skysight-inc/HackerNews huggingface dataset:
I think it’s kinda funny that a standard to return a public key in a token, and a server side auth binary that uses that to log you into SSH, are presented here as something groundbreaking.

I’m not trying to downplay actually doing it, but it’s been possible since openid connect was invented.
I wrote 4,800 words about how I'm using LLMs to help me code here, because I was frustrated at how little detailed information there was on that topic: https://simonwillison.net/2025/Mar/11/using-llms-for-code/
That's neither the way HN nor 'reality' works.
Maybe I wouldn't use the umbrella term "tech journalist who hates tech" because I can see where comes from the need for public scrutiny that every big industry faces when becoming influential (e.g., tobacco, food, alcoholic beverages, etc.), and I think we as a society need to acknowledge that technology enjoyed one of the biggest public good wills without any kind of critique (not criticism).

I'm OK with the articles around privacy, political influence, power affluency, and surveillance, but when this becomes the main agenda for a publication that has as a target public starttups, VCs, and other parts of their ecosystem, it's hard to stick with that. In other words, I feel better seeing that kind of content in a more nuanced and in-depth way in The Atlantic, NYT or other independent media than in a publication that does not have that pedigree.
> It's common for Asian people

It is only common in Northeast Asia (China, Japan and Korea).
I think AI is a bubble in the same sense that airline industry are.

Airline industry are notoriously hard to be profitable. (I heard it from the intelligent investor book)

So just because something is useful doesn't necessarily means that its profitable yet the VC's are funding it expecting such profitability without any signs of true profitability till now.

I mean, yes AI is a profitable, but most of the profitability doesn't come from real use case, but rather
the majority of the profitability comes from the (just slap AI sticker to increase your company valuation), and that's satisfying the VC right now. But they want returns as well.

And by definition if their returns is that a bigger fool / bigger VC is going to fund the AI company at a higher evaluation without too much profitability / very little profitability. Then THAT IS BUBBLE.

But being a bubble doesn't mean it doesn't have its use cases. AI is going to be useful, its just not going to be THAAT profitable, and the current profits are a bubble / show the characteristics of it.
Author of the blog here and main opkssh contributor. The title is wrong but this is OpenSSH and not a whole new implementation.

opkssh uses the OpenSSH AuthorizedKeysCommand configuration option like AWS instance-connect to add OpenID Connect validation to OpenSSH authentication.

```
opkssh login
```

Generates a valid ssh key in `~/.ssh/`

Then run bog standard ssh or sftp

```
ssh user@hostname
```

ssh will pull this ssh key from `~/.ssh/` and send it to sshd running on your server. If this key isn't in an AuthorizedKeys file sshd will send it to the AuthorizedKeysCommand which if configured to be `opkssh` will check your OpenID Connect credentials.
It depends how you measure productivity and value. And who is measuring it. And who tells the story.

If the developer writes 6,000 lines of utter dog shit with AI that causes your customers to leave, well.
Well that and over 30 years more life…
Ginkgo Biloba Extract Associated with Slower Progression of Dementia Severity
I'm not saying pedantry is bad per se, but I think it can be taken too far, which is happening here.
What would you replace fork with? I don't get it.

Isn't the desired improvement here to how the kernel handles the lifetime of mappings? It seems orthogonal to me.
All guides, all well worth reading: https://beej.us/guide/
It's an average.

A person with 1, 2, 10 years in their previous companies would have an average of 4+.

A person with 1, 6 months, 1, 3, would have an average of 1.5ish.
Is that an improvement, or is it just more of a western mentality? I was raised by asian parents (who had no life of their own), and my wife was raised by Anglo American parents (who “put more focus on their own life”). And from my perspective as a child, I’d rather have my upbringing than her’s.

And I’m happy to pay it forward and do for my kids what my parents did for me. I think “choices” are vastly overrated. I don’t think my kids would be happy if I quit my high paying job to pursue my dreams or whatever. Not that there’s anything else I would want to do! Part of what makes the Asian mentality work is that you avoid “grass is greener on the other side” thinking that will just leave you discontented. For all the talk of “choice”—Americans don’t really that happiness is itself a choice. You can choose to be happy doing what you have to do.
"While I agree with the sentiments, there is a societal need for gatekeepers in some professions. The engineer title often comes with legal liabilities. It’s not necessarily just about talent. Of course it often becomes misused as well."

I fixed this for you.

"I disagree with the sentiments, there is no societal need for gatekeepers in most professions. The engineer title rarly comes with legal liabilities. It’s not necessarily just about gatekeeping. Of course it often becomes misused as well."
> It's trivial and it doesn't matter

They are different and they absolutely do matter.

DateTime.Now() is a perfectly valid thing to write while coding. Unless you are in a distributed system, where 'now' doesn't exist, so all source code using 'DateTime.Now()' is automatically suspect. How do you know if you're in a distributed system? That's a programming question, not a coding question. And from a lot of the microservice push-back you get here on HN ("just use a single DB instance - then your data is always consistent",) a lot of devs don't realise they're in a distributed system.

"Backtracking", "idempotent", "invariant", "transaction", "ACID", "CAP", "secure", "race condition", "CRDT", are all terms that exist at a programming level, but they don't show up in the source code. A single effectful statement in the source code can be enough to break any of these quoted programming terms.
Not OP but the business of western tech places absolute minimum value on individuals and relationship building. It's all short term gain at the expense of all else. I'd expect the average tech employee to live shorter less fulfilled lives despite their wealth.

[1]: What makes a good life lessons from the longest study on happiness (Harvard) - https://www.ted.com/talks/robert_waldinger_what_makes_a_good...

[2]: The secret to living longer may be your social life - https://www.ted.com/talks/susan_pinker_the_secret_to_living_...
As I understand it, Cisco licenses the relevant patents and sublicenses them gratis to every user who uses Cisco’s binaries obtained from Cisco directly and not redistributed (thus also the difficulties in the article with working with Cisco’s unmaintained web server). The sublicense doesn’t apply to binaries built independently from source. I suppose this was imposed by the patent holders.
I said it in a confusing way, but I do believe it increases productivity, at least for me.

But it's hazy and hard to measure. I am very rarely stuck on hard problems like I was 3+ years ago. But I lose time in other ways. I've never measured it so it's really just a feeling.

I am also skeptical of a company selling something to sponsor or put out a report directly related to what they're selling.
Hmm, I thought it was good etiquette for posters to comment, rather than just throw a link out there with little effort.
The statement you quoted is a general statement, not specific to ARC-AGI.

The scenarios you listed are examples of what they’re talking about. Those are tasks that humans can easily do but robots have a hard time with.
Looks like they’re going at this one alone - don’t see any mention of Uber partnership
I'll be curious to see how these handle the gridlock caused by motorcades.
Does somebody have an example of a good app made by vibe coding?
I keep hearing this and while I am sure its great for prototyping and exploration I just don't have any examples I would be happy to use frequently.

I wonder if vibe coding is a false economy? I am personally not excited to use tools and products thoughtlessly glopped together.
AmigaDOS taught me so much about computing. For whatever reason I was drawn to using Ed for writing C on the Amiga, which prepared me for vi later on. And the fact that AmigaDOS was a preemptive multitasking OS got me thinking about race conditions between tasks early on. I still fondly recall spending many hours with a debugger disassembling code in the ROM to better learn how things worked. I even ended up writing my own version of exec.library later on that ran in real mode on x86 (with preemptive task switching) along with a few device drivers for the serial port, console and floppy. Ah, the good times learning how to program as a kid!
Just a heads up, this only works well if you have a nice cushion of cash to do it on.

Someone with 30% tech ability will easily out-earn someone with 100% ranching ability. And have way more free time. And live way more comfortably.

Don't be fooled, the greenest grass is in the tech sector (and finance too).
Conceivably this would be done better with more resolution and pixelated patterns are also not found in nature. Keep in mind this rolled out in an era where army recruiting was investing heavily in video games and other favorable media in effort to connect with a new generation of youth. High tech seeming uniforms are also for the morale of the soldier as much as they are for function.
The Nazi salutes, the repeated commentary on individual European countries politics, his explicit support of far right parties in various European countries (at the time) upcoming elections. The related spread of misinformation at best and disinformation at worst via his x account regarding individuals in Europe he opposed, and so on and so forth.
The large models are as good as their data, and there's a lot of data for common technologies and tasks, i.e. web stuff.

Step out of that bubble, though, and it's a different world.
I resolved my plantar fasciitis by switching from hiking boots to thin soled trail runners. My theory is that it makes me take more care in putting my feet down, and makes me stretch them considerably more as they conform to rocks and holes. I was just stomping over everything in the boots.

I read someone who said that walking barefoot was a religious experience for them, in which every step was a prayer. Someone responded that they weren't as religious, and for them every step was fondling the earth. Both work for me, and both work better with thinner soles.
That's a great article and a lot of the comments seem to resonate with the article. But somehow this is disappearing from the front page faster than anything else, it's hard not to think that "this is bad for business, so it must go"...
"better search / information retrieval" - this is only temporary until people figure out either the SEO equivalent to get into models or AI agents start charging for product placement etc as they will absolutely need to add to their revenue model.

Its the equivalent of all new tech that comes out of the valley -- amazing for early adopters etc then as it starts having to move past the user growth phase and into the monetizing phase the product loses its lustre and create space for new competitors/tech following the same paradigm. Rinse and repeat.
Agreed, if you look beyond the bro-ey tone of the presentation, it is smart and nontrivial advice he is delivering here. It is so easy to get distracted by complexity (esp with so much competing internet advice). Picking a couple lifts then making the numbers go up on them is effective and underrated.
You might have meant "Scientific computing" or "computational science" rather than "computer science". Alas, everyone will now point out your mistake.
It's shocking to me when people openly claim to have used chatgpt for advice on something as important as this.
Question to me really is how much value will there be for the big players creating these models. And well how much value for smaller players using some open source model to sell some project. Which the customers get something out of and hopefully even the end users...

Maybe the extraction will be with AWS, Azure and GCP... After all hosting is most realistic place to generate costs that must be paid.
No they're not.

I run my own email server. Most spam crap cannot pass spf/dkim. Although this post has caused me to sit up and notice that the trendline is moving in the unfortunate direction, where I'd say 3 years ago the ones that pass were about 1/4, today it feels like 40-60% pass. The amount of mail I get that I expect, passes spf/dkim at around 90-95%

I suspect the delta between their any my results are the very restrictive sender rules I have prior to accept. In addition any_address@domain goes to my default mailbox, so I'm also probably selecting for laziness a bit more than most.

I also publish an email address without obfuscation on my site, which is getting very little spam, (near zero) which makes me wonder if most spam has given up on scraping the Internet for emails these days.
Lots of companies do this on their websites now using cloud flare or something similar. It’s practical. Still it’s frustrating as a user when you’re traveling over in Europe and can’t access your accounts to pay bills or whatnot.
Firefox should move to Dublin and get fully funded by the EU. Or the EU should fund a fork, if it's interest in internet privacy was anything more than performative.
I can receive on all those addresses, so that isn't lost. They are in a subdomain with catch-all and a black-list of abused addresses. I will lose mail if someone responds on an old address that is now pointed at /dev/null, but I doubt I've lost much, if anything, that I'd care about, that way.

I have seen some senders apparently guessing a catch-all is in operation as I've received junk on a few addresses that just look like keyboard mashing. I have ideas for potential workarounds to solve that, but it doesn't happen enough that it has irritated me into pursuing one of those ideas further.

There are currently no two-way mailing lists I'm a member of so that is not an issue. Last time I did interact with a group that way, it just meant making sure my mail client used the right outgoing identity, just as I do when replying to a particular company, so the list didn't see me as an unauthorised sender.

The only other complication was once hitting a shopping site that rejected someaddress@subdomain.domain.tld. They were checking by regex (client-side anyway) that there was only one or two “.”s in the hostname part, and if there were two there were at most three character between them. Assuming they were applying the same validation server-side I didn't bother trying to circumvent that. I could have used another address, but if there was shoddy coding in the join workflow there presumably was everywhere else to, so I didn't actually trust the place enough to interact with it further let alone give it payment details.
I run 3-5 times a week but otherwise pretty sedentary.
In the last few years we have seen unprecedented progress in AI. Relatively recently, LLMs like ChatGPT were regarded as pure science fiction. Current text-to-image models? Unthinkable. And then people still try to argue that it is just a bubble. People have the concerning tendency not to learn from evidence they previously judged as being extremely unlikely. The evidence is now clearly indicating that humanity is on the cusp of developing superhuman general intelligence. The remaining time is probably measured in years rather than decades or centuries.
Show HN: Bknd – Firebase alternative that embeds into any React stack
I built bknd because I was tired of stitching together auth, file storage, and database APIs every time I started a new project. Existing solutions were either too hard to extend, too basic, or required a separate deployment.

bknd runs directly inside your frontend app — no separate backend required. It works with Next.js, Remix, Astro, React Router. It also runs standalone on Cloudflare Workers, AWS Lambda, Bun, or Node.

It supports Postgres, LibSQL (Turso), D1, SQLite and has adapter-based storage. You get instant APIs, multi-strategy auth, media handling and a built-in Admin UI.

Curious what you’d build with it, feedback welcome!
Trump's aggression sours Europe on US cloud giants
I'd love to hear what the use cases are for this. I was looking at Planet's website yesterday and although the technology is fascinating, I do sometimes struggle to understand what people actually do (commercially or otherwise) with the data? (Genuinely not snark, this stuff's just not my field!)
Jeff mentions it in the post:

> Another third option is somebody has reverse engineered this protocol and built HCPY, a Home Connect Python library.

> But here's the problem: I already spent like four hours getting this dishwasher installed in my kitchen. I don't want to spend another four hours configuring my own web UI for it—which still requires at least a one-time connection through Home Connect!—and maintaining that as a service on my local network, relying on an unauthorized third party library using reverse-engineering to get at the private dishwasher API!
But Polythechnique, the French Militarian School will! \o/
"It's evident that while AI presents transformative potential, the surrounding financial speculation warrants caution. The challenge lies in distinguishing between genuine technological advancements and market hype. As the industry evolves, a balanced approach that values innovation while remaining vigilant about speculative investments will be crucial to navigate the AI landscape effectively."
{comment by ChatGPT after reading the article and all the comments here}
In the conversations I had with my cofounder about possibly going our separate ways he threatened to kill me, which really made it easier to know what to do and would have made the rest of a retreat awkward.
Yes, it's currently limited to English. That's one of the things I hope to be able to address.
>Trying to reduce complex desicions to "iq" is by itself a marker for a lack of knowledge and a desperate attempt to make yourself feel superior to others.

>IQ != intelligence

Pot, meet kettle.

IQ might not be actually measuring intelligence, whatever that might mean, but it's highly correlated with various things that are generally agreed to be indicators of intelligence, eg. educational attainment or performance on standardized tests. For something as woolly as "intelligence", IQ is pretty much as close as we can get, without trying to claim "it can't be measured exactly so we're not going to even trying to quantify it". Moreover it's pretty obvious that the parent commenter is using "iq" as a shorthand for intelligence, not referring to the results of a test that has to be administered by a trained professional and almost nobody knows the actual value of.

The commenter you replied to made a bad take, but you're basically doing the very thing you're trying to decry, by trying to viciously attack him with accusations of "a lack of knowledge and a desperate attempt to make yourself feel superior to others".
People could already cook up something similar using AuthorizedKeysCommand and similar.

As long as you can upload some kind of key to an external system (eg: short-lived ssh certificate) you can then query that certificate via AuthorizedKeysCommand.

Edit: just saw the comment by the author of the post (https://news.ycombinator.com/item?id=43471793). Yep, it's AuthorizedKeysCommand.

Good job!
I think there are some companies / missions / bosses, who can clearly identify goals and a concrete strategy to achieve them. This, plus some equity, can really help set people's incentives in the right direction such that people want to put in more time and effort.

On the other hand, a lot of companies don't offer either and seem to believe that simply rallying the masses to put in 20% more time (on average) will somehow lead to outsized gains.
Isn't it already patent free in Europe? You can't patent algorithms in Europe. For example MP3 was royalty free in Europe because there was no patent on it.
I grew up on a farm and it isnt hard physical labor that takes a toll on the human body. That is actually the healthy and beneficial part.

It is poor ergonomics and acute injury that does the damage to farmers and trade workers too. Work is physical but there is almost always a smart and safe way to do it.
More like you are pushing your perspective out here. You think he didn't enjoy being in charge of an organization that was building some remarkable products and pushing the possibility of what humanity can build?

I think maybe you would prefer sitting on a beach doing nothing but I bet you this person enjoyed what they were doing on the whole.
Oh! Oh! About 15+ years ago, I once wrote an article asking, “Are you a Programmer or a Coder?” after reading and inspired by a paper Newspaper article. It even became popular on HackerNews and elsewhere.

I got threats of many dire consequences and the like. I ignored and I was OK. Just like I sometimes get threatening emails about my posts on HackerNews, that I ignore and am advised to ignore. ;-)

[I haven’t watch the video in the submission above.]
FIDO authenticators. If the "autofill" doesn't work, you can't be tricked into overriding it.
That's not what investors want to hear, so it definitely wasn't to get funding
>I feel like many bosses want people to allocate more to a job, but don't offer the corresponding upside.

I agree, and I think that if you look back at the early dot com startups that did things like food, recreation, laundry and even housing right on-campus you'll see a culture that tried to actually meet that need in a way that doesn't seem unfair. The idea was "you give us everything you've got at work and everything else will just take care of itself". Then, as inevitable as death, came the investor class demanding more for less and eliminating the benefits with the hope that the sigma grindset would just perpetuate itself anyway.
Beautifully Written!
I think this was sort of what I was also saying, though you wrote it out more succint.

In fact, I might argue that why not take this step further! Like yes, gabe newell has his yachts and he's having fun.
But I might argue that its not his yachts that we aspire. Its his freedom.
And I think its this freedom of having fun which we need to maximize (let's try to df/dx it ,jk) and in my opinion, you don't need tooo much money (100 Million-esque) to do that.

I think even a million - 10 Mill can be great, but even better could be something like how the 4 hour work week recommends. Though, to be honest, my issue with the 4h work week is that you are forced to leave the comfort of job security for once and he says that you can enter any time soon but I genuinely believe that the current job market is rough, so that's the only caveat I have.

For that, I think that you have to be frugal and have a huge emergency fund. Something which suits me quite well actually.
The surreal joy of having an overprovisioned homelab
Yes, they want you to give all you've got and neglect all other aspects of your life. Young people are very good candidates to fall into this trap. Once they burn through those precious years working for somebody else and get none of the upsides they get it too. But there are always new young people ready to "change" the world.
PayPal isn't necessary in Europe because banks are properly regulated and hence provide the same service for free.
Tesla has made about 8 million cars and is "worth" about $800 billion. $100k per car. Everything about Tesla is completely divorced from reality.
I cannot quite articulate why, but I really love the character that is (was) David Lynch. RIP