MurphyA/hacker-news huggingface dataset:
by lgunsch | 2025-04-15 13:26:25+00:00
I've seen a number of ESP32 IoT devices here on HN, and I haven't heard many of them use firmware encryption with an eFuse.

In this case, it would have been pretty hard to create a certificate if you couldn't read the firmware.

But, also pretty impressed at the same time. I think this is the first Hacker News article I've read about an ESP32 IoT device which has any encryption at all.
by rescbr | 2025-04-15 13:26:26+00:00
> The average 15yo boy have enough mental hygiene to know everything you read online is false. The website is not a nazi factory.

The real problem is when the internet leaks and boomers assume everything they read online is true.

Worst part of it all? My parents always told me not to trust what's on the internet, and now I have to tell them 99% of what they see on FB or whatever is AI trash and lies.
by mapt | 2025-04-15 13:26:33+00:00
Could you unpack the idea further?

There are plenty of things where Temu charges $2.00 and I would be fine paying a 120% tariff on that to bring it to $4.40, because Amazon is charging $8.99 and retailers are selling a seventy pack for $30.

But I would not be fine paying a $100 tariff to bring it to $102.
by 9283409232 | 2025-04-15 13:26:44+00:00
> Then, Berulis started tracking sensitive data leaving the places it's meant to live, according to his official disclosure. First, he saw a chunk of data exiting the NxGen case management system's "nucleus," inside the NLRB system, Berulis explained. Then, he saw a large spike in outbound traffic leaving the network itself.

> From what he could see, the data leaving, almost all text files, added up to around 10 gigabytes — or the equivalent of a full stack of encyclopedias if someone printed them, he explained. It's a sizable chunk of the total data in the NLRB system, though the agency itself hosts over 10 terabytes in historical data. It's unclear which files were copied and removed or whether they were consolidated and compressed, which could mean even more data was exfiltrated.

> Berulis says someone appeared to be doing something called DNS tunneling to prevent the data exfiltration from being detected. He came to that conclusion, outlined in his disclosure, after he saw a traffic spike in DNS requests parallel to the data being exfiltrated, a spike 1,000 times the normal number of requests.

> And Berulis noticed that an unknown user had exported a "user roster," a file with contact information for outside lawyers who have worked with the NLRB.

And more if you actually read the article. About a third of it is about the data that was taken.
by klodolph | 2025-04-15 13:26:52+00:00
There’s no justification given or source cited. You can’t just dig up a paper somebody wrote that agrees with you—you have to actually read the paper to understand what it says and what support it gives to that position.

I see NO support for this position. No reasoning, no primary sources, no secondary sources, not even the personal experiences of the author.

I have not seen any evidence that Frutiger Aero existed before 2017, and 2017 seems like the most likely creation date to me. That’s when it was created, by combining materials from the 2000s in new ways. Call it “bricolage”, perhaps.

Addenda: if you scroll through Google Image search results for Frutiger Aero, you’ll see what looks to me like an obvious lack of actual materials from the 2000s. I see a screenshot of Windows XP, a screenshot of the Nintendo Wii home screen. Maybe a few other random screenshots of apps or web sites. As far as I can tell, Frutiger Aero was invented by taking these few materials and extrapolating a whole aesthetic movements out of it. I see a lot of artwork dated from the 2020s labeled as Frutiger Aero—that’s the true nexus of the aesthetic, Gen Z adults recreating a half-remembered image from their childhoods. Which is fine. It’s just not from 2004. Like how Vaporwave is not actually from the 1990s or 1980s, Vaporwave is from the mid-2010s. I love Vaporwave, but I know that it’s not from the past; it’s a modern remix of elements from the past.
by pc86 | 2025-04-15 13:27:23+00:00
And yet some trust, estate, or descendant somewhere ultimately has the authority to change those agreements. These things are not immutable facts of the universe, they can be changed.

As for the minority where that is not the case, it also means nobody will have standing to sue if the school decides to stop letting someone who died 200 years ago decide exactly how Harvard's money will be spent.
by bhouston | 2025-04-15 13:27:35+00:00
The issue is we don't know what they took and they took steps to hide their tracks. This is whacked territory we are in. You can defend it but normally there are checks and controls in government for a reason. The fact that we are normalizing that certain very ideologically groups in government do not have checks and balances is pretty strange - based on nothing more than a "trust us, we are the good guys." This never works out in the end.
by imtringued | 2025-04-15 13:27:36+00:00
This is basically the answer.

Minimum latency broadcast forms a B tree. A tree is by definition not peer to peer. The number of branches per node is upload speed divided by bandwidth of the stream. This branching factor is extremely low for residential internet with asymmetric high download and low upload speeds.

Once you add malicious adversaries in the P2P network or poor network connectivity, each client will need to read multiple streams via erasure encoding at once and switch over, when a node loses its connection.
by Wobbles42 | 2025-04-15 13:28:26+00:00
I have to imagine that very few people would make statements like this if we lived in a universe where there was any real danger of it happening. It would be interesting to talk to humans that have lived even a few hundred subjective years, if any existed. That seems to be enough time to lead to very different perspectives on something like immortality. Given the information storage constraints of our minds, I wonder if there is even some age that makes immortality subjectively different than very long life. We don't seem to be capable of remembering even a full decade of experience. By the time you reach a few hundred years of age, would you have any memories at all of your first century? You might not have experienced a single "death" event, but the "you" that was born may have long since died.
by frereubu | 2025-04-15 13:28:29+00:00
I wonder if the "investigators" were subconsciously not that interested in actually solving the mystery, but were just enjoying the process. Can't remember what it was I was reading recently, but there was a character who deliberately did things the hard way, or in a convoluted way, because it satisfied something inside of him.

Edit: It was this article about an orchid collector: https://www.susanorlean.com/articles/orchid_fever.html
by dylan604 | 2025-04-15 13:29:11+00:00
Why the assumption that base36 would use the western alphabet. If they use Cyrillic, they'd have 33 chars. If they use Japanese, they'd have 46 chars. Using Hindi, they'd have 50 chars.

https://wordfinderx.com/blog/languages-ranked-by-letters-in-...

I have no clue as to the accuracy of this website, but accuracy isn't something we strive for when making ridiculous comments on the interwebs, is it?
by Tade0 | 2025-04-15 13:29:13+00:00
Similar thing, though due to different reasons, with Mein Kampf - I seriously doubt more than a minor fraction of all neonazis read the whole thing because:

1. It's a brick at ~780 pages in the full text version.

2. The Austrian painter was an even worse writer and the book reads like a huge rant the likes of which you could read on Voat back when it still existed.
by hnfong | 2025-04-15 13:29:56+00:00
I'd mentally put this in the same box as "chain of thought", where models perform better when explicitly describing the reasoning steps. The only difference in your case being that the model is undertrained in non-English data, so it's "next token prediction" of non-English prompts is less robust, and thus explicitly converting to English and then back makes it better.

This is probably the case for the "deep reasoning" models as well. If you for example try DeepSeek R1, it will likely reason in either English or Chinese (where it presumably is well trained) even if the prompt is in other languages.
by bhouston | 2025-04-15 13:30:32+00:00
Why did they actively hide their tracks? In law this relates to:

- Spoliation of evidence - Intentionally destroying or concealing evidence can lead to legal sanctions and adverse inferences.

- Consciousness of guilt - Actions taken to cover tracks (deleting logs, hiding records) are often admissible to show awareness of wrongdoing.

- Obstruction of justice - Deliberately impeding an investigation by destroying evidence is itself a crime in many jurisdictions.
by 6510 | 2025-04-15 13:30:44+00:00
A lot of countries picked the low hanging fruit but the trees are very tall.

When making an application one should look from the user perspective.

Say you want to start a business. You edit the profile page, check the entrepreneur box, it goes into a kind of supper pursuit mode with menus folding out, you fill out the company name, >>click<< the button to generate a bank number, a tax number, a registration number, a phone number, a domain name, hosting, etc If you sell something it goes into the bank account and sales tax or vat is subtracted. You press the add employee button, pick a standard contract and fill out the hours per week. Salaries will come out of your government bank account with income tax subtracted automatically. The generated website lists your products and services and is aggregated into a complete country-wide db with everything in it and a glorious search interface. Investors can log in on the website automatically. Upload the business plan if you have one so that AI can give you free money.

Real estate listings pop up, the right machines to buy, office equipment, potential employees...

An agenda is generated with a list of people the AI thinks you should be talking to. Check the box to plan the appointments.

Add music, sound effects and animations to everything as if we are 5 years old.
by smjburton | 2025-04-15 13:31:22+00:00
> For better or worse, the engineers behind the service decided not to implement a standard protocol like DTLS.

> We're not certain if each device has its own unique private key, but whether it does or not, both have downsides ... If all devices share the same firmware private key, the attacker needs to reverse engineer just a single device to MITM attack any other devices.

If anything, this article further highlights that security on these type of devices isn't as rigorous as other consumer electronics like laptops or smartphones. Anyone using smart devices should look into DD-WRT, OpenWrt, Tomato, or Asuswrt-Merlin and isolate these devices in their own VLAN away from the rest of your private network.
by 34679 | 2025-04-15 13:31:42+00:00
I've been short on work, which means I've been poor. I use my off time to work on side projects that I simply could not afford to complete if I paid what US companies charge for tools, components, and custom PCBs. My ability to innovate is seriously impacted by these tarrifs and there is no alternative that I can afford.

I recently created something that people in my industry actually want to buy, but I only ordered enough parts for 5 units. I had priced them so that when I sold them, I'd be able to put larger orders in to begin getting quantity discounts. Only problem is, what was going to be a $2k order will now cost roughly $5k, and guess what? I didn't charge $1k apiece. Now I'm out of stock and stuck in limbo waiting to earn cash from my regular job and see how these tarrifs shake out.
by pbiggar | 2025-04-15 13:32:05+00:00
This is part of the trick that israel is trying to pull. Suppose you support Palestine liberation from Israel's violent occupation and apartheid, as does most of the world. Well, so does Hamas, so therefore you support Hamas' goals and are evil and a terrorist.

To apply this in another context, I agree with Trump on very little, but I do agree that Daylight Savings should be gotten rid of. So am I pro-Trump? No, that's absurd.

Or if you are right wing in the US and believe that the US is the land of the free and home of the brave, well, so does Hilary Clinton. Are you pro-Clinton?

The connection is absurd, but it parrotted daily by US politicians and US media.
by travisgriggs | 2025-04-15 13:32:05+00:00
Interesting. Does Bluez fall under that umbrella?

I have found bluez by far the hardest stack to use for Bluetooth Low Energy Peripherals. I have used iOS’s stack, suffered the evolution of the Android stack, used the ACI (ST’s layer), and finally done just straight python to the HCI on pi. Bluez is hands down my least favorite.
by yeokm1 | 2025-04-15 13:32:36+00:00
Conventional wisdom states that running LLMs locally will require computers with high performance specifications especially GPUs with lots of VRAM. But is this actually true?

Thanks to an open-source llama2.c project, I ported it to work so vintage machines running DOS can actually inference Llama 2 LLM models. Of course there are severe limitations but the results will surprise you.
by krapp | 2025-04-15 13:32:37+00:00
There are no true free speech absolutist sites on the open internet. To run a site under free speech absolutist principles would require allowing and refusing to moderate illegal content.

People like to confuse "free speech absolutism" for "tolerating right-wing speech" because the free speech absolutist narrative has been pushed by right-wing accelerationists, but every site has its limits, even 4chan.
by aelhaji | 2025-04-15 13:32:47+00:00
I see that most responses in the thread focus on the technical challenge, while in reality this barely will reflect on your ability to monetize.

Monetization is almost always NOT a technical challenge. Even less so than marketing and sales.

You need to identify first to whom you're selling. Did you already identify who is going to potentially buy your solution?

He or she determines at the end of the day how you should package it — not necessarily the solution itself.

Disclaimer: I advise scale-ups and investors on monetization on more tactical matters through https://revfixr.com/
by Blikkentrekker | 2025-04-15 13:33:13+00:00
> 4chan is oddly accepting of gay and trans people. I've seen gay and trans porn side by side with bbc and bwc porn posts. Strange to see racist trans porn lovers.

It only seems odd because many people interpret this through a U.S.A. “culture war” lens and “gay people”. You believe they're “accepting of gay people” in the sense of that culture war because of the “gay porn”. In reality, they take more of a classical Graeco-Roman approach to it and believe it's completely normal for the average male to be attracted to cute twinks as the Romans did and often even reject the very notion of “sexual orientations” to begin with. Their “support” is definitely not in the sense of what one would expect of the U.S.A. “culture war”, jokes such as the below illustrate well what the culture is:

https://i.pinimg.com/736x/55/fe/d1/55fed16b625f9c5869587908f...
by bhouston | 2025-04-15 13:33:21+00:00
It is right in the article:

"The small, independent federal agency investigates and adjudicates complaints about unfair labor practices. It stores reams of potentially sensitive data, from confidential information about employees who want to form unions to proprietary business information."

"But according to an official whistleblower disclosure shared with Congress and other federal overseers that was obtained by NPR, subsequent interviews with the whistleblower and records of internal communications, technical staff members were alarmed about what DOGE engineers did when they were granted access, particularly when those staffers noticed a spike in data leaving the agency. It's possible that the data included sensitive information on unions, ongoing legal cases and corporate secrets — data that four labor law experts tell NPR should almost never leave the NLRB and that has nothing to do with making the government more efficient or cutting spending."

And because DOGE deleted the access records and logs, we cannot prove it either way. That is pretty suspicious.
by wormlord | 2025-04-15 13:34:50+00:00
How you are getting downvotes is beyond me. People are finally waking up to the idea that the whole point of the Trump admin is to privatize the government, but haven't woken up to the fact that we are entering an era of state terror. Keep your heads buried HN, you'll be dragged kicking and screaming into reality in a few months anyways.
by pjc50 | 2025-04-15 13:35:24+00:00
> mistook offensive humor for conservatism

Something happened in the post-2010 times along with the Tea Party, and offensive humor - especially overt racism - became a mainstream part of conservativism, all the way to the White House.

> "jokes" where the punchline is "I hate my political enemies"

Hence the laughter in the White House at refusing to follow the court order to return their political enemies from the overseas prison.

4chan may have died, but Trump is more the first 4chan President than Howard Dean was the first "internet candidate", and especially Musk the Twitter Presidential Vizir is the heir to this culture.
by Steve6 | 2025-04-15 13:35:38+00:00
Very helpful article. I recently went down the TOTP rabbit hole and this article would have been great.

I run a suite of servers and setup scripts that go with them. I can create users and secret keys easily enough using our APIs, but I needed a way to generate TOTP codes on the fly. I got it working on my machine, but sharing it with others was a bit difficult because really the only "logic" was generating the secrets while everything else was static data and storing responses from the APIs.

I ended up making my own API to generate TOTP codes from secrets, <https://totpapi.com>. I try to make it clear it should only be used for testing, but it makes this kind of thing much easier for me. Maybe it will help someone else as well. :)
by jasonlotito | 2025-04-15 13:36:17+00:00
You say that, and I hear the arguments, but numbers don't lie.

https://x.com/daniel_nguyenx/status/1734495508746702936

Further discussion can be found here: https://www.macstories.net/linked/is-electron-really-that-ba... and in the linked video.

You say at the expense of users. But when even Apple does't go all native, it's telling.
by pehtis | 2025-04-15 13:36:38+00:00
Meltemi is ok, but it's "old" and not that good by today's standards. If you need a good Greek local LLM try https://huggingface.co/ilsp/Llama-Krikri-8B-Instruct. Yes, I know it's based on LLama and not a foundation model, but it is still a LOT better than Meltemi.
by johnnyjeans | 2025-04-15 13:36:53+00:00
Nah, the board culture really did change in the last 7 years. In a past that's not too distant nobody was obsessed with trans folk. That's not to say there weren't vulgarities and unpleasantries, but there was definitely a substantial IQ drop somewhere around 2018 and 2019. I haven't seen the "Install Gentoo" meme in a while, the old board culture was basically replaced with cringe fringe zoomerisms.
by sjsdaiuasgdia | 2025-04-15 13:37:05+00:00
That's the unfortunate powder keg we're sitting on. Right now everyone's still generally keeping up appearances that the rules matter. It's getting pretty thin in places. The dance the Trump admin is doing with the courts over Abrego Garcia serves multiple purposes. It gives a veneer of compliance - DoJ lawyers are showing up to hearings, they are filing briefings, they are participating in the process. It would be extremely fair to say they're not participating in good faith, the strategy clearly intends to delay and deflect any meaningful implementation of the court's order to bring Abrego Garcia back to the US. But they are participating.

This appearance keeps a lot of folks on the fence. They want the big moment where it's super obvious that it's time to act. It doesn't work like that. This is how fascists gnaw away at the constructs that enable free societies.

https://archive.is/g6ElI

> Invoking Article 1 of the Weimar constitution, which stated that the government was an expression of the will of the people, Hitler informed the court that once he had achieved power through legal means, he intended to mold the government as he saw fit. It was an astonishingly brazen statement.

> “So, through constitutional means?” the presiding judge asked.

> “Jawohl!” Hitler replied.
by cryptonector | 2025-04-15 13:37:28+00:00
It's always ridiculous to cut trees for firewood. There is no need, since there is so much dead firewood lying around, and so many trees die every year, and since most people use much cleaner natural gas for heating. As for oil and gas, those are still cheaper, denser, and more portable -and even more sustainable when you consider the mining for rare earths and lithium- than any renewable energy source.
by wormlord | 2025-04-15 13:38:00+00:00
America's gun culture is very closely tied to its settler culture. Most right wing gun nuts are barely able to conceal their fears/hopes for a race war in all but name.

That said, there are plenty of examples of progressive forces arming themselves. The Black Panthers are a good example. Without their armed militancy I think the US government would have been a lot less likely to capitulate to the demands of the peaceful civil rights activists.
by margalabargala | 2025-04-15 13:38:02+00:00
That's not how tariffs work.

You pay the sticker price, which does not include tariffs. The package ships. It arrives at the US border, and the carrier (DHL or whoever) bills you for the import tax before it leaves the port.

Maybe this will change, but up until now when importing things, tariffs were not part of the price paid to the seller.
by ImPostingOnHN | 2025-04-15 13:38:16+00:00
Thank you for responding. I realize you have some beliefs and opinions about things, legal and otherwise. I do, too! Indeed, most people have beliefs and opinions about things.

The role of the judicial branch, and of each judge, is to listen to all those beliefs and opinions as appropriate, and decide which one is correct, and to make orders as necessary in furtherance of that aim.

That has happened, and the administration then disobeyed the orders and asserted that the judges' judgements were invalid (an irrelevant personal judgement, because they are not the judge).

So, that's where we're at now. With that in mind, please address the posts to which you replied, specifically, the below 2 points:

> If "oopsy-doopsy, it was a mistake" has no remedy then there is no remedy when it is a citizen who gets sent to a gulag.

> What's more, now that the executive branch is disobeying direct orders from the judicial branch, what recourse do you think you'd have if you got on the wrong executive branch official's bad side?

You're being specifically asked to talk through your options and choices in such scenarios. What would they be? We'll take turns: You play the part of the victim; I'll play the part of the administration; we'll game it out. POV: You're walking down the street and a group of 7 or 8 plainclothes individuals wearing masks surround you, restrain you, and force you into an unmarked vehicle. Maybe one of them says they're a cop, but otherwise they refuse to say anything while they transport you to a foreign gulag. You are not permitted a lawyer, you are not permitted a phone call, and nobody, no family, no lawyers, no judges, not even your local police department, is notified what is happening to you. PERHAPS (it wouldn't change the outcome, but whatever) unbeknownst to you or them, this is a case of mistaken identity.

Ready for your turn? Go.