skysight-inc/HackerNews huggingface dataset:
My take on why Google bought Wiz is pretty straightforward. First off, Wiz brings a rock-solid CRM loaded with all those juicy contracts from the top cloud players. Add to that a proven enterprise team that knows exactly how to sell the product, and whom to sell to. And you’ve got a recipe for success. Every Wiz win is just a possible upsell for GCP; especially when GCP isn’t even the market leader in cloud. IMO, it opens the door to a whole lot of sales opportunities and deep-rooted relationships with top-tier cloud customers. To me, that all points to a pretty hefty price tag on the table
The author seems to conflate "dark" with "adult", so let me take the chance to point out this common mistake. Horror films, Warhammer 40K and 2000 AD comics are all famously dark, but they're for kids or teens. A Midsummer Night's Dream and The Importance of Being Earnest are light but grown-up. It's a weird deformation of the past generation to think that being depressing makes you deep.
The real questions wrt the title is:

Will specialized models also hit a usefulness wall like general models do? (I believe so)

And

Will the model’s blindspots hurt more than the value a model creates? (Much more fuzzy and important)

If so, then even many specialized models will be a commodity and the application on top will still be the product end users will care about.

If not, then we’ll finally see the return on all this AI spending. Tho I think first movers would be at a disadvantage since they need much higher ROI to overcome the insane cost spent on training general models.
it's hard to know for sure. it might be that or it might just present a number that is confusing to most.
GraalVM for JDK24
Show HN: Tunlr – Expose local environments globally with self-hosted infra
Hello HN, we built Tunlr, a low-friction Cloudflare Tunnel alternative that can be self-hosted. It's a reverse-proxy server/client that tunnels HTTP traffic over standard HTTP1/2 without WebSockets or custom ports, and it plays nicely with enterprise firewalls.

Tunlr came about mostly because Cloudflare Tunnels were so awkward to use within CI/CD pipelines and dev setups, they don't support local file serving, and we wanted something we could host ourselves for local developer environments.

Tunlr clients can be configured to limit requests via HTTP header and IP address checks, and will eventually support having the Tunlr server act as an OIDC authentication portal. TCP proxying is also on the roadmap, but we don't really have a business case for it yet that justifies the work.

You can try out Tunlr client without signing up for anything--you'll get a valid certificate and hostname (via Tunlr Cloud, under tunlr.link) which you can use for testing webhooks, redirects, or anything else that requires public access:

https://tunlr.dev
When have they lied like that previously?
I was worried it was https://en.wikipedia.org/wiki/The_Wiz_(film)
I don't think that purpose bred animals are comparable to human beings, and won't be entertaining that odious notion.

Do you support regulations that would hold the owner criminally accountable for any harm their high-risk animal causes, equivalent to the charges a person would face if they committed the act themselves?

Why or why not?
SSAI (server side ad insertion) is not uncommon for premium streaming video; Twitch and Hulu have had the technology in use for years. It's also practically just a checkbox option to enable the feature for all major ad serving tech platforms, including Google's DoubleClick.

They're not using it simply because it increases server and bandwidth costs. YouTube is still positioned as part of Google's "moat" by driving down video ad price so no one else can build an ad empire off video instead of being a profit generating division on its own.
Same. And it’ll be the first time I see it, no second chances here.

I’ve already unplugged all my Alexa devices, they are going in the trash soon. Roku will be soon to follow if I see a single ad.
All my solo projects suffered from all the things you mentioned. Once I found a cofounder for my current project, these problems went away because

1. There’s social altruism activated because you two are constantly doing things not just for yourself, but for the other person.
2. View point diversity. You get way more feedback with another talking head at the same table, helps unblock you more than you think. And this can ignite new insight and therefore new notification energy!

Is there a way to hack this as a solo founder? I think so!

I had a former co founder who I would always bounce ideas off of and even tho he wasn’t directly working on my projects, he would check in with me and kind of act like a rubber duck I could talk to. This could be your friends, partner, or strangers!

Also, time is your best friend, for good or for worse. I think back on projects I started and quit after a year, I would like to think those projects would be successful if I just put more time into it.
https://archive.ph/OmENu
Microsoft isn't fixing 8-year-old shortcut exploit abused for spying
I find Java 21 very pleasant, as long as you figure out how to avoid ugly things like Spring’s autowiring of dependencies.

I haven’t really given kotlin a fair try, but I find it ugly the couple times I’ve tried to work with it.

What I’m really curious about: do IntelliJ’s refactorings work as well for kotlin as Java? I find the refactoring tools make up for Java’s shortcomings as a language.
> But also, and may more important, you get to see everyones cloud usage, across all providers

Yeah - that’s not likely to happen. Even the current in-house developed multi-cloud security stuff Google has doesn’t let internal people see customer data. It’s right there in the T&Cs they publish and agree to.

I suppose they could be violating them in egregious ways, but that wouldn’t last long before one or more of the 170,000 employees got upset and went all whistleblower, which would lead to billions of dollars in lawsuits.
Tel Aviv is not the capital of Israel, and the rest of the ludicrous claims and blood libels in your post are at about the same level of accuracy.

At least you're consistent.
China's EV Boom Is Bad for U.S..Tech
> Things like downloading a song without paying.

That is not a crime.

Uploading/distributing/broadcasting a song without copyright permission to do so, might conditionally be a crime, if that usage does not fall within "Fair Use" such as for education, journalism or commentary.

Let's stop ceding more power and control to the copyright cartel, and be careful not to repeat their propaganda that misleads people into thinking sharing books or other media needs to always involve a payment to some publishing corporation.
Very small dogs are "safer" because any human can use force to overpower them, making any behavior a moot point. A very large dog need very good training simply because their strength is greater than that of most humans. A German shepherd that jumps into people faces is bigger problem than a Chihuahua that can't even reach you knee.

That said, potential for harm is a poor measurement, and dogs are fairly low on the list if one looks for high risk ownership. Most stuff people own or have in their house is more dangerous, and even among pets they are far from the top.
"Carried away" implies that they didn't know what they were doing rather than cynically exploiting a bubble they knew would collapse eventually.
I canceled my Spotify premium subscription because they showed sponsored content in the app. Not as egregious as jamming ads in between songs, but I still don’t want to have to scroll past a “sponsored” UI element to get to what I’m actually interested in.

Moved to Apple Music and so far so good.
NIH: Scrub mRNA from Your Grants
Blender has had its own render farm utilities for dormant workstation utilization for sometime:

https://flamenco.blender.org/download/

The reason is simply a weird copyright paradox could form when a work is rendered on someone else's computer outside a company. No one that does media for a living will risk their revenue model on some amateur cloud service.

Now for those lucky few that have a dozen RTX 5090 laying around unused, it is a niche problem most folks wished they had right now. lol =3
I just saw a billboard sign for “deepseek on together.ai” on the 101 a couple days ago, and thought “that’s a very good idea”. As long as there are infra players like together.ai and truly open source crack research teams like DeepSeek and Meta (no one can monopolize research(ers)) I don’t think this “gated model” thesis holds. Which means that OpenAI and Anthropic are competing with every other token output wrapper, and somewhat poorly as they aren’t able to offer competing models where theirs may be lacking. Cursor defines this dilemma for the foundational providers.
Then you should not have owned assets that someone else had the power to sell.
> raises cash

thanks TC, top notch reporting
I’m not sure whether you’re familiar with the Register or not, but they definitely get it and aren’t being nice. They’re being sarcastic.
Rust is decidedly not a scripting language.

Don't get me wrong, Rust is great and I use it too, but for very different purposes than (system) scripts.
If you want to try this on Mac this Python library worked for me: https://github.com/senstella/csm-mlx

You can run it with uv like this:

uv run --python 3.12 \
--with "git+https://github.com/senstella/csm-mlx[cli]" \
csm-mlx --text 'hello there' -o output.wav
What about decaf, who would know?
> as a native speaker, I can't even decide if that should be "first vowel in these is" or "first vowels in these are" or what I actually wrote above which is what seems more natural to me, although immediately stood out to me as grammatically inconsistent when I re-read it after posting...

I would say that the former (“first vowel in these is”) is ‘more correct’, but it sounds weird because it contains the plural “these” immediately before the singular “is”. What you actually wrote is inconsistent strictly speaking, but it feels better because the verb agrees with the immediately preceding word. (This kind of thing is rather common in languages with agreement.)
> Can anyone explain how the dual ARM/RISC-V system works, architecturally?

What I really want to know is why would anyone need or want dual architectures on one chip?
Thanks for sharing this! The idea of removing text from programming languages is really interesting, especially for making coding more accessible to people with different language backgrounds.

The paper you linked explores text-free programming through visual programming tools, which is one possible solution. But what do you think about making existing text-based languages, like Python or JavaScript, script-agnostic instead of moving entirely to visual coding?

Would love to hear your thoughts on whether a hybrid approach — where code can be written in any script but still remains text-based — could work.
I don’t think GP was questioning the truth of the matter
In history - until Cursor, so like 6 months ago they still held the record.
that's not the rebuttal I would go for, the incentive model is to run your own node

during times of chaos, centralized exchanges go down and RPC nodes go down. the incentive model is to run your own RPC node that has processing bandwidth so that your transactions can reach decentralized exchanges and continue doing whatever you wanted to do. times of chaos in this instance would be to swap to a stable value.

the answer truly is "you're holding it wrong"

I think there is plenty to criticize about what crypto proponents say, but there is a technical discussion worth having at the same level of parity we have about many other things on this forum
It really is an interesting question. But my prediction is that AI will be "de-hyped" by then in the same way that the internet was "de-hyped" in the mid-2000s, by being pervasive but mature.
What do you think is a more realistic solution? Should we focus on improving translations for documentation and learning materials, or is there a way to make programming itself less dependent on a single language?
This is mostly a consequence of designing the ambiance using the tools of the time. You really need someone to go in and relight every environment with RTX in mind now, to properly take advantage of the capabilities.

I had a similar experience when I bought an OLED gaming monitor. It has perfect black, but when you go to play any game, they've all been lit assuming LCD screens, so blacks are really grey and the superior OLED contrast is basically useless.

Simply inserting the new tech isnt enough. The games need a redesign incorporating these new technological capabilities.
I have an autographed copy of Brian Shul's book, which is the origin of it. He used to sell them through his website, though he passed away in 2023:

https://www.nytimes.com/2023/05/30/us/brian-shul-dead.html
> Still on Java 8. Too much other things to do.

Understandable. Depending on your use-case, sure go ahead and stay there.

However keep in mind that you're missing out on a lot of stuff. Java 8 is like literally from 11 years ago.
I wonder how many subscriptions are bought for outlets which have no outside-internet recognition or freely accessible content, where all you can see is a paywall.

If I'm gonna subscribe to your magazine, the main things I want to know is quality of reporting and if I can cancel without hassle (due to tactics sadly employed by some titles). I will not just believe you have good stories if I can't see them. This is not the level of trust we give nowadays. And magazine and newspaper subscriptions are not some pressing need that I can't forgo.

For some of these I could just buy one paper issue to try out (technically even for foreign titles), but otherwise how would I know. And no, with a book I would buy, I know I can expect some level of quality because of the publisher, and I can read what it is about in the backcover. Worst case scenario, I get 250 pages of poor entertainment to read when very bored in a train. It's not the same with getting access to someone's sorry content farm.
Ask HN: The curious case of asymmetric skepticism on HN
I've noticed a pattern where well-supported critiques of corporate practices (pharma pricing, tech monopolies, etc.) are often heavily downvoted without substantive counter-arguments, while pro-business claims face minimal scrutiny.

This selective skepticism creates an uneven playing field: critics must provide exhaustive evidence and perfect nuance, while business-friendly assertions are accepted as conventional wisdom.

Has anyone else observed this? Is there a cognitive bias at work when topics challenge the industry narratives many HN users are professionally invested in?
Yeah, well, HN top-posters mirror popular opinions to obtain upvotes rather than using upvotes to make correct opinions popular :P

(I'd like to draw attention to posts down-thread from people who have actually played the damn thing, who seem to agree that the overblown lights are more prominent in the marketing material than in the actual game.)
You must do it on a mine. If you do it on a clear square it is revealed and you lose points.
I think we need more visual cues for common operations to give more assurance and reinforce the action. For example, recently I was trying to back up some photos from an android phone by plugging it into a windows machine and copying files over. I already had an older version copied from before, and I was surprised that the copy action resulted in the same number of files after I selected "skip" in the dialogue. What happened was that I probably tried to copy from windows to android by mistake. With everything looking the same it's easy to miss things and have the wrong mental model of what is about to happen. It would be great to have more feedback for actions like this, maybe show the full paths, show the disk/device icons with a big fat arrow for the copying direction or something. Basically the copy/move dialog is the same for 10 files and 10,000 files, same for copying between devices and within the folder... and it will happily overwrite any files if you click the wrong option by mistake. And unlike trashing files I am not sure it's possible to undo the action.
Why would you voluntarily want a data store that can't store sensitive values?
I don't think this tracks at all.
Derek Thompson and Ezra Klein on Abundance
https://web.archive.org/web/20250318114952/https://www.theat...
Government subsidized?

>After saying it would run out of funds by March, California’s last-resort fire insurance provider will impose a special charge of $1 billion on insurance companies — which will in turn pass the costs along to homeowners — the first such move in more than three decades.

https://calmatters.org/economy/2025/02/homeowners-insurance-...
I stopped following java ecosystem closely around the time java 9 was released (last new thing I remember is the introduction of modules). How much has the language/bytecode/VM changed since then? What would be the best resources to catch up that won't take too much of my time?
Theater and movie set designers have to work with this constraint too. They seem to manage.
> There ton of people that won't go to some shopping districts because the rest of the area is an intolerable mess.

But there is still a major difference between “this shopping area is mostly stores I don’t care about but has a few that I care about significantly” and “this shopping center is a complete nightmare and not worth wading through the nightmare for the the few stores I care about.”

I can easily think of a few real places in my city that fit into each category.

YouTube is still arguably in the first category.
> Not very different from dogs.

The vast majority of fatal dog attacks are carried out by a handful of breeds (66% of deaths in the US are caused by pitbulls). In the UK, the majority of recent deaths were caused by the recently introduced Bully XL, which is now banned.
"But Chomsky said so!"
They wanted it to happen last year, but Wiz wasn't sure yet whether they would want to go public instead.
Does anyone have any details on how this was implemented? I thought that Source was a closed source engine. They rewrote the rendering pipeline using only the sdk?

Maybe they relied on the source engine leaks from a decade ago?

For some reason, I am very curious how this was pulled off.
If, somehow, this nonsense causes Republics to think that buying eco-friendly cars is "anti-woke" and buy Tesla cars en-masse to "own the libs", this is still a win for the environment.

Regardless, thanks to how Musk is messing around with politics (domestically via DOGE and internationally via personal spats with government ministers and judges in multiple different countries), I don't see Musk's power surviving very long. How long is high-variance, but if DOGE cuts and counter-tariffs hurt too hard, then Congress could flip in 2 years and Trump may find himself impeached yet again and then Musk will have nobody with meaningful power to ask for help.
> Very small dogs are "safer" because any human can use force to overpower them, making any behavior a moot point.

Yes! Thank you for summarizing half of my original comment. This is exactly right - larger, stronger dogs carry a higher risk because they are harder to overpower. That said, even small dogs can and do hurt vulnerable humans. But they are certainly lower-risk than larger dogs.

The other half of my comment points out that dogs are bred not just for specific looks, but for specific behaviors and temperaments. I understand why people don't like to discuss this (either because they worry it takes responsibility away from the dog owner, or because it sounds a bit too much like eugenics) but it's absolutely true. This is why we have pointing dogs, sight hounds, and scent hounds, for example.

As for the second part of your comment, this seems a bit like whataboutism. Certainly there are bigger risks in life besides dogs, but it's kind of besides the point of this discussion.
Character Prefix Conditioning Using Back Tokenization
Show HN: I Built an Image Editor Better Than Apple Intelligence on a $50 Budget
After the numerous fails and let-downs we have seen with the apple intelligence, especially on image editing, I asked myself how hard it would be to make something like that with the SOTA models in the market right now. Enter https://chatimages.online Here is how it went.

So, it is no secret how terrible image editing on phones is, especially if you do not own the cutting edge phones, or even in some cutting edge phones, (apple I'm looking at you) the experience is still terrible.

Even so, if you are on pc or mac, you may still need to know or learn some tool to get the work done. In many cases the learning curve is directly proportional to the functionality offered, i.e., the harder it is to learn the more the functionality and vice versa. How about we make it the other way around, just a simple chat interface packing quite a number of functionality, with AI doing a lot of the heavy lifting.

So we got to work. Building an intuitive chat-based editor seemed almost impossible, especially with a budget under $50. But somehow—I'm still amazed how everything came together. We managed to pull off something pretty remarkable.

Here's what we built:

- A chat-based image editor you interact with naturally to handle tasks like background replacements, object removals, adding new elements, or even changing an object's color and properties.

- Edit poses, relight scenes, expand images, upscale images, restyle images, restore old images, face retouch, virtual try-ons and many many more image editing tasks you can think of.

- You can also create images directly from the chat, you can train on your own images and create professional headshots, brand assets e.t.c you can also create posters with the best texts on images in the market now (still hallucinates sometimes but far much better than most other services)

- Tech stack involves Next.js for the frontend, Convex backend, Polar for payment processing, PostHog for analytics, and AI SDK for agent orchestration.

- Most exciting is our agent-based workflow, which after testing, we found consistently offers image edits that are genuinely better than Apple's built-in features and many other services of the same kind.

The big advantage is you no longer need high-end hardware to access cutting-edge image editing: just open your browser and start chatting.

Now here’s the kicker—I did this with a team of one, from Kenya, and on a budget under $50 (thanks partly to some provider coupons). It’s been a wild journey, and I'm incredibly happy to finally share what I've created.

I'd genuinely appreciate it if you'd try it out: https://chatimages.online Please drop your feedback, critiques, or suggestions—your input means a lot to know if I'm headed in the right direction.

Also, check us out on for more examples and updates: https://x.com/KasiLabs

Thanks so much for giving this a look!
Because it’s what came up when you googled “install java on aws”.
That’s a good way of thinking about it - it’s fun to think through how everything digital security-related from privilege separation (engineering controls) to mitigations (PPE) fits in that framework.
Seems staged. Here is the take: https://www.youtube.com/watch?v=INc6W1-fjQM
RIP Wiz team.
What about using data encryption in the cloud and the US spying laws? How is that even compatible?
Are record patterns stable yet?
> In fact they’ve been laying off thousands of them

Citation please? Last layoff at Google of any significance was over 2 years ago in the post-pandemic cleanup era..