MurphyA/hacker-news huggingface dataset:
by bigstrat2003 | 2025-04-06 21:37:27+00:00
I'm struggling to see how you would implement narrowing conversion in a way that is harder for programmers to misuse when they aren't being mindful, while also being pleasant to use when you really do want to just drop higher bits. Like, you could conceivably have something like a "try_narrow" trait which wraps the truncated value inside an Err when it doesn't fit, and it would probably be harder to accidentally misuse, but that's also really cumbersome to use when you are trying to truncate things.
by 9dev | 2025-04-06 21:37:44+00:00
It’s really a weird effect. Like, how enjoyable even is a world where you’re rich, but surrounded by poor, uneducated, sick people, and all you can do is stay inside because the outside is caustic and ravaged?

Is it too much mental gymnastics that it’s a lot more interesting to talk to happy, sophisticated, educated people? To enjoy maintained public parks? To learn from the past in museums that present all kinds of viewpoints? To have a strong workforce that is confidently going to the doctor?

I’ll never get what’s so hard about things affecting other things, even if it doesn’t immediately yield a profit.
by tky | 2025-04-06 21:38:01+00:00
All the takes on this release miss one crucial point: if you want people to adopt E2E encryption, you must reduce friction. For users of Gmail, that means familiar elements and flow to their usual use of Gmail. If this lets even a handful of people use more secure messaging, it’s a win. For Google workspace-centric orgs it’s a good step in the right direction.

If you disagree, go set up GPG on a non-tech’s computer, tell them they need to use Thunderbird or some other helper app(s), and see if you can even go home before being asked to remove it all.
by FreakLegion | 2025-04-06 21:38:05+00:00
In fact "exclusively" doesn't belong in the statement at all. A very small number of successful RCE attacks use exploits at all, and of those, most target (often simple command) injection vulnerabilities like Log4Shell.

If you think back to the big breaches over the last five years, though -- SolarWinds, Colonial Pipeline, Uber, Okta (and through them Cloudflare), Change Healthcare, etc. -- all of these were basic account takeovers.

To the extent that anyone has to choose between investing in "safe" code and investing in IT hygiene, the correct answer today is IT hygiene.
by tim333 | 2025-04-06 21:38:40+00:00
Perplexity:

>Paul Newman is indeed known for having struggled with alcohol during his life. Accounts from various sources, including his own memoir and the documentary ... (https://www.perplexity.ai/search/is-paul-newman-known-for-ha...)

I guess there's something about ChatGPT's set up that makes it different? Maybe they wanted it to avoid libeling people?
by KennyBlanken | 2025-04-06 21:39:17+00:00
The IRS makes a huge profit margin on average from audits on the 1%-and-up folks because so many of them are cheating on their taxes.

Even before all this, the IRS was spending most of its auditing resources on auditing the poor - especially people using the earned income credit - and losing thousands of dollars or more on each audit because they either didn't find anything, or it was an inconsequential amount of money.
by teaearlgraycold | 2025-04-06 21:39:18+00:00
MCP is poorly named. That is why it’s confusing to many people. It’s a tool use protocol. It provides means to list tools provided by a server as well as manage asynchronous tasks. It’s transport agnostic and uses JSON-RPC to format requests and responses.

It’s different in that it’s designed to provide natural language instructions to LLMs and is a pretty open-ended protocol. It’s not like the Language Server Protocol which has all of its use cases covered in the spec. MCP gives just a little bit of structure but otherwise is built to be all things for all people. That makes it a bit hard to parse when reading the docs. I think they certainly could do a better job in communicating its design though.
by rsynnott | 2025-04-06 21:40:51+00:00
In practice, the only significant American brands in Europe are Ford and Tesla. Ford has long designed cars specifically for the European markets (their big sellers are very different in Europe and in the US, and many of their European big-hitters are not even available in the US), and Tesla, of course, isn’t doing so great these days.

(GM also used to have a couple of European brands, but again they were rather different to GM’s big US sellers.)
by yieldcrv | 2025-04-06 21:41:01+00:00
A common misinterpretation of the free speech concept as codified in the 1st amendment.

The 1st amendment gives a freedom of association.

All of these private organizations are choosing not to associate with that content, squarely in line with the 1st amendment. The 1st amendment just says the government won’t criminally sanction anyone for not associating with someone else.

This is in addition to the protections against the government for your speech and expression.
by ltdanimal | 2025-04-06 21:41:31+00:00
Maybe we should agree that all jobs can't be compared apples to apples. I have 3 good friends that fly for major airlines. I'm pretty familiar with the jobs.

-Those tests are no joke, but saying they are more intense than a 4 year CS degree is ridiculous. Also the major airlines you can compare to FAANG, and many people study for 6+ months to pass those interviews - Airlines are union jobs. If you get them you aren't getting fired unless you try to do something really stupid. - There isn't any wondering if you are doing a good job or not , and you don't take any work home. - Regulations change or you can switch planes, but the career is leaps and bounds more static then SWE.

Net net is that they are very different jobs. SWE is a great gig overall but I take issues with people saying how much harder or easier it is than other jobs. "It depends" is the answer.
by Kirby64 | 2025-04-06 21:41:43+00:00
Pretty sure the ones in most EVs today work fine at -10C, but they may lose some efficiency. The thing is, there's already mechanisms in some cars to generate waste heat specifically for this purpose. Tesla's already have the ability to run their motors 'inefficiently' generating waste heat, which can be pumped into the battery coolant and heat that. It's no better than electric strip heating, but it doesn't add any cost to the system.

The real benefit, in my view, to being able to charge at cold temps is to improve overall efficiency. If you have to waste some amount of power to heat the battery then that is power that could have been used to charge the car instead...
by josephg | 2025-04-06 21:41:44+00:00
That’s a classic technique to track click through rates. Google.com has done this forever. The technique is to make an actual link in HTML (<a href=…>) then add an event handler which cancels the link’s default behaviour when you click it - and replaces it with javascript, or a tracking link.

I understand why Google.com wants that data. But in an email client it’s extremely obnoxious.
by ajross | 2025-04-06 21:42:30+00:00
The 5x delta is stated to be at 14F. That absolutely is within the reasonable operating range of a Model Y heat pump, not sure what you're citing?

It's true that there are very cold environments (Fairbanks winters, say) where in-car thermal management won't be sufficient to keep charging rates high. But those are the same environments where you can't even start a gasoline car without an engine block heater, and I don't see many "no cars in Alaska" arguments on the internet. Everything has limits, but I don't see this battery trickery having much of a home.
by conaclos | 2025-04-06 21:42:32+00:00
I find it strange that the article doesn't talk about the alternative to checked arithmetic: explicit Wrapping [0] and Saturating [1] types, also provided as methods on numeric types (e.g. `usize::MAX.saturating_add(1)`).

Regarding `as` casting, I completely agree. I am trying to use safe `From::from` instead. However, this is a bit noisy: `usize::from(n)` vs `n as usize`.

[0] https://doc.rust-lang.org/std/num/struct.Wrapping.html [1] https://doc.rust-lang.org/std/num/struct.Saturating.html
by Aurornis | 2025-04-06 21:43:36+00:00
Several months ago there was a strange story from a startup founder who was lost and looking for his next step.

He described how he got recruited into DOGE (or what was to become of it) via a series of online conversations that served as interviews. It was light on details but gave the impression that he basically got vibe-checked by a couple informal chats until he was into DOGE.

He left quickly afterward, not giving many details. He meant it as a side note to his story but I thought it was telling that people with zero experience in auditing or managing large government systems were being vibe-checked with online chats straight into DOGE, which was then given massively destructive powers to cut government spending.

So I suppose I’m not too surprised to see another startup founder mysteriously appear in DOGE, doing mysterious things to our nation’s infrastructure.
by brohoolio | 2025-04-06 21:44:12+00:00
Lots of articles about skipping vetting or bypassing normal process.

https://www.cnn.com/2025/01/21/politics/trump-temporary-secu...

https://www.theguardian.com/us-news/2024/nov/15/trump-cabine...

https://www.politico.com/news/2025/02/22/judge-extends-doge-...
by rsynnott | 2025-04-06 21:44:25+00:00
That isn’t really how they’re supposed to work, and in a normally functioning country the state could expect to be sued by the injured parties (that is, the competitors of the specially favoured companies) if they tried it. Of course, in 2025 the US is hardly a normally functioning country, but it’s also not clear that its court system is _totally_ compromised, and any company who went along with this would certainly be taking a risk.
by luckylion | 2025-04-06 21:44:43+00:00
> most people in the EU agree on several basic principles regardless of their political preferences

Most in the US will, too. The nuances are where is falls apart, both in the US and in Europe.

- Should all costs be covered, for everything, no matter the cost? How would that work / How do we disband the laws of nature?

- How long should that net carry you? Does it only break the fall, or does it replace your job for eternity? Who pays for it? Do you have any obligations when losing your job?

- How high should that pension be? Who should pay for it? Should it (in part or in full) depend on you ever having worked? Can you choose when to retire?

- What is "good education", and what is "access"? I'm not all that bright, do I have a right to be taught at university? For how long? Who pays for it? Is anything expected in return?

- Are we pacifists who refuse to acknowledge that war might find us, even if we're not looking for it? Or are we preparing for war because we don't want it and believe that an aggressive imperial force will pounce unless it believe us to be capable of defending ourselves?

I don't believe that everyone in your country, much less in Europe, agrees. Once you remove the vague language and put concrete things in, you'll see people disagreeing on each point.

If it was that simple, we'll have peace on earth because everyone will be able to agree on those core things - as long as you promise them that it's their interpretation that counts.
by modeless | 2025-04-06 21:44:50+00:00
I hate this so much. I will pay for a service that takes all these content-free messages and goes to the website and logs in and extracts the actual message content and puts it in my inbox. Anyone want to make that?

I actually think there is a more general opportunity here with AI. Every app and website and UI I use is optimized by a gaggle of PMs to achieve business objectives that don't necessarily benefit me. AI is getting to the point where soon it will be able to use these non-aligned UIs for me, and present to me a much simpler UI customized just for me, that does what I actually want and no more.
by crazygringo | 2025-04-06 21:44:59+00:00
What are you even talking about?

You use some made-up idea like "superhuman vision" and then you're asserting that I haven't provided a "compelling rebuttal"?

You're not engaging in good-faith conversation here. If you want to understand the clear, obvious benefits of LIDAR over cameras, it's a Google search away. And it's not just about at night -- it's about weather, it's about greater accuracy, especially at greater distances, it's about more accurate velocity, and so forth. It's not rocket science to understand that earlier, more confident detection of a car or deer or child suddenly moving into the street is going to reduce collisions.
by mzajc | 2025-04-06 21:45:23+00:00
> The most obnoxious thing about this I think is that Chrome shows the original link.

Not defending Google here, but could it be that the tracking page is opened by onclick() while the browser shows the original href attribute?

I've seen some websites do that for various purposes and opening the link in a new tab (middle mouse click) usually bypasses it.
by smileybarry | 2025-04-06 21:46:49+00:00
Yep, while I like moving all snail mail to email, I hate that (almost) every single service now just sends a "monthly/quarterly report now available in your account area!" email. A rare few of them at least offer the option of just sending it attached (with the default being a useless reminder email), but most are essentially a chore, because nearly everything here uses phone+2FA as login rather than a password or passkey.
Show HN: Cricket Stats GPT
by iceman_w | 2025-04-06 21:47:10+00:00
Query statistics for IPL 2025 using natural language. You can ask questions like:

- What is Kohli's strike rate in the first 5 overs of the match?

- What is Dhoni's average in matches CSK wins?

- What is the average score of the team batting first?

- Who are the top 5 batters with highest strike rate (minimum 50 runs scored)?

Have fun digging into stats you always were curious about but had no way to actually find out. https://cricket.pivots.fyi/

I built this tool for fun, would love to hear feedback!
by superkuh | 2025-04-06 21:47:46+00:00
You bring up a great point. The battery spec is only given at -10C. That's a mild normal day's low temperature in winter in Minneapolis, USA. But it's often much colder than that for long periods of time. I wonder if this glassy layer they apply can handle -30C; a temp where above ground heat pumps are no better than electrical resistive heating.
by jsheard | 2025-04-06 21:47:58+00:00
I wish studios would share these behind-the-curtain versions more often, but I suppose that would go against their apparent belief that CGI is a dirty word that can never be acknowledged even if that means outright lying about how much they used. The last Planet of the Apes movie did go there though, the 4K Bluray includes a "raw cut" of the entire movie which shows exactly what the camera saw.
by throw0101d | 2025-04-06 21:48:18+00:00
> 3. Rudimentary resource controls with no default enforcement (important!).

Seems pretty extensive to me, including R/W bytes/s and R/W ops/s:

* https://docs.freebsd.org/en/books/handbook/jails/#jail-resou...

* https://klarasystems.com/articles/controlling-resource-limit...

* https://man.freebsd.org/cgi/man.cgi?query=rctl
by brendoelfrendo | 2025-04-06 21:48:51+00:00
People don't donate to charity. Mostly. And even if they did, charities are subject to fracturing money that could be doing good many different ways when what's really needed is a concerted push in a particular direction. Saying we need to shift the focus from government spending to charity is to say that we should defund the effort entirely. I am entirely against privatizing the public good.
by rstuart4133 | 2025-04-06 21:48:55+00:00
I think the point @n3storm is making isn't about the size of the roads. It's far more radical than that. They are saying European city's haven't just ditched SUV's - they have ditched cars.

If you come from somewhere like the USA, Canada or Australia, it's hard to imagine that's even possible. Actually, it isn't possible in the suburbia's those countries have built to house their people. But it turns out it is not just possible if build your cities differently, it's better in some ways. It costs less because there are no cars, you waste far less time in commute, and its healthier because people get more exercise (they use their legs to move around).

"They have ditched cars" is an exaggeration of course. A lot of them still have cars. But most days, they won't use it. Daily commutes are done on foot, or bike. Long distance commutes have a public transport leg. It's hard to get your head around unless you live there for a few weeks.
by ampere22 | 2025-04-06 21:49:00+00:00
Thank you for sharing. Seems I still have more to learn!

It seems the bug you are flagging here is a null reference bug - I know Rust has Optional as a workaround for “null”

Are there any pitfalls in Rust when Optional does not return anything? Or does Optional close this bug altogether? I saw Optional pop up in Java to quiet down complaints on null pointer bugs but remained skeptical whether or not it was better to design around the fact that there could be the absence of “something” coming into existence when it should have been initialized
by rtkwe | 2025-04-06 21:50:35+00:00
The STOCKS Act requires trade disclosures within 30 days but the penalty is only $200 so in theory it lags at most 30 days and maybe less depending on the whims of the Rep/Senator in question. More info at the link below, there are predictably some problems with compliance and the lag means the price change they were potentially reacting to might have already happened but there are examples where it hadn't. eg: We learned about some Members dumping stocks after the confidential briefing before COVID really hit the US.

https://campaignlegal.org/update/congressional-stock-trading...
by selfhoster11 | 2025-04-06 21:50:44+00:00
There is established precedent for open source projects who have a need to authenticate multiple bundled files within a release: a xxxxSUMS file followed by a detached GPG signature file.

For example, Ubuntu does it like this:

- The SHA256SUMS file which lists the hashes of each ISO, manifest, netboot, etc. file: https://releases.ubuntu.com/24.04.2/SHA256SUMS. This can be verified on any Linux system with the standard hashing utilities installed, but by itself not sufficient to protect file integrity.

- The SHA256SUMS.gpg file which contains a detached GPG/PGP signature of the SHA256SUMS file: https://releases.ubuntu.com/24.04.2/SHA256SUMS.gpg. The signature is tied to a particular GPG key ID (in this case, that key ID is 843938DF228D22F7B3742BC0D94AA3F0EFE21092). If the SHA256SUMS file's detached signature is correct and comes from the correct key ID, you've verified that the files weren't modified in transit or by a mirror.

This scheme only protects a one-level directory (which is enough for many open-source projects). If you have nested directories, it's time to distribute the model as an archive (in which case you just sign the archive).
by apatheticonion | 2025-04-06 21:50:56+00:00
Both have their place but after writing both extensively, I much prefer Rust - despite the pitfalls.

My biggest critisim of Rust (in comparison to Go) is the lack of a powerful standard library while Go's standard library is outstanding. I would also like to see standardized interfaces in Rust (like AsyncWrite) and in general the async story could be better - though I appreciate the versatility.
by thih9 | 2025-04-06 21:51:01+00:00
Interestingly this is a big topic

https://wiki.gnome.org/Engagement(2f)FootAndCulturalIssue.ht...

https://cassidyjames.com/blog/gnome-foot-logo-rebrand/

> It is actively off-putting and unappealing to at least some folks including much of the GNOME design team, newer contributors, people outside the open source bubble—and apparently potentially entire cultures (which has been raised multiple times over the past 20+ years).
by whytevuhuni | 2025-04-06 21:51:31+00:00
There is, since the zero is used as a niche value optimisation for enums, so that Option<NonZero<u32>> occupies the same amount of memory as u32.

But this can be used with other enums too, and in those cases, having a zero NonZero would essentially transmute the enum into an unexpected variant, which may cause an invariant to break, thus potentially causing memory unsafety in whatever required that invariant.
by chasil | 2025-04-06 21:51:47+00:00
"...Apple decided that while it could comply with the terms of GPLv2 license with regards to rsync 2.x, it could not comply with the terms of GPLv3 license with regards to rsync 3.x."

This is due to the software patent terms that appeared in GPLv3.

https://news.ycombinator.com/item?id=21645618

https://lobste.rs/s/8lbh1k

https://archive.ph/AeMTz
by varenc | 2025-04-06 21:52:52+00:00
I'm exciting about this too. It becoming more like a protocol makes me optimistic we'll see binary diff API points based on the rsync algorithm.

fun fact: Dropbox internally used rsync binary diff to quickly upload small changes to large file. I assume they still do. But their public API endpoints don't offer this and a small change to a large file means the whole file must be updated.
by bob1029 | 2025-04-06 21:53:04+00:00
I struggle with how the secure email solutions are inherently more secure than just dumping the pdf or ticket details in the email body.

Every vendor's secure email portal I have ever used was ultimately authenticated using my email account. Any one-time passcodes are sent to the same email. Password recovery? Email. If a malicious user is on my PC or otherwise intercepting my mail, they could access 100% of the solutions I've got access to right now.
by giantrobot | 2025-04-06 21:53:46+00:00
Reasons to have JavaScript fallbacks in your pages:

- Microbrowsers exist. They're the things that generate previews in messaging apps and social media.

- Ad blockers. Because the advertising on the Web has become a complete dumpster fire even the FBI recommends ad blockers. They can break stupid JavaScript functionality. Partially loaded JavaScript can cause additional load on the back end with retries or missing completion conditions.

- Crappy cellular. Cellular data remains unreliable and its reliability is not evenly distributed. A user can go from a great signal to shitty back to great through no fault of their own. You can't be guaranteed all your shitty JavaScript will even load.

- Spiders. Spiders have varying amounts of support for JavaScript, not everything is some variation on Chrome.
by cyberax | 2025-04-06 21:53:47+00:00
You don't even need a heat pump. You can just slightly overvolt the charger, so that some electrical energy is lost as heat rather get than transformed into chemical bonds.

> This is one of those Great New Technology items that smells like a failure simply because it's not competing with the thing the designers think it is.

This technology makes no sense for fast DC charging because there's enough waste heat to keep up the battery temperature, and you can just use some of the power to heat up the battery.

But it can help for slow overnight charging. Keeping battery heated all night is wasteful, but you still want to be able to charge.
by WorldPeas | 2025-04-06 21:54:22+00:00
it's funny because RF nerds figured that out years ago and we have great screw and jack connectors we could use for video protocols like SDI, but it doesn't look modern enough I guess. I would just say usb-c is a lesser evil of the two if you want a future where one could plug in a usb-powered tv stick and expect it to be able to output video while getting power and not needing one of those hideous cradles the amazon sticks do to power it and output signal