skysight-inc/HackerNews huggingface dataset:
How does it work when candidates can use AI?
Most features are already supported on x86 CPUs, you can pip install mlx on Linux , and you can even use it on Windows (no official binary release yet but it is building and tests are passing).
you probably need to re-define “most” :)
Some of you are ready for an argument, you responded to my post yet seemingly missed the very first sentence fragment:

>Not that this isn't a serious attack vector

At no point did I say or imply what you put in quotes.
> Artist illustration of a Dyson sphere under construction

How about mentioning that it is generated?
I'm not convinced the people of Doha or Alberta would consider their day to day lives adventures
CSS Form Control Styling Level 1 – W3C First Public Working Draft
not an issue unless candidates will be forbidden from using AI at work
Jeffrey Klein, a founder and top editor of Mother Jones, dies at 77
How are you defining hype, here?
That's what console ninja's new thing is supposed to do. I haven't used it yet as you have to pay.
https://archive.ph/JUagQ
For context, some moon rovers have radioisotope heaters,

https://en.wikipedia.org/wiki/Chang%27e_4#Chang'e_lander_and... ("Both the stationary lander and Yutu-2 rover are equipped with a radioisotope heater unit (RHU) in order to heat their subsystems during the long lunar nights")

https://en.wikipedia.org/wiki/Lunokhod_1#Rover_description ("During the lunar nights, the lid was closed, and a polonium-210 radioisotope heater unit kept the internal components at operating temperature")

https://en.wikipedia.org/wiki/Radioisotope_heater_unit
Yeah, "obvious" critical vulnerability that is easy to use against any Nextjs app, spend 2 weeks making a fix and then announce on Friday evening that all Nextjs apps are free game. Lovely. Luckily doens't affect any of the sites I'm responsible for, since I hated middleware and most of the Nextjs "magic" features already.
Fahrenheit doesn't match the 1-100 scale, though - Celsius does. 0 water freezes, 100 water boils.
While it's true that running code in isomorphic manner by definition gives you more footguns, you can mitigate it somewhat if you architect the framework with that in mind. In rust land for example, you can just not implement "Serialize" trait on your sensitive data structs and it can't leave server realm without developer jumping through some hoops.
We do have self car driving by now. No drivers. Easy to find in SF and many other cities. It's not yet available everywhere, but as the Amara's Law describes, "we tend to overestimate the effect of a technology in the short run and underestimate the effect in the long run".
Vibe Coding a Product in 6 Days
Firejail and bwrap can do this in a relatively convenient way, but adding nix shell on top of that is quite clumsy.

In a regular distro, it is tolerable, but a better UI would be great.
They’re different tools. If I were building a JS server for a backend, I’d use Express. Next gives you things like server side rendering and static site generation out of the box, and abstracts/blurs the line between server and client code through its paradigms. For better or for worse.

The deploy infrastructure is quite nice. Nextjs is surprisingly low config, even if you forego the Vercel deployment route it’s not difficult to generate a static site or docker container
“Bypasses auth” is a weird way to put it, although everyone seems to describe it in those terms. It bypasses middleware, which is bad (and embarrassing for Vercel), but middleware shouldn’t be responsible for access control. The middleware shouldn’t be doing much more than redirecting to the sign-in page if you don’t have a session.
That's quite a failure of creativity. Like Google with their "I'm not touching you" profiling by metadata, you don't have to identify an individual to be able to target them.

There's also an incredible asymmetry of information in these fields and industries. What makes you think you know enough to say that protected data isn't being laundered, legally or illegally, through private companies around the globe to inform the very opaque pricing of medical services and insurance in the US?
It's a self selected online pool, so not very trustworthy.
ProbLog? https://dtai.cs.kuleuven.be/problog
American, I think we use fractions all the time: 7/8 inch hardware tools, 3/4 measuring cup in cooking, etc. Especially awkward when you have human distances, because you have to mix feet + inches: 3 feet 4 and 1/4 inches.

It was a dream once I got a metric tape measurer and realized that using centimeters eliminates the need to do annoying conversions.
Can you share the code it produced?
Domu Technology Inc. (YC S24) Is Hiring a Vibe Coder
If you cuss at Claud enough it will cuss back at you! What's the best trash talk you've been able to get it to produce?

>OH SHIT you're right! We have duplicate mouse handling:

>HOLY SHIT. Let me analyze what's happening:

>HOLY SHIT. NOW I get it. We're calculating the SAME THING in TWO different places:

>You're absolutely right - I fucked up by removing the loading material completely. Looking at the diffs in shame, here's what needs to be fixed:
How do you know it won't be maintainable? based on your current knowledge?
It's a lot less than 90%. Seems like they've exhausted the TAM and there's no one else to sell tests to.
This vuln doesn't really have anything to do with that premise. Middleware always run on the server.
This vulnerability has nothing to do with isomorphic code, right? Next middleware only runs on the server (or on “the edge,” which is still a server even if it’s running in a browser-esque environment).
Enron did the same thing before they imploded:

https://bsky.app/profile/schooley.bsky.social/post/3lkwgcqqo...
> No real human would go four links deep into a maze of AI-generated nonsense.

Why do I doubt this.
Why should it be fair use? Why would being a derivative work not be OK? There is a massive corpus of public domain and FOSS works. Likewise plenty of permissively licensed government created datasets. There is no reason why any corpus created from these sources is insufficient.
Yup, it's less to do with atmosphere and more with exposure.

Shots of stars at night have exposures of a few seconds to get them to appear. Shots in the daytime are more like 1/60 sec.
I get the commercial/legal angle, but from the viewpoint of AI being something we as a society have an interest in developing, how should this work?

Do you want to severely limit evolution of models by having them pick (and buy) a tiny subset of all books?

Should every training run put money into a pool that gets paid out to every rights holder of every book that has ever been published?

Should Meta buy a physical or electronic copy of every book they want to use for training? That has zero impact on revenue for individual authors.

Would they be paid by word, by token, by book? This makes little sense. We don’t charge people for the knowledge they acquired while going to the library over 50 years, AI just squeezes this into weeks. Our legal framework simply doesn’t fit.
We have employees who sell their plasma because they've been losing money every year and are afraid to also lose their jobs. Wages are stagnant for the working class.
All models are wrong, some models are useful. Nearly always at least one model will be useful enough. Most if not all of these models come with interesting properties that allow for analytical problem solving.
So in addition to being a racist, the hacker is also a moron?

Many such cases.
https://cendyne.dev/posts/2025-03-19-vibe-coding-vs-reality....
Microsoft is using “like” in this case to be a simile.

The passkey is being compared to a digital version of a physical key, the brass object used to unlock doors.
wtf is this and why is it in the front page
I think this marks the end of Oracle.
adding a "created_by" tag is not opt in. it's opt out. you are de facto choosing how OSM volunteers must approach their work, without their consent.
They might have missed a "K" in the range. $5K to $8K monthly.
Ask HN: If you could start over, hardware or software?
If you had to start over in 2025 as a founder or as a student, would you go all in on software or hardware?
> On 21 March 2025, CloudSEK’s XVigil discovered a threat actor, "rose87168," selling 6M records exfiltrated from SSO and LDAP of Oracle Cloud. The data includes JKS files, encrypted SSO passwords, key files, and enterprise manager JPS keys.

That's bad
Sounds like they need an SQA to proofread their job postings, too:

Compensations Range: $8 based on the individual's location, experience, qualifications, and applicable federal and state minimum wage requirements.

Whatever that job pays, it won't be enough.
Unfortunately it's really hard to put the same kind of accountability on yourself compared to that of a professor gatekeeping an accredited degree. Personally, arbitrary goals don't really motivate me as the acknowledgment of its arbitrariness overrides any pursuit of reward.
The locations indicated in the job descriptions imply the jobs are not US based, but LatAm based which have lower minimum wages.
After Lunar Disappointments, NASA Hits the Jackpot with Blue Ghost
Don't think so, nobody sane was buying Oracle for years and yet they are still operating
5 years? I could swear that I took a ride yesterday in SF with Waymo.
> does not constitute fully general intelligence but the difficult part has been finding things that they cannot do

I am very surprised when people say things like this. For example, the best ChatGPT model continues to lie to me on a daily basis for even basic things. E.g. when I ask it to explain what code is contained on a certain line on github, it just makes up the code and the code it's "explaining" isn't found anywhere in the repo.

From my experience, every model is untrustworthy and full of hallucinations. I have a big disconnect when people say things like this. Why?
What about Log4J? Just to answer your question, we’re talking about two completely different ecosystems!
They are just gonna say that just like that without elaborating?
https://news.ycombinator.com/item?id=43427985
--ro /usr does not apply to /usr/bin. change it to --ro /usr/bin and then cat will refuse to run.
Oracle used their own unpatched product for over 10 years? Yikes.
To point out the obvious.

Unauthorized copying (aka pirating) is definitely a copyright violation.

That appears to be a huge problem with the large models and training. They don't secure legal access to the materials they train on, and thus fail to compensate authors for their work.

AKA students are required to buy or otherwise obtain legal access to their text books(like checking the book out of the library).

Training AI should play the same rules humans students have to follow.
Can I suggest also adding a tag for ML originated features that's not specific to your demo/app? Maybe this can help put extra eyes on them and/or help prevent them from polluting the DB wholesale. Maybe client apps could have a toggle to allow/reject them.
"Luckily doesn't affect any of the sites I'm responsible for, since I hated middleware and most of the Nextjs "magic" features already."

This is probably the most important comment. You don't have to use Next.js, and if you do have to, you don't have to use everything they have in it.
> Why the heck should a build configuration tool like autoconf be unable to function without a compression tool like xz? That makes no sense on its face.

At face value, both autoconf and its cousin pkg-config are overly complex dogshit software - both with circular dependencies - that should have been retired long ago in favor of something else. I scream with joy when I use software that uses its own bootstrapper or cmake.

Before you think "but I've never had this problem, you must be bonkers" - try building software on a fresh Solaris box with no GNU anything installed and you need to install one of these monstrosities with their circular dependencies. Your hair will fall out before you're done.
And no doubt making boat loads of cash
> if I told you 10yrs ago that we'd have AI that can do math/code better than 99% of humans

This not even remotely close to true. Like not even a little bit. I use Cursor and Gemini for work daily and I'd be hard pressed to think AI is a "better" programmer than any professional software engineer. Sure it makes writing code faster and more efficient, because you just click tab and three lines are written for you. It absolutely isn't better than me at coding though.

The claim about math is even more unbelievable than the claim about coding. We still don't have a single theorem proved and published by a LLM without human aid. LLMs barely follow a discussion in basic topology. It's incredibly ridiculous to state they're better than 99% of people. More like 0% of mathematicians and maybe 50% of college freshman.
SpacetimeDB: Combined database and backend for MMO games
> React added a lot of complexity to the front end,

I keep hearing this but I disagree completely. Does no one remember Angular.js? Backbone? Ember.js? Even my favorite framework, Knockout, had lots of complexity.

SSR has been misused widely for years and we’re now starting to see the effects of that. But there ARE great use cases for SSR.

And frontend dev is the easiest it’s ever been. Run Vite Create and you have a fully working React SPA that can deployed in minutes on Render.com. No more messing with Webpack, or Bower, or Brocolli, or Gulp or Grunt or whatever madness came before. Frontend dev is in the best place it’s been in years.
Not $ 5 nor $ 8 for this job.
Huatulco was a beautiful and safe place, many burnt out American kids found or lost themselves there. The cartels were not active in this area and the military had many checkpoints on the highways. Zipolite was sort of how you’d imagine California in the 60’s, people nude, openly smoking bongs, public showers available to all for pocket change. Affordable hostels, enlightening evenings.

I am sorry to hear of this shift. At one time, the original population of Mexicans was forcibly moved to government land which is arranged in a grid pattern, our guide lived in sector “U2” for example. You can see the grid where the local people live in google maps.
The idea that you can’t train on copyrighted materials is ludicrous, imho. So apparently you don’t want humanity and the future of intelligence to benefit from your work? You just want it to keep it locked up in some archive that virtually no one ever reads?

Might as well say the people who read your books aren’t allowed to teach the concepts or theories. Completely asinine argument. If you don’t want the knowledge to proliferate, then don’t publish. They’re not copying and redistributing.

Meanwhile, jurisdictions outside of us copyright protection will leapfrog us because we can’t get out of our own way.
In contrast to typical corporate crime, it seems there is documentation of upper management signing off on the decision.

Are there other juicy examples where the C-suite can be directly implicated? Always assumed that management knew how to leave instructions vague enough so as to keep their hands clean (a la meddlesome priests). The bad actor was always some middle-manager gone rogue.
"... for it's fourth consecutive time".

Given the rate at which trees grow, perhaps they should change this to tree of the decade?
Eh... still kinda fucked up in my opinion. Should be treated equally.
On YC company was offering an unpaid gig. (Although I imaging being open source that person would retain copyright?)

Yeah lots of startups YC or otherwise are playing global arbitrage. And now AI arbitrage. It is a race to own means of production!
What other ones have you tried recently?
I noticed Netflix doing this while watching this series: https://about.netflix.com/news/beyond-goodbye-premieres-nove...

It was so jarring I couldn't watch it and switched to Japanese with subtitles. Their mouths looked so stiff and unnatural and out of sync with their expressions that all me and my wife could talk about was how bad it looked.
Someone deleted their reply strongly calling you out because "Why would they even mention minimum wage?!".

Probably because they found that this is likely the case: https://www.workatastartup.com/jobs/74272
And the misbehaved bots follow the path right into the pit and then...the Void of Infinite AI Abyss.
Show HN: Blip – Build 3D games on iOS with AI code generation
You might enjoy The Beach by Alex Garland if you haven't already read it.
Indeed this is how it generally works with rentals. GP’s situation can just be reframed as “you get a ticket handed to you for [any small infraction] and leave the country without paying”.
The orders of magnitude are different here. Replacing something that becomes a huge problem within two hundred years with something that (potentially) becomes a problem in a few thousand years -- really is better than spending valuable time on developing an "ideal" solution
After playing around with this model a bit, it seems to have a tendency to reply to English questions in Chinese.
Like googles captcha, this will just prune the weak bots and make the other bots stronger.
Meta's more open models aside, are the other copyright abusers giving out their model for free?
And just several minutes of waiting for a response if you use a meaningful amount of the context window
No, states fuck with DNS all the time; it's probably the single most legible control point on the Internet for governments.
There was a link on HN not long ago about how bird flu wasn't contributing to egg prices in the US anymore.

If people see the message "X is expected to rise in price!" enough they're more likely to bear the increase instead of curtailing purchases.
Very unlikely things can happen, sure, but they can just as well be positive:

What if an unknown biological relative of mine happens to be a billionaire and gifts me $10M like he does for all his other relatives?
Can we take a moment to appreciate how good the disclosure and coordination process on this were?

* Reported to the maintainers privately

* Patch published and CVE issued before wider disclosure

* Automated fix PRs created within minutes of public disclosure (and for folks doing proactive updates, before)

The above is _really_ excellent. Compare that to Log4j, which no CVE and no patch at the time it became public knowledge, and it's clear we've come a long way.

Supply chain security isn't a solved problem - there's lots we can still improve, and not everything here was perfect. But hats off to @leerob and everyone else involved in handling a tough situation really well.
We're launching a fully encrypted option for personal genomics called Monadic DNA.

https://monadicdna.com/

We use fully homomorphic encryption to ensure only you can see your data and your results.

The app will be live in a few weeks.
> This is a strange take. Why or how would you ever see someone do it? It is very unlikely you would be aware of them.

You would see someone be proficient at math or physics and then get surprised they had no degree, just like anything else. You can find such programmers everywhere, even algorithms are very easy to self study compared to math and physics, but people proficient in math or physics without a corresponding degree is almost non existent.

> Maybe it’s just going through a specific set of rote calculations and lab work needed.

I think the biggest problem is error correction. Everyone who learns math and physics accumulates errors as they learn, and if nobody is there to correct the wrong assumptions they will just continue to accumulate. To do that you need an instructor grading your tests, or at least almost everyone needs that since they can't grade their own answers fairly, their incorrect understanding leads to incorrect grading of their own answers.

This is why programming and algorithms is so easy to learn in comparison, since there its easy to grade yourself. If the program works you did it right, otherwise not. For algorithms there are plenty of sites you can practice implementing algorithms for problems and they tell you if you did it right. There are no such sites for math or physics, so there unless you are a genius at self correcting you need an instructor to just get proficient.

Edit: In short, if you can write code that works the first time you run it without testing etc, and you can do that over and over and never be wrong, then you can self learn math and physics without an instructor.

But if you need to execute your code and test to get it right, then you need an instructor to learn math and physics correctly as well.
Is all that folks "Why is Europe like that" from US? In that case, remember that TikTok is going to be banned because it is destroying US social networks business. On the contrary, this is an official order after the proof of copyright infringement, and targets the specific devices that are attached by people here in Italy on their TVs to stoke content (pezzotto).

It's not single people that go watch some streaming, it's a criminal organization that resells copyrighted content like footbool, F1, ... and make the customers pay (less than Sky of course). This is stealing.
https://fuchsia.dev/fuchsia-src/get-started/learn/intro/sand...
I think the main issue is that authors published books with the intention of human not machine consumption. Nobody though to put a contract in a book saying "human consumption only, not to be used to Train AI". Meta pirated the books in question, but what if they had bought a copy. Oddly cracking the encryption, a violation of the DMCA might be the infraction..

The courts have some tough questions to answer here.
A pinhole camera is probably good enough and safer. https://en.wikipedia.org/wiki/Pinhole_camera
The main risk is denial of insurance due to genetics. Insurance company buys database and uses it in the future to deny claims or terminate policies.
cross-tenant traffic leakage. For example, initial connection packets (like TCP SYN packets) could be broadcast or misrouted to unintended servers! If Hetzner servers aren't isolated at L2, it means your server might be able to see or interact with other servers in the same network segment. ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses on a local network. If your server can send/receive ARP messages to/from other customers' servers, it suggests something... https://www.cables-solutions.com/wp-content/uploads/2017/05/...
>> Why the heck should a build configuration tool like autoconf be unable to function without a compression tool like xz? That makes no sense on its face.

> At face value, both autoconf and its cousin pkg-config are overly complex dogshit software - both with circular dependencies - that should have been retired long ago in favor of something else. I scream with joy when I use software that uses its own bootstrapper or cmake. Before you think "but I've never had this problem, you must be bonkers" - try building software on a fresh Solaris box with no GNU anything installed and you need to install one of these monstrosities with their circular dependencies. Your hair will fall out before you're done.

I've used & seen plenty of the mess of autoconf, thank you. It's a hell I don't want to go back to, and it's a hell a lot of people successfully avoid. But even then, I've also never noticed it requiring compression or decompression, which is partly what boggled my mind at the statement.

In any case, the question was: why should autoconf have a hard dependency on xz? Your response to that was autoconf is complicated and has circular dependencies? How is that a response? That was the premise of the question, not the answer.
lol. This is a really lovely contest, but with the near-glacial pace of tree growth, I'd hope they'd mix up the criteria just enough every year to keep it interesting to us fast-moving humans.