frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Helm local code execution via a malicious chart – CVE-2025-53547

https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm
42•irke882•1h ago•2 comments

RapidRAW: A non-destructive and GPU-accelerated RAW image editor

https://github.com/CyberTimon/RapidRAW
117•l8rlump•4h ago•24 comments

Where can I see Hokusai's Great Wave today?

https://greatwavetoday.com/
46•colinprince•3h ago•31 comments

Bootstrapping a side project into a profitable seven-figure business

https://projectionlab.com/blog/we-reached-1m-arr-with-zero-funding
441•jonkuipers•1d ago•98 comments

Breaking Git with a carriage return and cloning RCE

https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384
301•dgl•13h ago•105 comments

7-Zip for Windows can now use more than 64 CPU threads for compression

https://www.7-zip.org/history.txt
13•doener•1d ago•3 comments

Frame of preference A history of Mac settings, 1984–2004

https://aresluna.org/frame-of-preference/
76•K7PJP•6h ago•14 comments

Supabase MCP can leak your entire SQL database

https://www.generalanalysis.com/blog/supabase-mcp-blog
676•rexpository•13h ago•339 comments

Smollm3: Smol, multilingual, long-context reasoner LLM

https://huggingface.co/blog/smollm3
277•kashifr•14h ago•51 comments

US Court nullifies FTC requirement for click-to-cancel

https://arstechnica.com/tech-policy/2025/07/us-court-cancels-ftc-rule-that-would-have-made-canceling-subscriptions-easier/
62•gausswho•8h ago•86 comments

Radium Music Editor

http://users.notam02.no/~kjetism/radium/
188•ofalkaed•13h ago•38 comments

Brut: A New Web Framework for Ruby

https://naildrivin5.com/blog/2025/07/08/brut-a-new-web-framework-for-ruby.html
163•onnnon•12h ago•52 comments

I'm Building LLM for Satellite Data EarthGPT.app

https://www.earthgpt.app/
11•sabman•1d ago•1 comments

Surfing on a Matchbox (1999)

http://news.bbc.co.uk/2/hi/science/nature/276762.stm
19•TMWNN•2d ago•6 comments

Comparing the Climate and Productivity Impacts of a Shrinking Population

https://www.nber.org/papers/w33932
7•alphabetatango•2h ago•1 comments

Xenharmlib: A music theory library that supports non-western harmonic systems

https://xenharmlib.readthedocs.io/en/latest/
60•retooth•8h ago•6 comments

Libpostal: C library for parsing/normalizing street addresses around the world

https://github.com/openvenues/libpostal
32•nateb2022•5h ago•6 comments

Swahili on the Road

https://www.historytoday.com/archive/behind-times/swahili-road
18•Thevet•6h ago•3 comments

Dynamical origin of Theia, the last giant impactor on Earth

https://arxiv.org/abs/2507.01826
83•bikenaga•12h ago•30 comments

Show HN: OffChess – Offline chess puzzles app

https://offchess.com
316•avadhesh18•22h ago•138 comments

Taking over 60k spyware user accounts with SQL injection

https://ericdaigle.ca/posts/taking-over-60k-spyware-user-accounts/
189•mtlynch•5d ago•58 comments

Bulgaria to join euro area on 1 January 2026

https://www.ecb.europa.eu//press/pr/date/2025/html/ecb.pr250708~b9676a9fa8.en.html
201•toomuchtodo•6h ago•157 comments

Choosing a Database Schema for Polymorphic Data (2024)

https://www.dolthub.com/blog/2024-06-25-polymorphic-associations/
27•gm678•6h ago•7 comments

Plants monitor the integrity of their barrier by sensing gas diffusion

https://www.nature.com/articles/s41586-025-09223-4
69•Bluestein•3d ago•33 comments

iPod Linux – Linux for Your iPod

http://www.ipodlinux.org/
10•nickysielicki•4h ago•0 comments

New Horizons images enable first test of interstellar navigation

https://www.newscientist.com/article/2486823-new-horizons-images-enable-first-test-of-interstellar-navigation/
34•jnord•2d ago•2 comments

Can an email go 500 miles in 2025?

https://flak.tedunangst.com/post/can-an-email-go-500-miles-in-2025
288•zdw•4d ago•108 comments

GlobalFoundries to Acquire MIPS

https://mips.com/press-releases/gf-mips/
201•mshockwave•14h ago•114 comments

Blind to Disruption – The CEOs Who Missed the Future

https://steveblank.com/2025/07/08/blind-to-disruption-the-ceos-who-missed-the-future/
115•ArmageddonIt•17h ago•131 comments

Show HN: A rain Pomodoro with brown noise, ASMR, and Middle Eastern music

https://forgetoolz.com/rain-pomodoro
79•ShadowUnknown•13h ago•36 comments
Open in hackernews

Dumb statistical models, always making people look bad

https://statmodeling.stat.columbia.edu/2025/04/18/dumb-statistical-models-always-making-people-look-bad/
118•hackandthink•2mo ago

Comments

delichon•2mo ago
> why it’s often hard to demonstrate the value of human knowledge once you have a decent statistical model.

This seems to be a near restatement of the bitter lesson. It's not just that large enough statistical models outperform algorithms built from human expertise, they also outperform human expertise directly.

gopalv•2mo ago
> they also outperform human expertise directly

When measured statistically.

This is not a takedown of that statement, but the reason we've trouble with this idea is that it works in the lab and not always in real life.

To set up a clean experiment, you have define what success looks like before you conduct the experiment - that the output variable is defined.

Once you know what to measure ahead of time to determine success, then statistical models tend to not be as random as a group of humans in achieving that target.

The variance is bad in an experiment, but variance jitter is needed in an ever changing world even if most variants are worse off.

For example, if you can predict someone's earning potential from their birth zipcode, it is not wrong and often more right than otherwise.

And then if you base student loans and business loan interest rates on the basis of birth zipcodes, the original prediction does become more right.

The experimental version that's a win, but in real life that's a terrible loss to society.

bobsomers•2mo ago
> > they also outperform human expertise directly

> When measured statistically.

THANK YOU. It's mildly infuriating how often people forget that one of the things most human experts are good at is knowing when they are looking at something that is likely in distribution vs. out of distribution (and thus, updating their priors).

jonahx•2mo ago
The original article discusses this explicitly.
AstralStorm•2mo ago
Ah yes, the self fulfilling prophecies or hallucinations based on models trained on models. Overfitting. Ending up in an evolutionary dead end...

Type 4 error of not asking a question one should also exists.

So thing is, suppose you're handling the common cases right - you have software that's say 95% correct. The important bit is how critical the remaining 5% failures are. If one of them happens to be "I give up my computer and data to the exploit" or "everything is destroyed" or "a lot of people die", then the extra 1% better average is no good to any inside observer.

It so happens that a lot of people believe themselves to be outside observers, especially rich.

(What's the success bonus for someone getting treated nicely?)

nitwit005•2mo ago
You don't even need a statistical model. We make checklists because we know we'll fail to remember to check things.

Humans are tool users. If you make a statistical table to consult for some medical issue, you've using a tool.

taeric•2mo ago
I was going to say that it doesn't have to be a statistical model. Notable that statistical models are already seen as less than complete analytical models, for many people. (I think that is almost certainly a poor way of wording it? Largely just trying to say that F=ma and such are also models that don't have conditional answers.)

At any rate, I'm curious on some of the readings this post brings up. I'm also vaguely remembering that human's can have some odd behaviors where requiring justification or reasoning of decisions can sometimes provide more predictable decisions; but at a cost that you may not fully explore viable decisions.

dominicq•2mo ago
As a matter of practicality, it seems that you professionally now want to be firmly in the tails of the data distribution for your field, e.g. expert in those things that happen rarely.

Or maybe even be in a domain which, for whatever reason, is poorly represented by a statistical model, something where data points are hard to get.

genewitch•2mo ago
> expert in those things that happen rarely

Replacement bolt: 15¢ Knowing which bolt had to be replaced: $9,999.85

rawgabbit•2mo ago
OTOH. The blog mentions that humans excel at novel situations. Such as when there is little training data, when envisioning alternate outcomes, or when recognizing the data is wrong.

The most recent example I can think of is "Frank". In 2021, JPMorgan Chase acquired Frank, a startup founded by Charlie Javice, for $175 million. Frank claimed to simplify the FAFSA process for students. Javice asserted the platform had over 4 million users, but in reality, it had fewer than 300,000. To support her claim, she allegedly hired a data science professor to generate synthetic data, creating fake user profiles. JPMorgan later discovered the discrepancy when a marketing campaign revealed a high rate of undeliverable emails. In March 2025, Javice was convicted of defrauding JPMorgan.

IMO an data expert could have recognized the fake user profiles through the fact he has seen e.g., how messy real data is, know the demographics of would be users of a service like Frank (wealthy, time stressed families), know tell tale signs of fake data (clusters of data that follow obvious "first principles").

willvarfar•2mo ago
> an data expert could have recognized the fake user profiles through the fact he has seen e.g., how messy real data is, know the demographics of would be users of a service like Frank (wealthy, time stressed families), know tell tale signs of fake data

perhaps the data science professor who generated the fake data was quite well versed in all this and put effort into deliberately adding messiness and skew etc?

3abiton•2mo ago
It's unfortunate how under appreciated is statistics, in nearly all (spare academic) positions that I occupied, mostly in the technical domain interacting with non-technical stakeholders, anectodal evidence always take priority compared to statistical backed data, for decision making. It's absurd sometimes.
bsder•2mo ago
This is because the correct answer is rarely the politically palatable answer.
TheAceOfHearts•2mo ago
Anecdotally, the way I've heard many stats related tools described is as follows: if the tool confirms something that we already knew then it's a waste of time or money because it doesn't tell us anything new, and if it doesn't agree with what we already know then it's obviously wrong.

I don't think it's a trivial problem though. It's notoriously easy to twist stats to sell any narrative. And Goodhart's Law all but guarantees that any meaningful metric will get hacked.

gwern•2mo ago
> There are a few ways to look at this from the standpoint of information that is available to the decision-maker. One is that human knowledge is valuable for guiding developing the model, but once you have a statistical model, it’s a better aggregator of the information. This is echoed by research on judgmental bootstrapping (https://gwern.net/doc/statistics/decision/1974-dawes.pdf), where a statistical model trained on a human expert’s past judgments will tend to outperform that expert.

By the way, note that this applies to LLMs too. One of the biggest pons asinorums that people get hung up on is the idea that "it just imitates the data, therefore, it can never be better than the average datapoint (or at least, best datapoint); how could it possibly be better?"

Well, we know from a long history that this is not that hard: humans make random errors all the time, and even a linear model with a few parameters or a little flowchart can outperform them. So it shouldn't be surprising or a mystery if some much more complicated AI system could too.

AIPedant•2mo ago
> One of the biggest pons asinorums that people get hung up on is the idea that "it just imitates the data, therefore, it can never be better than the average datapoint (or at least, best datapoint); how could it possibly be better?"

Hmm - the phrasing that perhaps holds more water is that LLMs just imitate the data, which means that novel ideas / code tends to be smashed against the force of averaging when fed into an LLM. E.g. NotebookLM summaries/podcasts are good infotainment but they tend to flatten unconventional paragraphs into platitudes or common wisdom. Obviously this is very subjective and hard to benchmark.

airstrike•2mo ago
> Obviously this is very subjective and hard to benchmark.

I agree, but it also feels very obvious once you've been exposed to it enough times. The internet is filled of written or spoken AI slop that can generally be spotted with ease by trained eyes and ears.

jon_richards•2mo ago
The problem making a bear-proof trash can is that there's significant overlap between the smartest bears and the dumbest tourists.
roenxi•2mo ago
> and even a linear model with a few parameters

Using a simple average of past performance to predict future performance is also a technique that is often disturbingly effective vs. standard practice. I suppose technically that is a linear model, but really deserves its own class.

AstralStorm•2mo ago
Up to a point where the prediction runs afoul of the time horizon and changing unmodelled circumstances.

They do not have sufficient explicit risk or variance management. Makes them highly fragile. There are more robust versions of the estimators... Still have a problem.

Remember 2008? That market ran on these easy models.

gwern•2mo ago
Yes, exponential smoothing in forecasting is another classic example of the robustness of simple models. You can throw all your fancy ARIMAs and Box-Cox transforms at a time-series, and much of the time, it is hard to distinguish from a simple moving average.

Specifically, the Makridakis M forecasting competitions (https://en.wikipedia.org/wiki/Makridakis_Competitions) have shown for a long time that beating the baselines is shockingly difficult.

In fact, classic machine learning only really started to convincingly win with the second-to-last, M5: https://www.sciencedirect.com/science/article/pii/S016920702... ; and neural methods only just sort of began working with the latest one, M6: https://www.sciencedirect.com/science/article/pii/S016920702... . (Possibly with M7 we'll see scaled-up meta-learning Transformers finally start beating the Bayesian or decision-tree forecasters. But I don't know if or when a M7 might be held.)

senkora•2mo ago
> pons asinorums

This is a new one for me, so, in the spirit of the article, I will "act in the world to acquire more information as needed".

> An obstacle which will defeat a beginner or foolish person. [from 17th c.]

> From New Latin pons asinorum, from Latin pōns (“bridge”) + genitive plural of asinus (“donkey”). Literally, “bridge of donkeys”.

https://en.wiktionary.org/wiki/pons_asinorum

mwkaufma•2mo ago
User "Anoneuoid" from the source's own comment thread:

  There is another aspect here where those averaged outcomes are also the output of statistical models. So it is kind of like asking whether statistical models are better at agreeing with other statistical models than humans.
AstralStorm•2mo ago
You need to compare on both different variables and additionally produce actual error estimates on the comparison.

Say, suppose you're measuring successful treatments. You would have to both use the count, perhaps signed even (subtracting abject failures such as deaths), cost (financial or number of visits), then verify these numbers with a follow up.

See, the definition of success is critical here. OR and NNT are not evaluating side effects negatively, for example.

So it may turn out that you're comparing completely different ideas of better instead of matching models.

whatever1•2mo ago
At least when humans are wrong we own it. Statistical models can be wrong 100% of the times you used them and the claim is ‘oh this is how statistics work, you did not query the model infinite times’.

My point is that in many occasions being right on average is less important than being right on the tail.

vintermann•2mo ago
> Minimizing loss over aggregates is what a statistical model is designed to do, so if you evaluate human judgment against statistical predictions in aggregate on data similar to what the model was trained on, then you should expect statistical prediction to win

This reminds me of the many years machine translation was evaluated on BLEU towards reference translations, because they didn't know any better ways. Turns out that if you measure translation quality by n-gram precision towards a reference translation, then methods based on n-gram precision (such as the old pre-NMT Google translate) were really hard to beat.

reedf1•2mo ago
If there is not a human-explainable reason a model has made a prediction - and it's just a statistical blob in multi-dimensional feature space (which we cannot introspect) perceived improvement over humans is simply overfitting. It will be extremely good at finding the median issue, or following a decision tree in a more exacting way than a human. What a human can do is expand the degrees of freedom of their internal model at-will, integrate out of sample data, and have a natural human-bias to the individual at the expense of the median. I'd rather have that...
bicepjai•2mo ago
Someone had to say this. All models are dump, but some are useful.
kreyenborgi•2mo ago
Versus https://predictive-optimization.cs.princeton.edu/