skysight-inc/HackerNews huggingface dataset:
I wanted to share some updates on Local Deep Research since posting here 12 days ago. Thanks to everyone who gave feedback and suggestions - the project has improved significantly with your input.

Recent improvements:

- Better inline citation: Sources from PubMed, arXiv, Wikipedia, etc. are now properly cited directly in the text

- Improved report structure: Reports now have better organization with logical sections and clearer source attribution

- Added support for multiple research domains: Works well across scientific, historical, economic, and technical topics

- Enhanced search iterations: Now performs multiple rounds of research with follow-up questions for deeper analysis
- More flexible LLM integration: Works with pretty much any model (local via Ollama or cloud-based)

- Expanded search engine options: Easy to add new sources for specialized research

For those who mentioned concerns about report quality and organization - we've made significant improvements in this area. The citation tracking now provides much better provenance information throughout the research pipeline.

I'd also like to thank HashedViking who joined as a contributor and has been improving the UI/UX side of things. We're committed to keeping this as a truly local, privacy-focused tool that doesn't rely on expensive APIs.

For anyone interested in contributing, we're looking for help with:
1. Further improving report organization
2. More local search engines and sources
3. Documentation and examples
4. UI/UX enhancements
5. Testing with different models and research domains

The project is at: https://github.com/LearningCircuit/local-deep-research/

What features would be most useful to you in a research tool like this? We're particularly interested in ideas for better knowledge organization and making the research outputs more valuable.
Fahrenheit is very intuitive if you are in Danzig in one particular year... [0] otherwise.. It's a historic accident. If you want to root your measurement system in human experience your measurement system will be outdated in a couple of decades. Because humanity changes! That way there will always be old/antiquated/historic units. Metric basically accepts that and uses easy to convert units and leaves the intuition forming to the humans gathering the experience

[0] Apparently the story is disputed.. But the way I was taught it was: 100F == typical healthy human and 0 F == lowest temperature in Danzig in the winter 1708/1709. This makes it (by construction) a more natural fit to human experience (especially one in northern Europe)
https://web.archive.org/web/20131015045624/http://www.deutsc...
Agree. It was an unnecessary thing to do.
I don't think people like GP are arguing that there is no place for these frameworks. the argument is that there are too many people just using these frameworks in projects where it may not be needed and blindly running "npm create react-app" or whatever. Then you add something like NextJS on top which makes things even worse.

I would argue that majority of NextJS projects are not needed to be built in NextJS but could do with simpler front end JS.
The lag & missing key details
This is why many people don't trust "The Science". It's the positivist materialist institutionalist gaslighting. If the conflicted institution hasn't published the opinion or the measurements then it doesn't exist. Don't believe your lying eyes or ears. If you notice somethingnot published, you are automatically wrong. All whistleblowers must be discredited.

Isn't this a tactic of con artists & cult members who have much to gain from public perception & policy?
I mean, I've worked on some companies where management would've seen what Tim was actually doing and nonetheless reply with "We're not paying him to hang out with other developers, we pay him to sit at his desk and code!"

Vox Jira, Vox Dei. Make sure you're not working in a company with such kindergarden-like approach at managing people before attempting anything like that.
Maybe im misunderstanding how people are building endpoints these days, but every post about this I see how it can bypass auth.

Wouldn’t this bypass auth only for sites where auth is true/false?

I’ve never worked on a site were auth is a boolean. Auth is always a relative. The middleware is only there to identify the user. Then when querying for objects, you query objects related to that user.

Or if you are serving an admin page you check that the user is an admin.

I honestly find it more astounding that people put an admin security check to check the url of a page and redirect away in a middleware and no security on the views themselves.

Is this form of checking paths in middleware officially from NextJS or did people just get lazy? Seems like the worst way to build auth I could ever dream up across any framework or language.

If a middleware is bypassed all endpoints should return empty responses. In my nextjs apps the middleware is simply a convenience method for the user if they are logged out they get redirected to the login page. But all api endpoints check for the active user and serve objects relative to the user.
What were your expectations and how did it exceed them?

I have to say, on they basis of your comment I just decided to try Cursor, and I'm sorry to report it immediately disappointed me.

First thing it did was it told me it found a syntax error in code that compiles perfectly. It went ahead and added a closing brace, telling me that "I've fixed the issue by properly closing the method with its brace. The method now has valid syntax and should compile correctly".

It was never broken! This seems like such a regression of tooling; we have parsers for the purpose of finding wrong syntax, and they don't just make up things like missing braces that aren't missing, and then break your code by inserting them. This seems like developing in Kafka's nightmares.

Should I even bother continuing to evaluate Cursor, when it can take perfectly valid and correct code, and immediately make it worse? What other nightmares will it reveal to me, and do I even want to know? I'm kind of astounded at how bad that first impression was, couldn't have been worse really.
Tanka People
Notably it's Systems Hungarian which makes no sense whatsoever. This notation is a way to mention the kind of a variable in languages which don't directly express that. It starts in BCPL which doesn't have types, so if boop is a boolean and blip is a counter we need to annotate the name of the variable as the compiler doesn't see any reason you shouldn't use boop as a counter and blip as a boolean, so we maybe call them bBoop and cBlip or whatever.

Now for the team writing say Excel, they have a typed language so they don't need to distinguish booleans from counters, but their language doesn't have or encourage distinct Row and Column types, those are both just integers, so "Apps Hungarian" uses the name to annotate variables with such information, clInsert is the column while rwInsert is the row, if I am reviewing code which is to inspect columns and it checks clFooC, clBar and rwBaz well why is it using a row number for a column? That warrants closer inspection.

Unfortunately, this practice was divorced from its rationale and infected teams at Microsoft who had a typed language and didn't have kind information beyond that, but felt the need to use this notation anyway, producing "Systems Hungarian" where we mark out pFoo (it's a pointer named foo), and lBar (it's a long integer named bar). This is very silly, but at this point it has infested an entire division.
I don't want to sound negative, but why do you want to go back to school? Is this about changing career paths?

If you're already working in software development and you plan on continuing that, then I don't think the net benefits would outweigh the negatives you outlined (high cost, possibly leaving job to have the time to commit in person).

I think a better approach may be the online classes and/or self studying (computer architecture, etc). You can always follow multiple universities syllabi and do it yourself.
it doesn't have bluetooth but has speaker/mic? Am I getting that right?
I think GP was talking about saunas and not ambient temperature. So 100C not 100F. Still the argument remains the same: Low humidity (and reasonably short durations)
They are too smart to repeat the mistake of the IBM PC again. Even with "open" ISAs, kernels, they will rules-lawyer out the blackbox part out just like with Android phone makers etc.
I'm struggling to think of any technological advancement in the past 20 years that's saved me time. The only real change has been a shift to WFH, but that happened independently of technological change in that era. Even things like screen sharing and remote desktop were possible before that time.

25 years ago, sure: online shopping/banking, email and chat -- these are all things my Blackberry or Nokia could handle. The touchscreen smartphone hasn't really moved the needle much in that regard.
Loved the article. Texted it to my family group chat. My wife told me she had to close it immediately because the ads were so bad.

I checked it in a browser without an ad blocker. TWO overlay (one after the other) that covered the entire content of the page. Then ads, ads, and more ads in the content.

I get that the BBC needs to make money to produce content. But what good does it do for an advertiser to have ads be so annoying that people without ad blockers are just closing the page? What good does it to for an advertiser to be one of ten different brands being advertised on the same page?
Actually, there are a number of ways in which pigs and humans share physiology which makes us susceptible to shared disease vectors. Perhaps most obvious is our skin. Pigs and humans are the only land mammals who have what amounts to sea mammal skin, leathery and thick with fat deposits right at the dermis.
A crash course in package managers
Unitree G1 Humanoid Agent [video] (2024)
Unfortunately a lot of people nowadays don't seem to notice or care and you even get weird arguments like the one about "Go style" vs "GNU style" below. I've also heard arguments about making it more "user friendly" (at the cost of any power user wanting to re-write your tool).

I wouldn't mind if GNU style was consistently extended to allow annotated required arguments. But that's about it.

That being said. As a rule, if your command line utility has enough positional arguments that you're forgetting which one is which, it's a badly designed command line interface. Most often it's because you're doing too much, not settling on sensible defaults for things which you shouldn't need to specify every time, or just doing something outright weird.
I knew this man the instant they said he's in his seventies and still taking boar. Who knew Uncle Bram was still kickin' around after all these years?
Book List – Celebrity Book Recommendations
Thanks for pointing this out! I had submitted the direct link to page 16, but it seems that Hacker News has edited the URL.

Here's the direct link:

https://archive.org/details/apple-iie-design-guidelines/page...
Related LWN article:

https://lwn.net/SubscriberLink/1014603/c791efdd5a4ca47c/
Just use MIME multipart content-type to wrap an HTTP message inside another. This is commonly done for batching requests. Here is an example of how it might look like: https://cloud.google.com/storage/docs/batch#http
It seems hard for us to say, from the outside, how the deal ended up for them. They spent the experienced programmer’s time setting up a team of five. If they’d had GP train one person and work on code as well, they’d have one good new engineer and some code. Now they have five good new engineers.

I mean, it depends on how long it took, how much code GP could have produced in the meantime, and how sticky the lessons were. There’s certainly room to believe GP is right and it was a good trade for the company.
This reminds me of the chicken problem:

https://medium.com/heroicpresence/the-super-chicken-study-pa...
Interesting, do you mean you hope for more tariffs and trade restrictions? I’ve never considered ecology might be impacted by those kinds of tools
`malloc(3)`. Many of the functions in string.h.
> Work(ed) for a company super big on a force of agents.

> RIFed this year

Yeah that's why they are big on the force of agents, so they can justify trimming their workforce

Anyone who doesn't see this is kind of a sucker
A USB Interface to the "Mother of All Demos" Keyset
> yeah, what the company should have done, is only hire experts!

I did not say that, and you know it: "What the company should have done is hire you and one new grad (rather than five)".

> I won't work for an MBA bean counter. I want to work for a company that's willing to invest in people.

Um, IMO someone who hired a team of 5 new grads sounds like an MBA bean counter and not someone that's willing to invest in people. It sounds like they brought in an experienced programmer (you) only because the preexisting pathological team was (predictably) failing.

> BTW, that project would have died with just a team of two because I did eventually leave that company. So that suggestion would have killed that project. System resilience matters too.

And you could not be replaced because.. why? People leave, other people are hired. Life goes on. The new grads may leave too.
What evidence would convince you? If I know the bar, I can see if it can be met.
For whatever reason gmail search has gotten a whole lot worse recently. Between that and shoving Gemini in my face everywhere I’m pretty pissed off at Google. If our whole org wasn’t so locked into Google workspace and there was a good alternative that wasn’t Microsoft 365 I would definitely change our org.
I feel people from post-Communist countries heavily underestimated the importance of labour law and social systems for the British. They were extremely cynical towards these, while for British both are part of their national identity as the industrial revolution took place on their soil. The competition on labour market was indeed the strongest argument that British populace picked up while voting for Brexit. The "white faces" and "black faces" dispute is irrelevant in UK, because in the racist "theories" Poles, Irish, and many others are not even white, while people from the former colonies are their countrymen. Did I earn my UK settled status with this comment?
I'm more influenced by this passage:

Means withdrew from her medical residency at age 30. She has attributed this decision to the lack of training she received about nutrition and the underlying causes of chronic disease. Means dedicated her practice to functional medicine, which focuses on the root causes of disease.
Techno-optimism is the domain of people who're confident that they'll be part of the managerial class that gets alerted when other workers are going over their bathroom break allotments.
There are a lot of small details to know in order to use Windows APIs correctly. Which is stressful. On the other hand, comparing with Unix, the APIs are much much wider and are rarely if ever deprecated.

Unix APIs are a couple of syscalls and library functions. If you want to achieve more (like video, audio...) you have to resort to "optional" libraries that may have bad APIs too, but they aren't core Unix and can be replaced by something that is hopefully better.
How serious this vulnerability is depends entirely on how the site that's being attacked uses middleware. The auth thing is just the most obvious example of how an attacker can do bad things if they have the ability to selectively disable middleware by passing names as a colon separated list in an HTTP header.

(I've built sites that would have been affected by this in the past, had I used Next and middleware for auth. I've worked on plenty of systems where there are only a small set of users each with the same level of permissions - gating private documentation for example.)
Exophonic Writing: Crafting Fiction in a Foreign Language
SeL4 is proof that microkernels are safe, efficient and scalable yet we are stuck with big honking Linux kernels in 2025. That said more and more drivers moving usermode anyway so it's a wash in the end.
Do you have experience being a tech lead and/or a manager? Tech leads and people managers are two explicitly different roles in many organizations, for good reasons, including, but not limited to them being both full time jobs. It certainly depends on the company and the size of the team and other things, but many many tech leads are not at all comfortable hiring & firing, nor with interviewing and prioritizing work and product managing and meeting with management and approving time off requests and dealing with complaints and deciding raises and promotions and dealing with equipment and managing budgets… the degree to which you’re downplaying these roles is what leads me to have to assume you might not know what’s really involved.
> no evidence of in the wild exploitation

That's how zero day exploits work. People keep it quiet so they can keep exploiting it.
Sounds like both a lack of trust and communication between you and the team.

> If you have better metrics or management skills than what everyone in the world has figured out, myself and many others would gladly adopt these approaches.

Oh boy...

edit: One issue might be they fear that bad news will lead to a knee jerk reaction that gets them or their teammates fired. They should feel comfortable to encounter problems and openly discuss them in the open with out fear of repercussions. In fact, I would argue this is one of the major advantages of a team; pooling collective knowledge and abilities. If people fear honest communication then the performance of the team is impacted. The manager has the greatest ability to fix this, IMHO...
Is a Taylorite a known expression or are you riffing off the idea of a Taylor series? Haha.
https://deadspin.com/the-future-of-the-culture-wars-is-here-...
The culture of security within FAANG could not be more opposite than the way that vercel handled this. In big tech, this would have been looked at in 48 hours, and across thousands of systems all oncalls would have been paged to do an emergency deploy. Probably within 5 days, almost the whole company would have deployed the patch.

Vercel to me seems like it is run by hype men, and the CEO is certainly technical, but these people are not in the weeds in the way they come off.
See also: https://numara.io and math.js
It took me a longer time than I care to admit that it’s pronounced “tan-oak” and not “tan-o-ak”
This particular administration doesn't appear to care about liability. They quite publicly dare other branches to do anything about it.

Because of that I don't think this comes from the top. But doing so would be entirely in character.
That's an intersting point. I don't recall ever seeing a ticketing system where you could assign a ticket to multiple people.
The vulnerability can be understood through this code snippet:

const subreq = params.request.headers['x-middleware-subrequest'];
const subrequests = typeof subreq === 'string' ? subreq.split(':') : [];
// ...
for (const middleware of this.middleware || []) {
// ...
if (subrequests.includes(middlewareInfo.name)) {
result = {
response: NextResponse.next(),
waitUntil: Promise.resolve(),
};
continue;
}
}

Pass an x-middleware-subrequest HTTP header with a colon-separated list of middleware names to skip.

https://github.com/vercel/next.js/blob/v12.0.7/packages/next...
Well, as long as the hardware underneath it also enables the construction of a secure system.

I don't think we have any such option right now.
Yeah there are a couple of (3) functions (i.e. not syscall interfaces) that return pointers. It's very common for those to return NULL on error, hardly a surprise. It will also blow up with a segfault should you forget to check success.
Macroeconomics is very different from microeconomics. Your spending is my income and my spending is your income. If the government spends a dollar, where does it go?

Presumably it goes to some sort of goods and services. The employees pay income taxes. The businesses pay corporate taxes. And so on.

Similarly, when a business lays off 10,000 people, it's not their problem anymore. Whereas from a macroeconomic policy perspective, "everybody" is the government's responsibility.
To be clear, one can and probably should restart the phone after shutting it down, just so long as one doesn't login with the correct password. It might even be useful to enter the wrong password twice to further reset any memory imprints.
Exactly. If you don’t consider how people might game the system, you are in trouble. Little fixes like this open other possibilities for gamesmanship and now people fight over whether their contribution was good enough to be included in the ticket.
Since when did researchers decide to start titling their papers like clickbait YouTube videos?

The “Stop doing [conventional thing]!” title formula is, for whatever reason, the title that I always find the most annoying.
There are between 100-200 cases of brucellosis in the US each year, so I would call that rare. It's common worldwide, but not where this patient lives. Also, the species of Brucella is a less common one in the US. Erlichiosis is closer to 1000 per year.
"3D Printing My Way Out of a Minor Annoyance" [video]
"initial response received from the Vercel team explaining that versions 12.x were no longer supported/maintained"

That doesn't mean they shouldn't issue an alert to developers still
running those versions advising them to upgrade ASAP.
University degrees provide (among other things): Job training, a broad, well-rounded education, and a piece of paper at the end that certifies you got both. You may have independently studied the arts long ago, just like you may already have been a math or programming wizard, but the university doesn't know this and cannot certify it in writing.

Reasonable people can argue whether or not universities -should- just be single-subject job training. But as it stands today, they aren't.

I agree with you though: If OP just wants training in a single discipline, there are tons of online engineering courses, many of them free. That's not what a university degree is for.
Something I never see discussed (though if you have resources on the subject, please share them with me) are the very real and important difference between believing and wanting to believe and feeling better about something without the something itself being better.

When I feel like my symptoms have improved, that is factually distinct from my symptoms having improved. Ok, so far so obvious. But it is also factually distinct from me really feeling like my symptoms have improved. It may very well be that I'm just not sure and that I subconsciously lean toward giving the benefit of the doubt as a tie-breaker for my own uncertainty. And then I can feel better about that without the underlying symptom improving, and that is definitely factually distinct from the symptom improving.

The impact would obviously be age-related, since age equals exposure to factors like social influence, introspective knowledge of the limits of self evaluation, and so on.

And it is not the same thing as a placebo effect improving the symptom itself. I can be experiencing the exact same amount of pain but wishy-washy on the evaluation, but people report on the placebo effect as though it means I experience less pain. But maybe I'm just less frustrated by the pain, or less inclined to admit the pain to myself or to others, or less inclined to trust myself. Maybe believing feels good, so I want to do it.
It's not worth a gamble in case the key has not been wiped yet.