MurphyA/hacker-news huggingface dataset:
by freefaler | 2025-04-16 06:29:47+00:00
BTW if you wonder who is this guy:

Dan Gelbart is a German-born, Israel-raised, and since 1973, Canada-based inventor, engineer, and entrepreneur known for his influential work in prototyping, machining, and high-tech innovation. He holds a Bachelor’s and Master’s degree in electrical engineering from the Technion-Israel Institute of Technology, where he also served as an infantry soldier during the 1967 Six Day War.

After moving to Canada, Gelbart began his career at MacDonald, Dettwiler and Associates (MDA), where he developed high-speed film recorders for satellite imagery and contributed to the founding of spin-off companies like MDI-Motorola and Cymbolic Sciences. He is best known as the co-founder and Chief Technology Officer of Creo Products, a British Columbia-based company specializing in laser-based printing technology. Creo grew to employ around 4,000 people and was sold to Kodak in 2005 for $1 billion, with much of its award-winning technology invented by Gelbart himself.

Gelbart is credited with over 100 U.S. patents (some sources state 145), spanning fields from optics and telecommunications to medical devices and metal 3D printing. He is recognized as a pioneer in computer-to-plate printing technology and has twice received the British Columbia Science Council Gold Medal. In recent years, Gelbart founded Rapidia, a Canadian manufacturer of metal 3D printing systems, introducing a water-based metal printing process that simplifies and accelerates production.
by benatkin | 2025-04-16 06:32:00+00:00
Maybe you don't see how it's bikeshedding. Ah well, let me try to explain.

It's because it's like if someone had forgotten to validate the user's role in an endpoint in a Django app, and someone said that they should have used Rails because it's easier to understand. In reality both are easy enough to understand to be able to do an authorization check, and the framework isn't the issue. So the person suggesting Rails is bikeshedding.

Likewise, if someone made another vulnerability database it would likely have the same issue, and this isn't really the place to solve it. If somehow this does trigger the realization to solve it, then it will be by luck.
by mr_mitm | 2025-04-16 06:32:05+00:00
That's why it's a good idea to block connections of all protocols into address ranges where an attacker might be able to host a service. Even on internal networks, if you are a corporation.

But it gets better than tunneling over ICMP: DNS tunneling. Pretty much all systems can talk to a DNS resolver. If it resolves arbitrary host names, you can set up a DNS for a zone you control and requests will end up there. With tools like iodine (requires root and a binary on the target), you can tunnel your traffic conveniently (and slowly).
by hashstring | 2025-04-16 06:32:27+00:00
This^ and to add to that, at the very least MITRE assigned IDs which is great. Plus they did an initial scoring, which, well… will never be perfect like you said and I’m sure these things evolve throughout time and get better (not talking necessarily CVSS vX).

What a shame on this current gov. administration, if you can even call it that.
by rat87 | 2025-04-16 06:33:47+00:00
They are not. Trump is no libertarian or small government guy. The build the wall guy is the opposite of that. Even with stuff like social security he usually at least rhetorically claimed to be for more benifits (as long as it goes to "real Americans") and he is all for increasing police and military spending. And generally spending more on stuff that gives him money. Plus giant tax increases (tarrifs). He doesn't care much if government is dismembered as long as it owns the libs and gets rid of the public corruption prosecutors/others who might stand up to him

Trump's actions towards Putin are highly irrational. Maybe he's being blackmailed, maybe he's being bought, maybe he just has likes Putins style but there is a reason people suspect him despite it being unlikely in the general case.
by gabesullice | 2025-04-16 06:34:01+00:00
As a newly minted cynic, this seems like a cynical play to save someone's budget.

Step 1: Post discreetly to a forum with minimal information and an absurdly short deadline

Step 2: Phone your friend, the former board member, to make your case on LinkedIn

Step 3: Ring up a friendly journalist and give them a tip

Step 4: Reference the insuing chaos as justification for keeping your project funded

Note that the article carefully avoids pinning the blame on DOGE or the Whitehouse while heavily implying it. MITRE is technically a private entity, albeit a non-profit. And the very last paragraph of the article states:

> A CISA spokesperson told CSO, “CISA is the primary sponsor for the Common Vulnerabilities and Exposure (CVE) program… Although CISA’s contract with the MITRE Corporation will lapse after April 16, we are urgently working to mitigate impact and to maintain CVE services on which global stakeholders rely.”

To be clear, the point isn't to say that the CVE program isn't valuable, nor is it to say that it's good for a shenanigan like this to be necessary.

The point is that, unless you're directly involved in this subject (not impacted—involved), it's probably best to maintain a "wait and see" attitude rather than succumb to catastrophizing this news.
by mr_mitm | 2025-04-16 06:35:23+00:00
These were fun times. I've been working as a pentester for the past ten years, and the job got a lot harder, with everything using frameworks and containerization.

We still get plenty of results, because the tooling also gets better, and finding just one vulnerability is enough to be devastating, which makes it kind of frustrating. There is tons of progress, but much of it is just not paying dividends.
by khafra | 2025-04-16 06:35:33+00:00
> > ... you make a request ...

> Sounds like the work of mustering up instructions... like programming...

Again, try Deep Research. You make a vague request, and it works with you to make it specific enough that it can deliver a product with some confidence that it will meet your requirements. Like a product manager, business analyst, requirements engineer, or whatever they call it these days.
by ModernMech | 2025-04-16 06:35:48+00:00
This post is a great example of how very smart people can fall victim to their own biases.

When you put the "all are welcome" sign on the door of your programming language organization, you're not sampling from "all" but just the people who are already interested in programming, and especially the design and construction of programming languages. These people are inherently motivated to learn and particularly self motivated.

You know as well as anyone that languages in particular, far and away from all other projects in the area of computing, scratch the deepest itches that good developers have. Languages are a siren song for devs who have a burning desire to get to the bottom of computing machines.

And so of course this breed of dev is going to be great whether they have a PhD or not. They are the github-history all green every day crowd. You're skimming the cream of the crop.

But you can't build an entire economy out of the cream. The other people have to do things too. They can't just go to the flea market and pick up a book on "Special Relativity" and learn it. Heck, I got an BS degree in physics and I can't even do that. I needed someone to explain it to me, and a lot of students do. They need the environment that is conducive to learning. I think COVID really proved that people can't just sit on YouTube all day and learn from a screen.
by mrheosuper | 2025-04-16 06:37:12+00:00
The point is not wifi. Wifi is just a protocol, like zigbee, or lora, etc.

Giving something wifi password is different from giving something internet access, they are not inclusive. You just add it to your local network without giving it internet access

In your case, does your smart bulb still have same functionality if you dont add it to your zigbee network ?
by gnabgib | 2025-04-16 06:37:12+00:00
(2018) Popular in:

2023 (293 points, 396 comments) https://news.ycombinator.com/item?id=37897946

2021 (204 points, 193 comments) https://news.ycombinator.com/item?id=29702001

2019 (343 points, 171 comments) https://news.ycombinator.com/item?id=21888096

2018 (472 points, 316 comments) https://news.ycombinator.com/item?id=16967675
by rat87 | 2025-04-16 06:38:43+00:00
Populism is not an agenda it's a style. Also the majority of poor people voted Democrat, the majority of people with low education levels voted for Trump (which is not the same thing as dumb, although voting for Trump is dumb regardless of PhD or lack of HS diploma). There's overlap between low levels of education and income but if you define class by income then low income people mostly voted Dem
by Latty | 2025-04-16 06:39:07+00:00
I find it a little incredible people are still talking about "four years".

They tried to reject the election result and do a coup, and were rewarded for it by getting back into power. They are refusing to follow the law or the courts. They are sending people to gulags in foreign countries. All the checks and balances were destroyed last time. The party has been stripped of anyone who would fight the admin or reject this illegality. They have set up a power grab over elections.

There will not be free and fair elections in four years unless they are simply too incompetent to rig it, the rubicon was crossed long ago. Without mass protest that makes it impossible for them to hold power, American democracy is dead.

They have tried to do it, they say they want to do it, they have the ability to do it, they are actively doing it, and no one is stopping them. How are people still acting like in four years they are going to neatly hand over power to be prosecuted for their crimes?
Show HN: I Made Bagel Font
by hmpark | 2025-04-16 06:39:09+00:00
Hey HN,

I recently made 3d style Bagel web font (with some more styles) from scratch, and wanted to share the process in case anyone's interested in experimenting or giving feedback. You can play around by typing https://www.bake-ai.com/fonts

[Backstory] I was experimenting with Stable Diffusion + ControlNet to generate icons. To my surprise, generating letters this way was actually better than using traditional 3D tools like Blender for this purpose. That led to the idea: what if I could turn into an actual real working font?

I found a few tools, but most were either paid or lacked support. So I leaned on Cursor (been using it since launch) and spent a few hours hacking together a Python script using FontTools(https://github.com/fonttools/fonttools, Opensource font generation python library). Eventually, I got a working .ttf file with an SBIX table (used by Apple’s color fonts)!

[Technical details] 1) Create base glyphs Drew black letterforms by hand on iPad (or used open-licensed fonts for other experiments). 2) Add texture/style Used ComfyUI + Stable Diffusion + ControlNet to generate stylized images for each letter. Could also be done in Midjourney, Photoshop, etc. Key part is keeping image sizes consistent. 3) Generate font files Used FontTools (Python). Tried FontForge, BitFontMaker, even paid tools like Glyphs and Fontself — none worked well for image-based fonts. FontTools + SBIX table finally did the trick.

[Constraints] SBIX fonts are still relatively heavy, and not all software supports them yet. Photoshop does, but Figma doesn’t (yet). I plan to submit a feature request to Figma once things are more polished.

If anyone’s curious to try the font, happy to share it. Would love feedback, ideas, or just to know if this inspires you. I’ve been doing solo creative projects for a while — it can get tough, but knowing it sparks something for someone else helps a lot.

Thanks for reading — and feel free to AMA if you're trying something similar!

Updates on availability - Available: Chrome, Safari - Unavailable: Firefox

I'm using a Mac with the Chrome (Arc) browser. It might not work properly on some browsers. If it doesn't work for you, reporting it would really help me improve it next time. Thanks!

Updates on ideas from the community - Add cream cheese for bold version - Want Wholemeal version
by johnnyanmac | 2025-04-16 06:40:08+00:00
And you are right... that's why "The Party" instead appeals to "the party" with various single issues (you know all the hot topics) and implement (or perhaps, pretend to implement) those while the real bills "The Party" want are passed under their nosess. "The Party" spends a dollar on "the party" while grabbing hundreds from the vault they all pitched into.

Worked for decades. Not so well when Trump so publicly tanked the economy and snatched one of the 3 untouchable things.
by constantcrying | 2025-04-16 06:41:07+00:00
>In the age of digital media, basically everything is instantly and infinitely replicable, so you are effectively asking for a world in which it becomes rapidly impossible to make money off of any kind of digital good (music, literature, film, software, etc.)

Plainly false. YouTube clearly proves this wrong. You can be funded by your fans.

Besides, if you are a musician and get just tens of thousands of plays on Spotify you are basically not making any money of it. Only extremely few artists make any kind of money of the copyright of their songs. Already distribution rights are near worthless.

Again. I am not opposed to IP rights because of what artists want or do not want.
by 9rx | 2025-04-16 06:41:34+00:00
America has never had more manufacturing than it does now. American manufacturing is hugely successful. It doesn't get the attention it deserves because:

1. 70% of it takes place in rural areas. Most people are completely oblivious to anything that happens outside of cities so can feel like manufacturing doesn't exist.

2. Automation has removed the need for most labor involvement so that manufacturing doesn't appeal to the "dey took 'er jerbs" crowd.

While there are many similarities, agriculture is not treated the same way because:

1. Agriculture more or less entirely takes place in rural areas, so it is completely out of mind. 30% of manufacturing happens in cities so it still visible, even though it looks sparse.

2. American agriculture is pushing the limits of how much agriculture can take place. There is still some underutilization, like CRP lands, but the wall would be hit pretty quickly if there was a serious push to expand production. There is no apparent wall for manufacturing.

3. It is, for the most part, many generations removed so there is no connection to it. Most families haven't farmed since their great, great, great grand pappy's time. Whereas many families still have living relatives who were around when manufacturing was the major employer and they get to hear about "the good old days".
by thinkingemote | 2025-04-16 06:43:02+00:00
"I really don't understand why people would think X"

is another example but I think there may be some expression of non-understanding. "So retarted it doesnt make sense."

Similar, "are you a n*zi" never seen here but as a simple but clever "Could you elaborate?" often as a reply to a polite but ambiguous comment. It's basically bait for the ambiguous commenter to confirm or deny the morality of their comment.
by johnnyanmac | 2025-04-16 06:43:15+00:00
Harvard is a private instutution. If they want to teach underwater basket weaving, there's not much you can do to stop that. Anymore than Trump can raid apple and tell them to start making Androids. I thought a billionaire businessman would understand that much; imagine if Clinton back in the day tried to seize Trump Towers.

And while we long forgotten: don't forget that all of this is illegal. to retract congressionally appropriated funds that were already budgeted. The time to yoink this stuff legally was a month ago.
by jterrys | 2025-04-16 06:43:25+00:00
/k/ has hated Russian milsurp slavshit far longer than they cared about Ukraine. For years Russiaboos would shit up the board that almighty AK superior firearm or that Russian magical remote turret tank best tank in the world or that new gen fighter plane best stealth plane in the world and all 1/10 of stupid american military budget bullshit.

turns out all that crap was just what everyone expected it to be: fabricated lies. And also Russians are really bad at conducting war and resorting to meat wave tactics. For a board that cares about firearms and military tactics, it didn't take too much of a far reach to dislike and laugh at Russia.
by ltbarcly3 | 2025-04-16 06:44:36+00:00
I don't think you are bothering to read anything I've said. I've said over and over the court order should be followed, because the rule of law is essential and the court order must be followed regardless. I also think he's lying.

You are allowed to form your own opinions also, you don't just have to read a news article and then try your best to update your thoughts to conform to the daily talking points for whichever side you follow.
by Ucalegon | 2025-04-16 06:44:51+00:00
I know that they are a 501(c)3, but they have significant revenue and intellectual property, so in order to do the lift and shift, there would need to be some money changing hands to accomplish it. Not only that, but being owned by the EU gives the ability for MITRE employees to have the option to immigrate to the EU to protect against any retaliation.

I cannot believe I am typing that second sentence, but here we are.
by tempfile | 2025-04-16 06:45:20+00:00
Even allowing for such a contrived example, would it be so bad if the money was taken from John Smith? The contract writer was an idiot, sure, but John Smith is an idiot too for just taking the money and expecting to be able to keep it. To say otherwise is to say we want to encourage people to take money they didn't earn, to avoid reporting it to an authority, because they'll be able to get away with it. It is also to say that the punishment for stupidity is whatever happens to be the consequence, rather than a fair punishment reasoned out by society.

(I am against prosecution in this case, but I think he should have most of the money confiscated)
by constantcrying | 2025-04-16 06:46:23+00:00
>If you abolish IP youtubers will not be able to make money because if I rip someone's monetized video and host my own ad-free copy, people will prefer to watch that and seeing as there is no legal claim over their IP, the youtuber has no recourse to get me to take down the video. There you go, I just divested a youtuber of a potential revenue stream.

Haha. Do you think that isn't happen right now? Anyways it is irrelevant to the YouTuber, ad revenue is just a small part of it. As blockers are widely in use and YouTubers still exist. YouTube ad revenue is low anyways.

YouTubers make money through merchandise and sponsorships. Merchandise can not be replicated as people buy it to support the YouTuber (selling merchandise while lying that it is to support the creator is fraud, even without IP) and for sponsorships it is irrelevant who also watches the video.

If anything the YouTuber should upload to the ad free site himself to get more reach.
by arkh | 2025-04-16 06:46:30+00:00
> how incredibly stingy tech companies are about spending any money on support

Which is crazy. Support is part of marketing so it should get the same kind of consideration.

Why do people think Amazon is hard to beat? Price? nope. Product range? nope. Delivery time? In part. The fact if you have a problem with your product they'll handle it? Yes. After getting burned multiple times by other retailers you're gonna pay the Amazon tax so you don't have to ask 10 times for a refund or be redirected to the supplier own support or some third party repair shop.

Everyone knows it. But people are still stuck on the "support is a cost center" way of life so they keep on getting beat by the big bad Amazon.
by SCdF | 2025-04-16 06:46:54+00:00
> * Any AI responses used for email support are now clearly labeled as such. We use AI-assisted responses as the first filter for email support.

Don't use AI. Actually care. Like, take a step back, and realise you should give a shit about support for a paid product.

Don't get me wrong: AI is a very effective tool, *for doing things you don't care about*. I had to do a random docker compose change the the other day. It's not production code, it will be very obvious whether or not AI output works, and I very rarely touch docker and don't care to become a super expert in it. So I prompted the change, and it was good enough and so I ran with it.

You using AI for support tells me that you don't care about support. Which tells me whether or not I should be your customer.
by johnnyanmac | 2025-04-16 06:47:32+00:00
Why do you expect a billionaire to steal from billionaires? a portion of non-essential stealing comes from respct, and of course these billionaires are all a part of the same club.

The other lens is simple as well: big fish don't go after the other big fish. That just ends in two hurt fish and no food. Trump thought he was going after a small fry and underestimated the response. just because Columbia folded doesn't mean all universities will.

lens #3: this clip explains it well: https://www.youtube.com/watch?v=VLbWnJGlyMU

He's a bully but if everyone realizes they outnumber (and outmatch him) he loses his power).
by Springtime | 2025-04-16 06:48:51+00:00
One distinctive quality I've observed with OpenAI's models (at least with the cheapest tiers of 3,4 and o3) are their human-like face-saving when confronted with things they've answered incorrectly.

Rather than directly admit fault they'll regularly respond in subtle (moreso o3) to not so subtle roundabout ways that deflect blame rather than admit direct fault, even when it's an inarguable factual error about even conceptually non-heated things like API methods.

It's an annoying behavior of their models and in complete contrast to say Anthropic's Claude which ime will immediately and directly admit to things it had responded incorrectly about when the user mentions it (perhaps too eagerly).

I have wondered if this is something its learned based on training from places like Reddit, or if OpenAI deliberately taught it or instructed via system prompts to seem more infallible or if models like Claude were made to deliberately reduce that aspect.
by zoogeny | 2025-04-16 06:49:37+00:00
> We give @fieldParentPtr the name of the field, a pointer to that field as well as a return type (which is inferred above by the assignment to a *User variable), and it gives us back the instance that contains that field.

That seems like a refactoring nightmare. If I say:

const user: *NotAUser = @fieldParentPtr("node", n);

Will it calculate this incorrectly? I mean, if `NotAUser` has a "node" field and `n` is actually from the `User` type (and it has a different offset in each type)?
by garfield_light | 2025-04-16 06:50:01+00:00
JUNAEB in Chile is pretty much SNAP for college students. Originally you could buy beer or pretty much anything in the supermarket, it got limited strictly to food and then items with two or less warning labels [0].

A big difference is intention, in the US the focus is "anti-sin" and avoiding joy for undesirables. Many protein bars or "natural" juices are just morally aesthetic candy and soda. The labeling in Chile is data driven* (i.e, It's pretty much an efficient way to read the nutrition info, it killed vitamin water) so the objective is closer to public health.

I would also think that straight cash is preferable, the limitations are fine for complementary benefits of college students, not for actual families. Diapers and lentils are a better use of government money. Anyways if people want to buy drugs, converting food items to cash is simple.

- https://www.theexamination.org/articles/a-decade-after-its-p...