MurphyA/hacker-news huggingface dataset:
by cookiengineer | 2025-04-16 04:49:32+00:00
If there are any Europeans here, I'd love to make my vulnerability database that's accumulated from all linux security trackers and the CVE/NVD open source if I can manage to find some folks who'd help with maintenance.

Currently hosting costs are unclear, but it should be doable if we offer API access for like 5 bucks / month for private and 100 / month for corporate or similar.

Already did a backup of the NVD in the last couple hours, currently backing up the security trackers and OVAL feeds.

Gonna need some sleep now, it's morning again.

My project criteria:

- hosting within the EU

- must have a copyleft license (AGPL)

- must have open source backend and frontend

- dataset size is around 90-148 GB (compressed vs uncompressed)

- ideally an e.V. for managing funds and costs, so it can survive me

- already built my vulnerability scraper in Go, would contribute it under AGPL

- already built all schema parsers, would contribute them also under AGPL

- backend and frontend needs to be built

- would make it prerendered, so that cves can be static HTML files that can be hosted on a CDN

- needs submission/PoC/advisory web forms and database/workflow for it

- data is accumulated into a JSON format (sources are mixed non standard formats for each security tracker. Enterprise distros use odata or oval for the most parts)

If you are interested, write me on linkedin.com/in/cookiengineer or here.
by RHSeeger | 2025-04-16 04:50:12+00:00
But the benefit of living in a society is that those people that _cannot_ survive without the society, _can_ with it. They still have the option to live outside society, they'll just perish. And that sucks. But by being part of society and gaining the benefits thereof, you are agreeing to follow it's rules (or suffer the consequences if you do not).

I would not survive away from society due to medical needs. In exchange for being able to acquire the items I need to survive, I follow the constraints of living in that society. But it _is_ a choice. I could choose to go live in the woods without said benefit; and I'd die.
by kqr | 2025-04-16 04:50:13+00:00
I have no familiarity with blue whales but I would guess they're 1--5 times the mass of lorries, which I guess weigh like 10--20 cars which I in turn estimate at 1.2--2 tonnes, so primitively 12--200 tonnes for a normal blue whale. This also aligns with it being at least twice as large as an elephant, something I estimate at 5 tonnes.

The question asks for the heaviest, which I think cannot be more than three times the normal weight, and probably no less than 1.3. That lands me at 15--600 tonnes using primitive arithmetic. The calculator in OP suggests 40--320.

The real value is apparently 170, but that doesn't really matter. The process of arriving at an interval that is as wide as necessary but no wider is the point.

Estimation is a skill that can be trained. It is a generic skill that does not rely on domain knowledge beyond some common sense.
by Fomite | 2025-04-16 04:50:29+00:00
A couple things:

1) We refuse them when we can. Like if you have a lower indirect rate, my institution's policy is that has to be located somewhere that's documented, you can't just do it. I did have one where the sponsored programs folks just said no.

2) As mentioned, they're sort of a drop in the bucket, and also important to junior faculty, so they're a little bit accepted as loss leaders.

3) At several institutions, it was made clear to me that if you relied on these, and not "full fat" grants, by the time you came up for tenure, things would be bad.

The great irony is every research administrator I know (and I know a lot) sort of hates these. If they had wanted to, "You cannot charge a private organization a indirect rate lower than your negotiated federal rate of the same type" (there are different rates depending on the nature of the project) would probably have been met with "Yeah, that tracks."

Instead, they're trying to use it as an excuse to absolutely gut research.
by ChuckMcM | 2025-04-16 04:50:35+00:00
Alternative is that OpenAI is being quickly locked out of sources of human interactions because of competition, one way to "fix" that is build you're own meadow for data cows.

xAI isn't allowing people to use the Twitter feed to train AI

Google is keeping it's properties for Gemini

Microsoft, who presumably could let OpenAI use it's data fields appears (publicly at least) to be in a love/hate relationship with OpenAI these days.

So you plant a meadow of tasty human interaction morsels to get humans to sit around and munch on them while you hook up your milking machine to their data teats and start sucking data.
by tgsovlerkhgsel | 2025-04-16 04:51:19+00:00
If you made this careful analysis, you'd hear "CRISSAKE WE NEED THIS DONT TOUCH IT" for almost everything (and it likely would be right for a significant portion but not everything).

That's why the current approach seems to be to axe everything, listen to how much screaming there is, then reinstate only the projects where the screaming is really loud.
by 14 | 2025-04-16 04:51:24+00:00
But it has much less of a barrier to post things. You do not need an email or a phone number you can just post. And an IP ban will only be effective to prevent the average user. Still though things get removed and moderated and I am okay with that. Having seen some of the telegram groups and the misinformation they spread was a crazy eye opener during covid times.
by eru | 2025-04-16 04:51:46+00:00
Well, from 2014 onward there were supposedly rebel militia groups in the south and east. (Most people think they were Russian puppets however.)

> [...] I think they know which side has their best interests at heart and which is trying to genocide them.

Doesn't even need to be their best interest, really. The Ukrainian government had and has its fair share of flaws. (They exist in the real world after all.) But it's enough that they are a lot better than Russia.
by throitallaway | 2025-04-16 04:52:02+00:00
> Trump tells them they are OK. They are worthwhile.

The chasm between what Trump says (and what the propaganda says about him) and what he actually does is astounding. Most of his fans are completely uninformed of what he says and does. We've never had a president (and cabinet) with more conflicts of interest. He's been a pioneer at abusing power; tariffs on Canada because of a fentanyl crisis... give me a break!
by keernan | 2025-04-16 04:52:26+00:00
So, I just went to AI and it took 10 seconds to check...

What do studies taken of anonymous women show the percentage of girls sexually abused before age 18 in the united states

Workflow Percentage of Girls Sexually Abused Before Age 18 in the U.S. Studies indicate that 1 in 3 girls (approximately 33%) are sexually abused before the age of 18 in the United States . Another source suggests that at least 1 in 4 girls (25%) experience child sexual abuse, though the true numbers may be higher due to underreporting . These statistics highlight the significant prevalence of child sexual abuse and the challenges in accurately capturing the full scope of the issue due to factors like delayed or non-reporting. Let me know if you'd like further details or related information!
by cma | 2025-04-16 04:52:33+00:00
Reading that article closely it says nothing about an NVD budget cut, only a NIST one. They were trackijg the changes after NIST's budget was cut, not NVD's. As pointed out below, CISA announced a cut and then NIST more than made up for it by reallocating funds, for an NVD funding increase, even though NIST had their overall budget cut.
by Fomite | 2025-04-16 04:53:34+00:00
Things indirect cost reimbursements fund at my institution:

- The research animal facilities - HPC staff, upgrades, etc. - Our BSL-3 facilities (the only ones for a long way) - Various and sundry research cores - New faculty startup funds

Those are all pretty tightly correlated with success, and very difficult to support via single grants.
by hommelix | 2025-04-16 04:54:08+00:00
I don't know the current state of readiness for the milking robots, but 10 years ago it was a nightmare. When a cow got blocked in the robot, the farmer get notify and stops what he is doing to check the cow and the robot. With the free access to the milking robot 24/7 it means that as a farmer you can get your phone ringing to free a cow stuck in the robot at 3 am, or when you are 20 miles away in a field. This level of stress caused many farmers to sell their milking robot and come back to two milking sessions a day, typically 6 am and 6 pm.
by protocolture | 2025-04-16 04:54:40+00:00
>Smart contracts are supposed to eliminate a huge swath of disputes, so often people don’t need courts at all

That just sounds like near total agreement with me.

Dont get me wrong, I love smart contracts conceptually. But if the parties to a smart contract desired court arbitration, they should include a function for it in the smart contract. Like a swing vote for a trusted third parties keys.

Without that, to me, you are signalling acceptance of the outcome of the code without arbitration. If you seek a court to interfere with the execution of a smart contract that never included a provision for arbitration then you are in my mind, as guilty of ignoring the intent of the smart contract as any hacker might be.

And if you were just going to court to dispute the smart contract, you may as well just have accepted a legacy contract. Escrow, multiple parties, etc etc all solved problems in the traditional legal space.
by ChuckMcM | 2025-04-16 04:55:19+00:00
This is the kind of cool stuff I'm going to miss during the coming dark ages. When ever I read this in a paper:

"The authors acknowledge support from NIH Training Grant No. T32GM145452 (A.T.G., C.S.O., and Z.L.), NIH Training Grant No. T15LM007056-37 (J.A.L.), and the High Performance Computing facilities operated by Yale's Center for Research Computing."

All of these things (the NIH and Yale's Center for Research Computing) relied so heavily on government funding that they are no longer getting, especially if they don't sing ideologically pure songs for dear Leader.
by shkkmo | 2025-04-16 04:56:07+00:00
Are you sure? There can be absolutely be voting and flagging biases, but the majority if the time it happens it is due to issues of tone for comments that are picking fights rather then prompting interesting discourse. When you get flagged or down voted, the most productive response is to look at how you were presenting your information or opinion and if there was a way to do so that would be more inclined to produce a productive conversation. Even when it's borderline, there's usually something you could have changed that wouldn't have drawn as much partisan ire and it is valuable to consider this, as partisan ire turns off brains.
by threeseed | 2025-04-16 04:57:14+00:00
I use Scala which has arguably the best compiler/type system with Cursor.

There is no world in which a compiler or tooling will save you from the absolute mayhem it can do. I’ve had it routinely try to re-implement third party libraries, modify code unrelated to what it was asked, quietly override functions etc.

It’s like a developer who is on LSD.
by danpalmer | 2025-04-16 04:57:28+00:00
This is awesome. I used Causal years ago to do something similar, with perhaps slightly more complex modelling, and it was great. Unfortunately the product was targeted at high paying enterprise customers and seems to have pivoted into finance now, I've been looking for something similar ever since. This probably solves at least, err... 40~60% of my needs ;)
by Taek | 2025-04-16 04:58:09+00:00
Smart contracts give you a lot of financial automation and guarantees that regular courts do not. Furthermore, any litigation or arbitration in court is very expensive. If you can use smart contracts to simultaneously increase the complexity and sophistication of your transactions while also reducing the number of times you need to go to court, you've created value.

And, a lot of crypto projects do pair their smart contracts with regular contracts, or at the very least with ToS
by somenameforme | 2025-04-16 04:58:29+00:00
Check the dates. The order was issued March 31st. The date in this article mentions March 16th as the date of the individual's detention. he was deported "days later."

It's also unlikely TPS was granted, as the article remains ambiguous on this point which is suggestive of the fact that he was still on 'humanitarian parole' pending a hearing. If there were any other possible angle to try vilify and/or hyperbolize these actions, it's highly unlikely that the media would miss it.
by cmurf | 2025-04-16 04:59:37+00:00
Did you read the 4th circuit opinion?

The Government may not rely on its own failure to circumvent its own ruling that Abrego Garcia could not be removed to El Salvador. More importantly, the Government cannot be permitted to ignore the Fifth Amendment, deny due process of law, and remove anyone it wants, simply because it claims the victims of its lawlessness are members of a gang. Nor can the Government be permitted to disclaim any ability to return those it has wrongfully removed by citing their physical presence in a foreign jurisdiction.

https://www.courthousenews.com/wp-content/uploads/2025/04/ab...

>That's why all they could say was 'facilitate', and why they had to slap the lower judge's wrist.

That's an incomprehensible interpretation of what the Supreme Court actually wrote:

The order properly requires the Government to “facilitate” Abrego Garcia’s release from custody in El Salvador and to ensure that his case is handled as it would have been had he not been improperly sent to El Salvador. The intended scope of the term “effectuate” in the District Court’s order is, however, unclear, and may exceed the District Court’s authority.
by zdragnar | 2025-04-16 04:59:37+00:00
The problem isn't AI; it's just a tool. The problem is the people using it incorrectly because they don't understand it beyond the hype and surface details they hear about it.

Every week for the last few months, I get a recruiter for a healthcare startup note taking app with AI. It's just a rehash of all the existing products out there, but "with AI". It's the last place I want an overworked non-technical user relying on the computer to do the right thing, yet I've had at least four companies reach out with exactly that product. A few have been similar. All of them have been "with AI".

It's great that it is getting better, but at the end of the day, there's only so much it can be relied upon for, and I can't wait for something else to take away the spotlight.
by mediumsmart | 2025-04-16 05:02:42+00:00
The client sends the new menu as a word document. Select all > copy > post this wall of text into llm > please proofread > please turn into semantic html > please translate into German, French and Italian. That takes the 3 minutes a Developer needs to formulate a prompt that will get a result with only 2 bugs.

Know if it actually is your tool.
by anon7000 | 2025-04-16 05:02:59+00:00
> Is it so simple? The highest marginal tax rate in the US is 50.3% (37% federal + 13.3% state in California). The highest marginal tax rate in Norway is 47.4%.

Sure. It’s not simple. But you’re missing a lot of the picture too. People with high wealth and ownership can leverage massive loopholes (like taking a loan with stock as collateral) which means they pay very little effective tax on their “income”: https://www.profgalloway.com/earners-vs-owners-2/

The solution is surely not the status quo.
by 2muchcoffeeman | 2025-04-16 05:03:59+00:00
If this is your list, then (most) ads for sodas aren’t targeting you to buy sodas for yourself.

Ok. But if I’m buying for someone else, I’m asking them what to buy.

Left to my own devices I will never buy “off list” except if I come across some weird thing that I’ve never heard of.

In this way, these ads “don’t work on me.”
by _Algernon_ | 2025-04-16 05:04:16+00:00
>But also the idea of living in a forest is not really an option for most people in the modern world. So my personal take is that the social contract is inherently non-voluntary in the modern world.

This idea is ridiculous because even if you could go live in a forest a large part of the enlightenment was that states grabbed control of the periphery (forests) of their domain. You can no longer run of into the forest. The state will still want you to fit into the existing ownership structures, censuses, taxation regimes, etc. If you commit a crime it will still be decided by the existing courts.
by elcritch | 2025-04-16 05:04:36+00:00
Fine I’ll oblige. :P

I believe hastening it (momentarily) has been good. Well the looming debt issue as I understand this subthread to be about.

Like a patient getting indigestion and goes to the ER thinking it's a heat attack, only to find it’s not but his cholesterol and BP is through the roof and he needs blood pressure meds asap.

Trumps tactics has caused much more attention on the matter. Tariffs can be reduced, etc, but hopefully bringing a wake up call will help avoid catastrophe.

No idea if that was part of Trumps plan or just bumbling, but I believe it’ll be good long term.

I’ve been reading lots of dystopian sci-fi fearing hyperinflation in the near future in the US and then Europe. Now it seems people are taking it a bit more seriously. Even this comment chain shows that.

Then again I’m also encouraged by Argentina’s response after 70-80 years of hyperinflation and stagnation. Javier Milei‘s policies appear to be working contrary to the prediction of most everyone beforehand.
by chris_wot | 2025-04-16 05:04:51+00:00
She was an Objectivist. She considered social security to be "legalized plunder". Then when she needed it, she decided to take it.

One of her wonderful worldviews was to rejects altruism as a moral imperative, arguing that individuals should live for their own rational self-interest. Social security, based on the idea of supporting others, contradicts this principle.
by Wololooo | 2025-04-16 05:06:33+00:00
I have the feeling that there will be no redemption arc for those ones and the repenting would be for show before a court of public opinion.

I'm going to be to the point here, if you guys over there don't start to heavily push and organise, and I said it already, you're one Reichstag fire away from something very bad, and from my point of view, there is probably one kristallnacht pending in the mix.

This is not a hyperbole and if someone wonders why this has relevance to the discussions, in this case most of the people around here are blue team, and it does feel like the red team has already taken anything that wasn't attached and now taking the time to take what's bolted on...

I guess the silver lining of all this, is in their hubris, they forgot the bread and games motto, so they're might still be a chance to turn things around somewhat... But the window is closing at an impressive speed.
by steventhedev | 2025-04-16 05:06:34+00:00
TLS chose the threat model that includes MITM - there's no good reason that should ever change. All I'm arguing is that having a middle ground between http and https would prevent eavesdropping, and that investment elsewhere could have been used to mitigate the MITM attacks (to the benefit of all protocols, even those that don't offer confidentiality). Instead we got OpenSSL and the CA model with all it's warts.

More importantly - this debate gets raised in every single HN post related to TLS or CAs. Answering with a "my threat model is better than yours" or somehow that my threat model is incorrect is even more silly than offering a configuration of TLS without authenticity. Maybe if we had invested more effort in 801.x and IPSec then we would get those same guarantees that TLS offers, but for all traffic and for free everywhere with no need for CA shenanigans or shortening lifetimes. Maybe in that alternative world we would be arguing that nonrepudiation is a valuable property or not.
by insane_dreamer | 2025-04-16 05:07:14+00:00
CVE was anti-American woke.

No, more seriously, just like with shutting down NOAA services, it seems the goal is to:

1. cut services (we saved taxpayer money!!)

2. at some point later: oh, we actually need those services

3. pay <insert your favorite vendor here, preferably one connected to Musk> to provide the service (see! we don't need to pay gov employees!!) (fine print: the vendor costs 2-3x the original cost). But by then no one is looking at the spending numbers anymore.

Slick moves.
by lurquer | 2025-04-16 05:07:22+00:00
Full udders are painful. For humans too. If mom starts breastfeeding and then abruptly stops, the boobs will swell up and ache horribly for several days (until lactation stops due to lack of stimulation.)

You don’t need to train the cow. After it’s milked once with the machine, it associates the thing with pain relief (plus a little snack to reinforce.)
by sometimes_all | 2025-04-16 05:08:13+00:00
I'm not sure what the reporter means by "original". Does "original" now just mean something which isn't "sequels, spin-offs, and adaptations of comic books and toys" (reporter's words)? Or does original mean fresh concepts, new ideas, a different way of looking at things? I haven't watched the movies he has mentioned, only looked at the wikis, but the examples the reporter gives sure don't seem original, they seem to be running on the standard tropes found in most movies, or even worse, something an algorithm would think that people will like.

And anyway, does the reporter expect that just because something isn't a Marvel movie, people will come, watch, and like it? What gave him that impression?

I rarely go to the movies any more. Ticket prices are high even after discounts, it's basically robbery for stale popcorn, and for what? Content that is already neutered by producers, censored by the government du jour and over/underacted by actors which got there only due to nepotism? There used to be a time when I would go to watch an interesting movie alone. That time has long gone now because there's nothing interesting in the cinema - primarily because movie halls know they are dying, are too risk-averse, and in many cases are arm-twisted by distributors to show only the big-budget movies. I'd rather while away a weekend reading a good book or watching a movie or series on a streaming platform. There are plenty of those with original ideas which can be easily found.
by pests | 2025-04-16 05:09:32+00:00
I sometimes watch a concrete YouTuber. He recently did a manure pump pit. I honestly didn't realize the scale of manure management. A massive holding tank for all the produced waste. All the areas with cows will have ways of pushing and moving that manure out into trenches and eventually into a massive pit. The pump pit was so they could get to the lowest point and pump the product into its next stage of processing / use. Its a valuable byproduct so worth dealing with but just never thought about what goes in must come out, and cows eat a lot.
by ToValueFunfetti | 2025-04-16 05:10:04+00:00
Suppose you work in a field where getting calculations right is critical. Your engineers make mistakes less than .01% of the time, but they do a lot of calculations and each mistake could cost $millions or lives. Double- and triple-checking help a lot, but they're costly. Here's a machine that verifies 95% of calculations, but you'd still have to do 5% of the work. Shall I throw it away?

Unreliable tools have a good deal of utility. That's an example of them helping reduce the problem space, but they also can be useful in situations where having a 95% confidence guess now matters more that a 99.99% confidence one in ten minutes- firing mortars in active combat, say.

There's situations where validation is easier than computation; canonically this is factoring, but even division is much simpler than multiplication. It could very easily save you time to multiply all of the calculator's output by the dividend while performing both a multiplication and a division for the 5% that are wrong.

edit: I submit this comment and click to go the front page and right at the top is Unsure Calculator (no relevance). Sorry, I had to mention this