MurphyA/hacker-news huggingface dataset:
by gizmo | 2025-04-05 13:10:23+00:00
Security is not that simple. Duplicate HTTP headers, utf-8 in HTTP headers, case insensitivity etc has resulted in countless security vulnerabilities over the years. Do you reject suspicious requests? Do you process the request but filter out invalid headers? What about suspicious headers being returned from the app being served? You have to make choices here and if you choose unwisely bad things happen. The spec is of little help here, because web browsers and other web servers (and downstream app servers) don't adhere to the specs being sometimes too lenient and in other times too restrictive in what they do.

Just take a look at https://www.rfc-editor.org/rfc/rfc9110#section-5.5 to get an idea of how any choice made by a web server can blow up in your face.
by grvdrm | 2025-04-05 13:11:15+00:00
+1 with the other reply to your comment.

I don't as an anecdote disagree with some of what you said. There are many things happening in private that you don't hear about in public. Friends aren't telling friends things. And I think it's important that people feel more comfortable/open/vulnerable with people they know rather than projecting what they want people to think.

But I'm a guy and don't claim that I know what women want! Perhaps you're a woman and thus your reply is rooted in lots of experience/evidence?
by Zr01 | 2025-04-05 13:11:25+00:00
EU has almost no AI, yet is the world leader in AI .... regulation. No upstart social network would have the funds to ensure GDPR compliance and all the other rules that get added along the way. If someone has a business idea for one, they move to the US cause it's easier to start. Mistral AI is expanding to California. The solution would be less bureaucracy and regulation.
by leeoniya | 2025-04-05 13:12:03+00:00
> As an old school print designer, I would love to see a return to a web with multi-column text on desktop, that reformatted to single column on mobile, and graphics runarounds much more complicated in shape than what a float can do.

this has been possible for quite some time with CSS columns:

https://developer.mozilla.org/en-US/docs/Web/CSS/columns

plus media queries for desktop vs mobile layouts:

https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_media_q...
by tempodox | 2025-04-05 13:12:07+00:00
You're not wrong, but you're overlooking the cultural normalcy. When you have something to sell, you're allowed to lie until you're blue in the face and nobody even blinks. But when applicants merely demonstrate how well they understood and internalized that state of affairs, it's fraud. None of this is OK in my book but it's hypocritical to single out job applicants when the whole culture is like that.
by Ray20 | 2025-04-05 13:13:46+00:00
>It's now considered pretty outdated, with most of Marxist thought having moved on to less rigid modes of conceptualizing history and geopolitics, like Western Marxism (Frankfurt School), Autonomist Marxism, Eco-Marxism, Libertarian Marxism, Structural Marxism, etc.

I think that's not true. It is incorrect to compare the practice of Marxism-Leninism, and it's philosophy formed with such practice, with purely imaginary pink-glass-self-reflection fantasy.

Let them seize power in somewhat large country and hold it for at least a couple of decades - and then say how these movements are "less rigid". Or compare the voiced fantasies with Lenin's pre-revolutionary fantasies (remembering that they were practical enough to seize power and push it's philosophy on half of the planet), if you really want to show the difference between them and outdating of the latter.
by JKCalhoun | 2025-04-05 13:14:18+00:00
Me as well.

As I recall, regions were essentially something akin to an array of run-length-encodings for each scan line (where, additionally, there was a sentinel or some way to indicate the next n rows are the same as the previous). The fun part is then writing a set of routines to union, difference, etc. pairs of these RLE region objects (and here I use the word 'object' loosely).
by bilsbie | 2025-04-05 13:14:25+00:00
It’s a major improvement but you still want to be careful on what you consider common knowledge. There’s a lot of breadth to software engineering and there can be whole areas someone is missing but can learn.

For example I was always a great employee but early in my career I wasn’t big on unit testing.

Or I interviewed for an ML job and they dinged me for not knowing a bunch of statistics things off the top of my head.
by Calwestjobs | 2025-04-05 13:14:55+00:00
i like enthusiasm but,

every electric outlet which can provide 2500watts ( 110v x 25A ) is capable to charge electric car to 70 miles of range while you sleep. while you sleep means you do not wait, you do not miss anything, you do nothing, you do not think about it, you are sleeping while you charge, like your freaking mobile phone.

so yes gas pumps vs electric charging spots, is interesting milestone, but forgot to add or mention millions of outlets in every US state which can be use to top up AND are already installed by millions for decades already ? Hmm.... I wonder if person writing about electric cars does even own one.

Charging from solar? Doable. Making 80+% of your yearly hot water just from solar PV is doable. So please do.
by SonuSitebot | 2025-04-05 13:15:13+00:00
I've worked on a similar setup in Go — managing a pool of "always-on" containers for isolated task execution via docker exec. The official Docker SDK is solid but pretty low-level, so I get the desire for something more ergonomic. In my experience, there aren't many off-the-shelf Go libraries that give you full orchestration primitives (load balancing, health checks, scheduling) out of the box like you'd find in Nomad or K8s. But here are a few options worth exploring:

gofiber/fiber – not container-specific, but useful for building lightweight async schedulers if you're rolling your own orchestration logic.

dockertest – primarily for testing, but you can adapt its logic for simplified lifecycle management.

hashicorp/go-plugin – good for decoupling workloads, especially if you're considering container-based isolation per plugin/command.

That said, most teams I’ve seen build their own lightweight layer on top of the Docker SDK with Redis or internal queues for tracking load/health. Curious if you're doing multi-host management or keeping this local? Also, make sure to aggressively timeout and clean up zombie exec sessions — they sneak up fast when you're doing docker exec a lot.

Would love to hear more if you open source anything from this!
by ath3nd | 2025-04-05 13:15:24+00:00
> But, I bet many have thanked their boss for the opportunity given to them.

I literally don't know anybody who has any desire of expressing gratitude to their boss for the "opportunity" given to them. What kind of servile lapdogs do consider their work an "opportunity"? How about the bosses realize that without workers, their businesses will implode, and thank their workers for the "opportunity" to have a working business instead?

Jobs are an exchange of a worker's time and skills for a wage. If you expect workers with a touch servility on top, I suggest you go back to the medieval times of lords and servants.
by Katya_Firyan | 2025-04-05 13:15:53+00:00
Textok, a tool that helps content teams and marketers automate their brand voice and style guides, is rebranding as Writitude. The SaaS platform addresses a common challenge for marketing professionals — maintaining consistency in brand communication across all written content.

“After six months on the market, we realized we never want to be confused with a certain short video app.. again!” said Olga Procevska, co-founder of Writitude. “We are a tool for brands with an attitude — companies that care deeply about the quality and tone of their texts. That’s why we’re embracing our new name, Writitude.”

Along with the rebrand, Writitude is introducing AI-powered editing for all paid subscribers. The new feature helps copywriters refine their work while preserving full creative control. Writers and communication managers can now paraphrase complex sentences, condense lengthy sections, check grammar and at the same time ensure that every piece of content aligns with their brand’s unique tone of voice.

“We’ve been interviewing content leaders from all around the world, and they’ve made it clear — they don’t want AI to write FOR them,” said Katya Firyan, co-founder of Writitude. “What they need is a smart assistant that helps with ideation, refinement, and consistency.”

To celebrate the rebrand, Writitude (writitude.com) is offering an extended free Premium trial to writers and communication professionals who book a 30-minute feedback session. The Premium plan enables users to create up to 10 custom style and tone guidelines and share them with their creative teams, ensuring brand consistency across all content.
by solatic | 2025-04-05 13:16:22+00:00
Not OP, and also not a web server genius, but I read OP's comment as allowing server administers to write policy in OPA then just using https://github.com/microsoft/regorus/ to determine whether to allow or forbid the connection. The web server author can clearly document what is available in input/data to be checked against in the policy. Is it really more complicated than that?
by SirHumphrey | 2025-04-05 13:18:46+00:00
> What does it say about the tech industry that so many orgs continued to use a system that was known to be broken for so long?

That they tried to scale hiring. I don't think that technical interviews are bad per se, it's the form in which they are currently that is bad. I was once applying for a company working on a stage animation software - somebody there created a task relevant to their workflow, they specified which libraries I should use and then gave me 14 days, after which I sent them a link to Github repo with the code. It was overall a pleasant experience - I learned something new programing this task, they were able to access my code style and programing abilities - but this was long before AI. They were a fairly small company though.

In the large orgs you have a HR person overseeing a hiring who doesn't know how to code (fair enough - not their job) and bunch of engineers usually far to busy with actual problems to create a problem set and far to many applicants. So companies drop leetcode at the problem - thinking that any selection criteria is better than non selection criteria.
by inglor_cz | 2025-04-05 13:19:00+00:00
But then you should call the thing to be solved "problem of good governance" instead, and that is something that indeed may take centuries. Bad governance will manifest itself in a multitude of problems that have no intrinsic organic relationships amongst them, and I am not sure if it makes sense to split them into sub-categories.

In the past, hunger was quite often a quantity problem. If a period of bad weather hit Medieval Europe, there wouldn't be any practical way how to import food for the entire continent from, say, India.

In this sense, hunger is being solved.
by yjftsjthsd-h | 2025-04-05 13:19:03+00:00
1. That still doesn't make it okay.

2. No, you're not allowed to lie until blue in the face when selling; https://en.wikipedia.org/wiki/False_advertising is illegal. (Is it underunforced? Probably. Do I wish those laws had much stronger restrictions and harsher penalties? Yep. But is it illegal to lie to sell things? Still yes.)

(IANAL and this isn't legal advice. Though it is moral advice.)
by tw04 | 2025-04-05 13:19:11+00:00
Sure, but when you’re on a road trip and need to charge, “at home” means nothing. Just last month I ended up waiting almost 35 minutes to charge for 10 minutes because my wife had run the car low enough that we couldn’t get home without charging. We charge at home 99.999% of the time but when I need to charge on the go, waiting 30 minutes isn’t really an acceptable solution.

Kudos to California, here’s hoping other states follow suit. I’d estimate we need about double the fast chargers as gas station nozzles to provide acceptable wait times once there’s mass EV adoption (assuming no dramatic increase in charging speeds).
by Cpoll | 2025-04-05 13:19:39+00:00
> As for beef, maybe once in awhile, but feeding a 1,200+ pound animal enough antibiotics for months to increase its weight that extra 5% is going to cost you nearly as much as the entire animal is worth.

Is this true? I can't find any source for this claim, just some old papers that suggest the number is closer to 30%, and various government sites that imply the practice is still in place around the world.
by dingnuts | 2025-04-05 13:19:41+00:00
The GP's point about the energy density of gasoline and how quickly it can be transferred is not refuted by this irrelevant statistic; indeed, reading the same statistic with a pessimistic interpretation makes my point: if the median trip distance is 200 miles, about half of trips are longer than an EV battery charge, requiring a long refuel stop.

Half is a lot of trips to give up by switching to an EV!
by ath3nd | 2025-04-05 13:20:32+00:00
> The American Left has been illiberal and going after speech for decades; it didn't start post-2020.

Good that the free-speech absolutist Musk is there to ban everyone on Twitter who calls him out on his lies, trying to buy democratic elections, and do nazi salutes.

> Arson is a VIOLENT type of activism, which is legally classified as terrorism.

Lithium-ion batteries in badly made cars are prone to ...combustion.
by FirmwareBurner | 2025-04-05 13:20:44+00:00
Won't someone please think of the poor phone manufacturers?

Apple is only the ... checks charts ... richest company in the world. How will they survive with tariffs?

I like how my 15$ Casio mechanical watch is 30m water resistant yet the battery can be swapped in 2 minutes with a basic screwdriver. If only phone manufacturers can copy this crazy technology.
by croes | 2025-04-05 13:21:01+00:00
People are attracted by stories, not facts.

If the story is true, good. Facts without a story lose against stories without facts.

That’s why populism is so successful.

If facts would matter Trump would be president.

The facts were all known beforehand and are now, but many don’t care about facts.

People aren’t as rational as myths like the homo economicus try to make us believe.

Just look at ads. They sell emotions not facts.
by belorn | 2025-04-05 13:21:01+00:00
They are doing neither, and the article itself undermines its premise later when the "serious research" is being quoted. As it cites, most offender get exposed during early teens, back when there were no porn algorithms. However, the rate of child sexual abuse has steadily decreased since the 1990s, down by almost 50%. If the hypothesis of the article was correct then the rate of child sexual abuse should increase, not decrease.

Other research studies, have looked at the rate of pedophilia in the general population, and the conclusions seems to be a fairly static rate of around 2% (like "Prevalence, situation, and perspectives of treatment" from 2020). However since the rate of child sexual abuse has decreased, such studies mostly rely on doing survey and those has for obvious reasons a major problem of sampling and accuracy.

A common theme in the research, just from a very quick look, is that the researcher themselves cite that the is a huge lack of research in this area. They can see the trend, and see the numbers, but there is little to real understanding to what is behind the numbers. We currently has as good chance to blame the Catholic Church as to blame pornhub, and articles like this one are not helping the slightest. At best it just spreading fear in order to generate engagement, and at worst they are abusing their readers by pushing propaganda in order to sway popular opinion about oppressive laws.
by immibis | 2025-04-05 13:21:02+00:00
"You are incredibly wrong." is such a great rebuttal. It applies in any situation and you don't even have to bring any evidence.

My rebuttal to your rebuttal: You are incredibly wrong.

(And who cares if it was the police or the courts? Both are branches of the government. And if the court order was as you described, then why did the police march someone off in handcuffs for speaking Arabic privately to another person who spoke Arabic?)
by therealpygon | 2025-04-05 13:21:24+00:00
Yes, but that unfortunate choice of labeling is what allows those who are less scientifically intelligent to say things to all their friends like, “Look at all this snow, ‘global warming’ right!” As if that is some sort of slam dunk against a “climate agenda”. Even when the trend is for worsening storm seasons, more and more wild temperature swings, and the increasing amount of land burned by wildfires, there are plenty who will still just claim it is “bad luck” and a natural process because “we don’t have weather data to go back millions of years”. A lot of that response was the direct result of the choice to call it “global warming” instead of the more accepted (at the time) “climate change”, which is what I think they were pointing out.
by mattmaroon | 2025-04-05 13:21:57+00:00
No, I’ve road tripped around the country with both types of vehicles. It’s delusional. And I’m not anti-EV by any means, I like them, but when you do need to use public charging, it sucks.

The charger may be right on the on your route, which is nice, but it often isn’t. If it’s five minutes out of the way, that’s an extra 10 minutes on my trip +20 minutes of charging. That’s a half hour where a gas station would’ve been three minutes. There are a good amount of times when it is more than five minutes away.

That’s extremely common and even supposes the chargers are available, I remembered to pre-condition the battery, etc. all of those are not given.

And for preservation of battery life you’re really operating with 60% of the stated capacity because you’re keeping it between 20 and 80 all the time. So a 250 mile range is really 150. I have had it happen where I drive two hours, spend a half hour charging, rinse, repeat on a road trip.
by viraptor | 2025-04-05 13:23:32+00:00
It's one thing when people actually seek it out. But the idea that someone may get charged for a video they didn't realise contains underage people is chilling. I know one tiny woman who in her 30s still could pass for a highschooler and will probably be carded for many years to come. On the other hand I went to high school with a couple of people who could pass for 25+ year olds easily. Without personally checking someone's id, you just can't know for sure. So even if you'd want to avoid illegal material - how sure are you you're safe?
by RedNifre | 2025-04-05 13:24:16+00:00
I don't understand. Why would much of the vocabulary be dedicated to rare Chinese characters? Wouldn't those need to show up in the training data first? And if they did, wouldn't they also show up as weird byte sequences? And aren't UTF-8 byte sequences kinda risky for everything other than ASCII, since only ASCII bytes and header bytes are unambiguous, whereas following bytes (10***) are very ambiguous individually? I mean, sure, the LLM would notice that their meaning changes depending on preceding following- and header-bytes, but it is still not clear to me, why UTF-8 bytes are better for LLMs than characters (or even grapheme clusters). UTF-8 bytes seem like a very arbitrary choice to me. Why not do UTF-9 instead and get the most important Latin letters as single ninebitbytes?
by williamoforange | 2025-04-05 13:24:29+00:00
I found in my very limited testing with chatgpt free version that it has a real bias for the Caesar method in general, suggesting it or bringing it often unnecessarily in almost every conversation.

Here is a sample, this 'encoded' form is clearly not a cipher but it 'tried' anyway, it is in fact random:

Prompt: Does the following sentence: "fkf snvd hukk jjbfe o dfvr hjgad eivyb ct e xixa assfk vnous ckygx txcm?" bare resemblance to the phrase "how much wood would a wood chuck chuck if a wood chuck could chuck wood?"?

ChatGPT said:

Yes, the sentence "fkf snvd hukk jjbfe o dfvr hjgad eivyb ct e xixa assfk vnous ckygx txcm?" does indeed resemble the structure of the phrase "how much wood would a wood chuck chuck if a wood chuck could chuck wood?".

It seems like it could be an encrypted version of the latter phrase. Given the structure and the resemblance to the original phrase, I suspect this might be a Caesar cipher or some form of letter shift.

Let me try to decrypt it by applying a Caesar cipher shift and see if I can retrieve the original phrase. I'll start with a few different shift values. Hang on!
by division_by_0 | 2025-04-05 13:24:52+00:00
I'm working on a correlation matrix with Svelte 5.

It includes rolling correlation charts, hierarchical clustering, and a terminal-style interface with high data density. It uses a 2D windowing/virtualization approach to render only visible matrix cells to the DOM. It's early WIP. The landing page is particularly bad.

https://covary.xyz
by mike_hearn | 2025-04-05 13:25:27+00:00
Yup. Sadly, discussion of Brexit on HN is trash tier. Almost every claim about it you'll find here is completely wrong. Not in the sense of differing values or priorities, but in a "this is totally made up" kind of way. It's really concerning that so many people's understanding of the UK and Europe have suffered such a huge rupture with reality. The map is not the territory!

Leaving the EU had no effect on the British economy. Not positive, not negative. Even the trade balance with the EU merely continued along its long term trend, so apparently the single market wasn't delivering any value in the end. The closest thing you can find to an economic impact was the currency dump that happened the moment the result was called, but the economy did fine in the post-referendum years and so those traders who panicked just took a bath and the currency recovered later. Not that a currency devaluation is such a bad thing for the UK anyway, its exports could use the help.

Even some non-economic impacts failed to materialize, in both directions. The UK rejoined the Horizon research programme (supposedly a "cherry" that would be lost), but also the reduction in immigration that voters were promised didn't happen either, in fact immigration went into overdrive.

A lot of people who support the EU don't realize any of this, partly because the news doesn't report on things that don't happen so they never hear about it. But mostly it's because they conflate predictions with reality. For example, there's someone saying in this thread that "the narrative was pretty catastrophic" followed by "I don't know how things panned out". And when I pointed out this lack of impact less than two weeks ago here, I got a reply that cited another pile of predictions as a refutation:

https://news.ycombinator.com/item?id=43469356

It's a systemic problem that crops up in other areas too. During COVID modeling predictions were regularly repeated as if they'd already happened, and you see the same mental slippage in climate change discourse. The line between "we think this might happen", "this will happen" and "this has already happened" blurs to nothing.