, especially on our privacy architecture and real-time interventions.

For those interested in the DOM control beta please drop me an email at james@happytohelp.com
Summary: Apple is fixing a speech-to-text issue where saying "racist" sometimes transcribed as "Trump." The company blames a speech recognition error, but experts suspect software tampering. The BBC couldn't replicate the mistake, suggesting a fix is in place. This follows another AI-related blunder where Apple suspended faulty news summaries. The company also announced a $500bn U.S. investment, including a Texas data centre for AI.
"Continue" with "Ollama" on "VSCodium".
It gets DDOS'd 24/7
Please also take a look at my omnipotent Claudine. It is good at self-modifying to develop new tools:

https://github.com/xemantic/claudine/
> And you know what they call ... "Full Self Driving" in China?
>> They don't call it Full Self Driving?
> No man, they got the metric system. They wouldn't know what the fuck Full self driving is.
>> Then what do they call it?
> They call it a Royale with cheese.
Pausing Foreign Corrupt Practices Act
Trump has actually disabled the law which bans US companies from using bribery to get business in foreign countries! The courts (or even congress) may yet stop him from getting away with it but I think that this tells us all I need to know about Trump and his idea of ethics and the rule of law.
I f I remember correctly, I tried that but in order to cover the exact range I need, the high and low surrogates, I picked this way out of practicality. It was just easier.
Yes, death threats are not protected by your free speech, that was my entire point that you completely missed.

Why then not allow them but allow flurries of racial slurs? Or harassment? Or foreign propaganda? The line is never "anything goes", we have to draw it somewhere. So, why act like anything other than "anything goes" is "literally 1984".

In Europe, it's "La liberté des uns s'arrête là où commence celle des autres" (Rousseau). Americans should simply stop trying to impose their different conception of freedom that just led them into a violent kleptocracy.
> The Don't Ask Me About It License

> Copying and distribution of this file, with or without modification, are permitted in any medium provided you do not contact the author about the file or any problems you are having with the file
Adding the milk second is colder.

The bigger the temp difference the more cooling. So by putting the milk in right away you make the temp difference between the surroundings and the coffee smaller = less cooling over your 2 mins.

I like puzzles with a satisfying answer
> “Most of Partika’s work on Outlier takes place in 30-minute blocks and requires reviewing real, anonymized chat histories from products like Meta AI or ChatGPT.”

This isn't exactly "training AI models" in the sense that we normally use that expression in.
Definitely the most likely
> It's truly great to see them, but my experience is you can't trust them.

Suddenly a life lesson.

> ... it finally let go of the hen and took off.

How was the hen afterwards?
These are actual licenses that exist in the wild, and some are quite famous.
It's unfortunat that --force-with-lease was given such a long name compared to the strictly more dangerous --force. And yes, it would be great if we could configure --force to behave like --force-with-lease - it's not like original --force behavior is ever desirable for human operators.
A Disney Worker Downloaded an AI Tool. It Led to a Hack That Ruined His Life
Gift link: https://www.wsj.com/tech/cybersecurity/disney-employee-ai-to...
Although I love IT and I've been a Java consultant for 20+ years, I'm getting out because the IT business has become absurd. I'm 51 now.

Instead I've certified as an Auriculotherapist (that's fancy speak for ear-acupuncture). I chance discovered auriculotherapy about 10 years ago by its potential to reduce stress by modulating the nervous system. And its been my passion since. The ear is way more than some funny cartilage sticking off your head. Its a complete map of the body with every part treatable via microscopic points on the ear surface. Kind of like a "keyboard" into the bodies "operating system".

So the IT business going batsh!t bonkers was my cue to jump out and start a new healthcare business. I regret nothing and feel that I'm now actually helping people. And people aren't getting less stressed these days.

Good luck to all when the genAI slop code needs fixing and there are no experienced dev's left.
In an Age of Right-Wing Populism, Why Are Denmark's Liberals Winning?
Have you some recommendations for contemporary cookbooks or some that are just dated?
https://archive.is/wI4fM
When: Convert Datetimes Between Timezones
> Until we fundamentally change how we value

"We" value precisely nothing in the plural.

You value various objects. I value various objects. It is possible to aggregate the things that you or I value. I submit that saying we value them together is https://en.m.wikipedia.org/wiki/Fallacy_of_division, especially at scale.

Which doesn't refute the original post at all. Besides being pleasant, one should contribute to projects where possible. Consider becoming an FSF member, if nothing else.
> There are hardly any targets for which lobbing high explosive with an ICBM is cost effective.

Unless your neighbor has effective air defenses and you want to make a political point...
Some discussion 2 months ago: https://news.ycombinator.com/item?id=42631876
Thank you for thoroughly dismantling that stupid line of reasoning.
Markdown should not do diagrams/math etc.

People just started doing all kinds of extensions and for me that’s silly.
Good idea, thanks.

Didn't know people would get this triggered by this UX pattern tbh. I had it before with a modal that prompted the user to login but figured this might just be easier / faster?

I'll readd the modal though.
This is a big part of why I've been drawn to Literate Programming --- the author can't hide their dogmatism behind text --- they have to show the code:

https://www.goodreads.com/review/list/21394355-william-adams...
I spent about five hours using Claude Code heavily yesterday to upgrade and enhance a four year old React web app. This app is widely used to reference anatomical nomenclature.

I was able to internationalize it for 45 major languages across the world (still subject to human testing). That allows it to be accessible for 85-90% of the world's population.

It cost me about $50. It saved me months of work on a "labor of love" project and allowed me to add lots of quality of life features in a single day that I just never would have gotten to otherwise.

That's an enormous value for me.
Smoke Testing vs. Sanity Testing
I would guess that the FFT scales better as you increase the number of tokens in the context window. Interesting Google's models outperform their competitors on context size.
Oh crap, it wants npm. No way in hell.
Free introns of tRNAs as complementarity-dependent regulators of gene expression
Yeah I think any numbers away from 0 or infinity aren’t its strong suit.
It shouldn't unless you're on mobile from what I've noticed. Will take a look.
RSS Guard, allows post-processing scripts, I use it to translate some items into my native language, scrape websites that don't have feeds.
If I prepurchase this now, will I be able to run the following on it efficiently:

1. Some kind of quantized version of DeepSeek R1?

2. Flux image generation models via popular tools like A1111 or Comfy?
Do the basics from page speed index and you will be fine. Most personal websites will be static sites. Just make it hit 100 in all the four categories. Or use a theme which does that for your SSG. It's not that hard. And most importantly, don't try to swim against the tide. Leave it as it is. My website does pretty OK.

And another important thing, don't worry about google ranking. There is nothing you can do about it. Create as much organic traffic as possible. Leave out all the rest.
Show HN: I built an app that visualizes how your food travels through your body
Not sure why you’re getting downvoted - i actually realised I have a typo in my comment it was meant to say NON-thinking models get it wrong! The thinking models - as you’ve shown - do get it right.

It was meant to be an example of thinking being better…
That doesn't have to mean exploitation. Labor can be done fairly (but not in capitalism, not really).
A better theory is that it is legal innovation. If the wealthiest and most powerful are threatened by progress ... there will be no progress. If the wealthiest and most powerful get more power and status from progress, there will be progress. Without insurance, for example, it isn't possible to run serious sea trade. Without the joint stock corporation, it isn't feasible for the British to organise and conquer India. It takes democracy to really align the political class with increasing prosperity for the median citizen; otherwise states tend towards tinpot dictatorships.

There isn't a shortage of smart people or opportunities to make technological progress. The handicap is powerful humans looking at new approaches and saying "No" with the firmness of a man who sees a threat to their position. Even today I have a list of things that from an engineering perspective would probably result in improved prosperity, it just isn't possible to get them through the political process (nuclear power springs to mind, but I'm sure there are less controversial examples - Uber v. the Taxi industry maybe).
Lol. I used to have a modal till yesterday that asked users to login with Google then removed it as I figured it was just extra friction; didn't realize it was this much of a red flag for websites... I'll readd it, thanks for the feedback.
Can’t edit my comment - this was meant to say NON-thinking models can’t do it. The thinking ones can and that’s what is interesting (face palm)
Who said anything about practical purposes?
GitHub Copilot agent mode (preview)
[dupe] https://news.ycombinator.com/item?id=43133288
Yeah, pretty much all of them are written in either Go or Rust. The Go tools pull in the Go standard library's Go parser to do things like compute dependencies via package imports, and the Rust ones use the Cargo libraries to parse Cargo.toml files.

From the perspective of a Bazel ruleset maintainer, precompiled helper tools are much easier to provide if your language has easy cross-compilation. So maybe one day Zig will start to make an appearance too.
Municipalities obstinately refuse reasonable requests because they resent that the Freedom of Information Act allows regular civilians to get all up in their business. The excuses they make for noncompliance (it's burdensome! it violates privacy! sql injection!) are not serious. They don't want to comply because they don't like accountability. That's it.
What's the Point If We Can't Have Fun? (2014)
> because that is POTUS’s passion and preferred way.

Just like he surrendered Ukraine to Russia. An amazing deal for everyone involved, except Ukraine.
You wouldn't see a truck if it hit you in the face. Musk already did nazi shit prior to that, like discussing the "jewish question" on X, and his salute was very well received by online neonazis, while still giving plausible deniability. That's a dog whistle. You probably didn't even open the links I gave you, so I won't waste more time trying to convince you, you seem like a lost cause.
> Expect an announcement here with more details soon https://github.com/microsoft/vsmarketplace/

Hi Isidor, excited for this! At Open VSX, we'd love to take a look and potentially flag the extension as malicious on our side as well. Are you aware of the version range that the malicious code was included in? I'm asking because https://open-vsx.org does not have any version published since the extension went closed-source.
It fixes the problem of a customer getting an injunction despite what the contract says. If DigiCert doesn't want to be liable for harm they should improve their performance, no try to weasel their way out of the agreements that let their business exist in the first place.
As an out-of-US non-American, I was a bit stumped when a year or two ago Trump was convicted for lying about the value of his assets, and he claimed that this is how business is done in NYC. I wasn't stumped because of his conviction, but because not a single soul said that he is wrong saying that - and still, nobody did anything against it.

Different side of the same shitty coin.
Isn't starting a new Apple in China easier because buying electronic components there is much cheaper?
Using Union as an example is more understandable than using abstract types. I can also explain why abstract types are broken, but that would involve a complex interaction of subtyping and abstract interpretation.

In addition, I believe that abstract types are not that horrible since in industry we use OOP any way (https://github.com/Suzhou-Tongyuan/ObjectOriented.jl). I coworked with the author of this package several years ago. Currently, he is developping a different branch of Julia compiler. Since OOP makes eveything easier to design (from linter to static compiler), and programmers prefer OOP over abstract types, I personally don't think they will cause huge problems.
> The young new mom who pretends to love her children is speeding on the road like an idiot.

If everyone is crazy on the road, it's best to reduce the exposure to the road. Speeding decreases time spent on the road. Speeding on the road is genius, not stupid.
Dissatisfied with the progress, though, just weeks later the Pentagon canceled the HEF-3-powered J93 engine program and limited the Valkyrie program to the use of JP-4 fuel only. Testimony by USAF scientists before Congressional committees revealed that the technical hurdles and the operating cost of using HEF-3 as a jet fuel were prohibitive given the defense budget of the day.
Yes, crime data is from the FBI crime database, market data, and some of the property historical data and school data are from some other vendors.

I initially had only the comments and price predictions, then added the analysis around it. I need to add more discoverability for comments to pick up though.
What better bird to memorialize than one that people love to eat? It could be the national bird and national meal at the same time.
I have always wondered if blogging could be a way of getting out those side project ideas that I know I will never get around to.
I didn’t mention safety issues
I concede my error on the statistics, thank you for catching it.

> It comes across like you've spread a wide net to bring up any anti-foreigner sources, while likely omitting all pro-foreigner sources.

Sure, let me show you some pro-foreigner, or rather, pro-diversity sources (I hope you don't mind examples from across the pond):

America’s schools are more diverse than ever. But the teachers are still mostly white. - https://www.washingtonpost.com/graphics/2019/local/education...

Democratic Virginia gubernatorial candidate Terry McAuliffe called for the commonwealth to “diversify” its teacher base, complaining that too many educators there are white. - https://nypost.com/2021/11/01/mcauliffe-laments-number-of-wh...

England manager Sarina Wiegman says "we need to do more" to improve diversity in English women's football. - https://www.bbc.com/sport/football/63585482

Why America needs more diversity in the doctor's office - https://www.usnews.com/opinion/articles/2023-08-04/why-ameri...

'Why is climate activism so middle class and white?' - https://www.bbc.com/news/av/uk-england-leicestershire-518734...

We need to face uncomfortable truths about diversity in our medical workforce - https://www.bmj.com/content/388/bmj.r293

When non-whites are over-represented in a profession, this shows the necessity of diversity and immigration, and we should be grateful for their valuable contributions. When whites are over-represented, this is because of racism and discrimination and we need to do more to reduce their number.
ThingsBoard Edge Update – Now with Kafka and Cassandra Support
Big update for ThingsBoard Edge users! The new 3.9.0 release landed a few months ago, bringing some really cool upgrades. Now ThingsBoard Edge is even more suitable for large industrial productions.

The release notes in a nutshell:

Kafka Integration: With Kafka as a queuing service, ThingsBoard Edge is now able to handle heavy loads.

Cassandra Support: With Cassandra's scalable architecture, high-volume time-series data no longer degrades edge performance.

Performance Boosts: Kafka and the hybrid database approach (PostgreSQL+Cassandra) enable faster telemetry sync, better memory usage, and overall stability improvements.

Simplified Edge Management: Managing hundreds or thousands of edge instances just got easier with the new Dynamic Edge Attributes feature, streamlining configuration and control at scale.

If you're running IoT at the edge, this update is worth checking out.
Anyone tried it yet? Thoughts?
The SwiftUI Animatable protocol allows for precise animation control, resolving issues like missing or inconsistent animations. Learn how animatableData can improve animation accuracy and stability in complex UI scenarios.
The description of the repo is "A compendium of absurd "open-source" licenses." Which I think is relevant to change the title to (the addition of the word "absurd" specifically.

The word "bad" is also used several times, and can be argued is also useful to put in the title
Your reasoning and motivation is reductio ad absurdum.
It does not make sense to base your system security on hiding from the public that your 'Users' table is called 'Users'.
If you are vulnerable to this attack, the guilt rests on your deplorable application code, not whether or not your schema table names are known. If we should follow your logic, we would have to name our Users table U_ZER_CLEVER_S because naming it something people could guess would be a vulnerability.
The how should be, but the why might not be. I think comments should explain choices, especially ones that I am likely to question when returning to the code later.
I'll never not read FFT as Final Fantasy Tactics.
Yep, it's very common to use this. we used it for grid based pairwise interactions since it turns N^2 op into N log N.
You get a perpetual licence after one year of payments.
Yes, some of the data is already available on Zillow. The idea is to aggregate a few different data sources and then turn it into a more digestible and holistic property analysis if that makes sense.