MurphyA/hacker-news huggingface dataset:
by vharuck | 2025-04-17 02:59:07+00:00
Yup, this is something that shows up¹ for melanoma, thyroid, and prostate cancers: those who are diagnosed when the cancers are in situ (haven't left the tissue of origin) have better 5-year survival chances compared to people of the same age, race, and sex. Likely because, if people are diligent enough about their healthcare to report early warning signs and get the recommended screenings, those people also have much healthier lifestyles. If there were a way to control for lifestyle, I'd imagine the "benefit" would disappear or become a small but clear negative.

1: You won't find relative net survival above 100% in the CDC's statistics. That's because they calculate survival rates using daily differences in death hazards derived from life tables of people with cancer and those without. Add up the differences across all days, do some exponential math, and voila: relative net survival rates. But, if the relative risk for a day is negative (i.e. those without cancer have a higher risk of death), then they set the relative risk to 0 instead for that day. Which is ridiculous, IMO. It's forcing a distribution of actual events to match an idealized model.
by ein0p | 2025-04-17 03:00:13+00:00
On the one hand he's right, Apple needs a Musk of sorts, Jobs having kicked the bucket long ago. On the other, he has an axe to grind, and that axe is well known, and he grinds it at every opportunity. We get it, DHH, you don't like the 30% cut Apple is taking off the stuff that they sell on the AppStore. If you don't like it, don't target iOS.
by adrianmonk | 2025-04-17 03:00:16+00:00
It would probably be useful for high speed travel. Speedboats can go a lot faster than submarines. Airplanes can go even faster, but they might be a bit impractical since they'd have to be full of water.

Also radio communications since radio travels much better through air than through water. Of course, they could just build antennas underwater and then float them above the surface to use them.

Navigating by the stars would be really useful, and for that you need to be able to see above the surface. I guess you don't need to go above the surface. A periscope would do the trick.

It might also be useful for energy generation. Wind power if the wind is stronger than ocean currents. Or solar because the light is stronger.
by f_devd | 2025-04-17 03:01:48+00:00
> runs software in a verifiable way (in particular, for every message you get from a dapp on the ICP, you get a certificate that proves that the majority of nodes in the subnet agree on the result).

There is no need for this though, by it's very nature CVE services are "authorities", that distribute fairly simple data. Also if it costs 500$ to keep it online it's not really giving you much more resilience than regular multi-node hosting and significantly less than torrenting which is effectively free for many volunteers.
by racingmars | 2025-04-17 03:02:24+00:00
> This naively (or maliciously perhaps) maintains that the "purpose" of the certificate is to identify an entity. [...] identity is not the primary purpose certificates serve in the real world.

Identity is the only purpose that certificates serve. SSL/TLS wouldn't have needed certificates at all if the goal was purely encryption: key exchange algorithms work just fine without either side needing keys (e.g. the key related to the certificate) ahead of time.

But encryption without authentication is a Very Bad Idea, so SSL was wisely implemented from the start to require authentication of the server, hence why it was designed around using X.509 certificates. The certificates are only there to provide server authentication.
by sgarland | 2025-04-17 03:02:35+00:00
Never heard of MarkMonitor before. Not a great start.

I had Google Domains for years, until they abruptly and bizarrely abandoned it, then I left for Porkbun. Never had a problem with either of them. I get yearly auto-renewal notices. Everything works, and it’s very boring, which is precisely what I want from a registrar.
by baranul | 2025-04-17 03:03:54+00:00
There is a good argument to be made, that this was purposefully missed or the blind spots were caused by being an employee of and tied to Bell Labs corporate interests, along with other critics of Pascal.

Many, who don't study or know of the history, can get sucked into the rhetoric of C as the "superior language" versus the reality of it being a heavily corporate pushed language. Pascal was in the way, so got hammered by bad press. Same sort of thing happens today, in these weird programming language scuffles. Rust, Zig, Vlang, Dlang, Odin, C3, etc... If a competitor is in the way, strange one-sided and highly critical blogs can materialize.

By 1987, pretty much any of Kernighan's criticisms involving Pascal and derivatives were moot. But he never retracted or modified what he got wrong or had changed. He had many years to do so. That was before the 2nd edition of his book (The C programming language in 1988). And before ANSI C (1989). Turbo Pascal and Object Pascal were out, which both took lessons from Modula-2, and were widely known successes.
by jjulius | 2025-04-17 03:04:17+00:00
It's a "YMMV" situation, because...

I don't want that. At all. It's algorithmic and there's nothing stopping artists and labels paying for placement in there. I don't want that.

I am a musician, and a DJ, and I've been digging deep through artist and label catalogues on my own for decades. The process of discovery via my preexisting routes is far more fruitful, enjoyable and rewarding than lazily letting an algorithm do the work.

But I like doing that. This works for me, not for others.
by thot_experiment | 2025-04-17 03:04:42+00:00
These are fundamentally different technologies, the camera you linked uses structured light and stereo vision + ML to get depth. It has an order of magnitude less range and an order of magnitude more error. The Sony sensor is time of flight SPAD, it's much closer to giving you a ground truth you can trust than the Intel camera and much more capable of rejecting environmental noise.
by awb | 2025-04-17 03:05:06+00:00
One thing that I haven’t seen discussed much in terms of galactic colonization is genetic drift, speciation and communication.

I believe there are simulations theorizing that galaxies can be thoroughly explored in 10M - 100M years.

But how would those species even communicate their discoveries across a 100k LY galaxy? The delay would render data inaccurate by the time it arrives. It seems challenging to persist in a common purpose for millions of years across vast distances.

And would they even be the same species on those timescales and distances? On Earth isolation leads to some unique physical and cultural evolutions.
by Animats | 2025-04-17 03:05:21+00:00
That seriously devalues MarkMonitor's services. MarkMonitor claims to be a "an ICANN-accredited registrar and recognized industry leader since 1999". The whole point of paying for MarkMonitor is that they're an expensive service for valuable domains and are not allowed to screw up. GoDaddy should not be involved here at all.
by stubish | 2025-04-17 03:05:22+00:00
I think it would have been very apparent at the start of 2024 that Tesla cannot compete with the Chinese manufacturers on cost. And Robotaxi is an attempt to expand beyond the luxury car bracket before someone eats that lunch. Without the article spin, the decisions could be quite sensible for the market at that time. It also helps explain the lengths Musk has since gone to to ensure Chinese manufacturers don't get access to the US market.
by kjkjadksj | 2025-04-17 03:05:27+00:00
Somehow we did it before spotify :). Browse forums. See what people are talking about. Follow local venues and see who is coming to town. Read about different artists. Different producers. Different record companies. Fall down the rabbit hole. You don’t need an algorithm to tell you what to listen to. Take the reigns. It’s a hobby right? Lean in.
by LargoLasskhyfv | 2025-04-17 03:06:03+00:00
The 'right' weed. Keeps me hyperfocused for days, have to forcefully remind myself to stop, stretch, drink, eat, piss&shit, wash, sleep. Or my cats will :)

Also works with Tramadolhydrochloride (for me, in light and time-delayed dosages)
by ramesh31 | 2025-04-17 03:07:08+00:00
CLI interfaces are not where it's at for this stuff.

What makes Cline the king of codegen agents right now IMO (from a UI/UX perspective) is how well they handle displaying the code, opening files, and scrolling the cursor as it changes. Even in a fully autonomous agentic flow, you still really want to be reading the code as it is written, to maintain context and keep steering it correctly. Having to go back and look at a huge diff after all of your updates is a real pain and slows things down.
by kbolino | 2025-04-17 03:08:38+00:00
If there was no IP/DNS ownership verification, how would you even know you had been MITMed? You think the attacker is going to set a flag to let you know the certificate is fake?

The only real alternative to checking who signed a certificate is checking the certificate's fingerprint hash instead. With self-signed certificates, this is the only option. However, nobody does this. When presented with an unknown certificate, people will just blindly trust it. So self-signed certificates at scale are very susceptible to MITM. And again, you're not going to know it happened.

Encryption without authentication prevents passive snooping but not active and/or targeted attacks. And the target may not be you, it may be the other side. You specifically might not be worth someone's time, but your bank and all of its other customers too, probably is.

OCSP failed. CRLs are not always being checked. Shorter expiry largely makes up for the lack of proper revocation. But expiration must consequently be treated as no less severe than revocation.
by technofiend | 2025-04-17 03:09:02+00:00
Oh man NYC taxis. I swore them off after one too many "Oh the cardreader is broken" lines. I just explain I'm traveling for work and my company card is they only way they'll get paid et voila the card reader is magically working again! Whereas not only do Uber and Lyft only take digital payment, but both offer direct integration into my corporate expense system. Bring on the robo taxis: one less scammer in the loop.
by anenefan | 2025-04-17 03:09:06+00:00
NIMBY - high to very high.

Plenty of deaths have occurred due to carbon monoxide [1] so in an industrial setting suitable tanks and piping and inspection system would be required as per other hazardous chemicals that are either gases or produce volatile vapours at room temperature.

The gas wasn't uncommon in gas fed households many decades ago when cities and towns relied on coal gas [2] - said to have around 10% carbon monoxide [3]

[1] https://www.ncbi.nlm.nih.gov/books/NBK430740/ >Carbon monoxide binds to hemoglobin, forming carboxyhemoglobin (COHb) with a 220 times greater affinity to hemoglobin than oxygen.

[2] https://en.wikipedia.org/wiki/Coal_gas

[3] https://byjus.com/chemistry/coal-products/
by selcuka | 2025-04-17 03:09:38+00:00
The matching score is probably the same, or very close in both ways, but this fact does not necessarily help in a three-way scenario:

A <-> B: 80% A <-> C: 90% B <-> C: 70%

When you search for A the best match will be C, but if you start with B it will be A. If one of the accounts has a smaller sample set as in GP's case, the gap could be quite big.
by transpute | 2025-04-17 03:09:48+00:00
> That's not the case with the CVE database under its current ownership. There's no established way to namespace it, no obvious way to split it up and keep it all working.

Work on supply chain security has lead to the introduction of standardized SBOMs, as an artifact required by some large customers to accompany software binaries. It should be possible to associate each software binary CVE with a vendor SBOM and organization country code. Large multinationals might have geo-specific binaries to confirm with regional regulations like the EU CRA.
by bigyabai | 2025-04-17 03:10:30+00:00
If Xserve is any basis of comparison, Apple struggles to sell datacenter hardware in the best of markets. The competition is too hot nowadays, and Apple likely knows the investment wouldn't be worth it. ARM CPUs are available from Ampere and Nvidia now, Apple Silicon would have to differentiate itself more than it does on mobile. After a certain point, it probably does come down to the size of the margins on consumer hardware.
by ivewonyoung | 2025-04-17 03:10:32+00:00
>The comments with sources doesn't appear to be downvoted

It was downvoted for a while.

> In general, many of your comments have a slight bitter, combative air to them that probably hampers your communication effectiveness

Comments that are much more bitter and combative than mine and without sources are upvoted all the time, because they fuel a certain political narrative.
by tastysandwich | 2025-04-17 03:12:02+00:00
For music, Navidrome is superior.

It is just crazy how easy it is to set this stuff up nowadays. I run both Navidrome and Jellyfin in docker containers. Then I use NordVPN Meshnet to securely connect to them outside of the home.

The experience is absolutely flawless. In Navidrome you can host an entire FLAC library and then transcode to Opus on the fly.

It's been over a year now and I have pretty much no issues whatsoever.

I highly highly recommend it

Edit - Opus not Opal!
by avodonosov | 2025-04-17 03:15:41+00:00
In the scheme I descrubed where client directly runs challenges the certificates are not issued at all.

I am not saying this scheme is really practical currently.

That's just an imaginary situation coming to mind, illustrating the increased importance of domain ownership validation procedures used by Certifying Authorities. Essentially the security now comes down to the domain ownership validation.

Also a correction. The server not simply puts <unique-val-2>, it puts sha256(<unique-val-2> || '.' || <fingerprint of the public key of the account>).

Yes, the ACME protocol uses some account keys. Private key signs a requests for new cert, and public key fingerprint during domain ownership validation confirms that the challenge response was intended for that specific account.

I am not suggesting ACME can be trivially broken.

I just realized that risks of TLS certs breaking is not just risk of public key crypto being broken, but also includes the risks of domain ownership validation protocols.
by throwanem | 2025-04-17 03:16:26+00:00
Some HNers. There was a thread about ACE scores a few months back, and the site search is quite good. It isn't just idle boosterism when people say this site attracts a far broader cross-section than its detractors like to assume, and I have often enough been one such detractor.

All that aside, I don't think an AI can do better than any parent who bothers to genuinely try. Love makes up for a lot. Without it, what else matters?
by chrismorgan | 2025-04-17 03:16:28+00:00
Depending on what “algebra” as an entire class actually is (I don’t know of it in that form from my Australian upbringing or from elsewhere) I can see it possibly having real benefit: abstract reasoning is one of the major things that needs to be taught to kids and has huge benefits but too often isn’t particularly taught; and algebra with all its symbolic representations and logical reasoning is excellent for that.

From your single-paragraph anecdote I don’t know the full story, of course, but it’s plausible to me that it might be not solely a case of confusing correlation and causation, but at least partly because the described effect made sense to people making the decisions, based on their broad experience in education.
by mbac32768 | 2025-04-17 03:18:23+00:00
Given the way AI is advancing it would be really dumb to not go hard on Robotaxi. That's it. That's the analysis.

If you think AI progress is going to hit a wall or Tesla's AI in particular is going to hit a wall then sure spin up a Model 2 and prepare for a long grueling endless war with BYD.
by kbolino | 2025-04-17 03:21:00+00:00
I just downloaded one of DigiCert's CRLs and it was half a megabyte. There are probably thousands of revoked certificates in there. If you're not checking CRLs, and a lot of non-browser clients (think programming languages, software libraries, command-line tools, etc.) aren't, then you would trust one of those certificates if it was presented to you. With certificate lifetimes of 47 days instead of a year, 87% of those revoked certificates become unusable regardless of CRL checking.
by WuxiFingerHold | 2025-04-17 03:23:26+00:00
Nothing can replace good engineering. Good engineering means using the right methods or tools for the given situation.

If you're fetching 10s of raw models (corresponding to a table) and extract (or even join!) the data needed to display in the view, it's clearly not the best engineering decision. But fetching 2 or 3 well shaped views in your component and doing the last bit of correlation to the view in the component is acceptable.

Same for deciding a render strategy: Traditional SSR (maybe with HTMX) vs. isomorphic (Next and friends) vs. SPA. Same for Redux vs MobX. Or what I think is often neglected by the frontend folks: Running Node on the backend vs. Java vs. Go vs. C# vs. Rust.

If you're already in the spot where React Server Components are a good fit, the ideas in the article are compelling. But IMO not enough to be convincing to switch to or chose React / Next when you're better of with traditional SSR or SPA, which IME are the best fits for the vast majority of apps.
by yawaramin | 2025-04-17 03:24:18+00:00
Arguable that it's a 'regression'...loading pages is kinda the normal behaviour in a web browser. You can try to paper over that basic truth but you can't abstract it away forever. Also, the original comment I replied to said it would be a 'big challenge', but if you accept that the web is the web and sometimes pages can load or even reload, then it's not really a 'challenge' any more at all.
by fallous | 2025-04-17 03:25:38+00:00
While not fully economic isolationism, there was a drive to turn the national focus away from looking outward to gazing at the national navel. Apollo, and much of NASA's ambitious projects, were cut short thanks to defunding in order to deploy those funds towards social projects such as the War on Poverty. The Malthusian worldview of those like Paul Ehrlich led to a system less interested in risk management and more interested in employing the precautionary principle. This often resulted in decisions that were more concerned about the negative aspects of the short term rather than the necessary transitions required to achieve long term goals.
by Nick-W | 2025-04-17 03:25:49+00:00
Totally - we're not advertising yet and usually only dealing with very local traffic at the moment, didn't expect to get tens of thousands of hits from linking to it from a hackernews comment!

The backend is an azure appservice running on a single low-spec worker at the moment, wasn't planning on enabling scaling before doing a hard-launch but here we are.
by armSixtyFour | 2025-04-17 03:26:29+00:00
I would have agreed with you 3 years ago. But now not so much.

Spotify "Radio" feature just tends to want to give me music I've already listened to over new music. Whatever algorithm they are using has waaaay overfit to what I have already liked.

There used to be curated playlists done by humans, now almost everything is "made for you by Spotify" playlists which, have the exact same issue as the radio stations, suddenly it's all the same music you've already been listening to, very little new music. If you want new music, you need to find a playlist made by a user instead.
by aristofun | 2025-04-17 03:27:11+00:00
Do i hear the question correctly? It’s in a nutshell another way of asking why don’t developers do better job by following practice X.

Because a) incentives b) rarely a complex enough product/company fits some fancy “practice X”.

A) you usually don’t get promoted by simply better organizing a process or your team work. But rather for pushing something tangible as quickly as possible out the door.

B) i already have common understanding of the product with designers after some initial onboarding period - why do i have to bother loading yet another set of concepts and constraints in my head already full of tickets, docs, meetings, obligations, decisions, code reviews, proposals, incidents, weird bugs, slack bots, performance reviews, open discussions, pairing sessions, important emails, failing tests, dissapointed customers, deadlines, bad codebase to refactor, juniors to mentor, slides to prepare, HN posts to comment?

:)
by baranul | 2025-04-17 03:27:16+00:00
While I agree that there is no logical reason that underwater organisms could not become highly intelligent or advance to the level of doing experiments with fire, it is clear that being underwater is an additional barrier.

As such, the number of intelligent underwater civilizations, that could get near our present level of advancement, would likely be significantly lower. Not impossible (because of how large the universe is), but some order of magnitude, less possible.
by slyall | 2025-04-17 03:28:23+00:00
The are supposed to also filter things like complaints. If somebody complains I'm sending spam and I only pay $20/year then my registrar might lock my domain and then I have to work to get it back online.

Mark Monitor will apply a lot more filtering to complaints.

Ironically this is allegedly what happened in this case, a complaint about the domain got it taken offline.
by TheDong | 2025-04-17 03:28:51+00:00
MarkMonitor isn't at fault here.

If you register a ".ps" domain, it doesn't matter if you use MarkMonitor or Namecheap, they can't help you when the ongoing genocide results in the removal of Palestine as a country and ".ps" no longer is a valid country code top level domain.

Similarly, if you register a .us domain instead of a ".com", ".net", or ".org", MarkMonitor can't help you when GoDaddy inevitably screws up.

History has borne this out: .com domains are well-managed. ccTLDs like '.io', '.su', and '.fj' have all had significant security or availability issues because they're run by "eh, whoever the hell the country picks" with no standards.

Financially, a proper gTLD also can't raise prices unilaterally and weirdly, while if you pick a ccTLD, the country has free reign to arbitrarily change prices, delete your domain, take over your domain, etc etc.

Do not use a ccTLD.
by financetechbro | 2025-04-17 03:29:05+00:00
I don’t know if I can behind this idea. If they cared about _not paying twice_ there would be free or affordable health care to lower income folks, helping drive preventative medical care vs waiting on health problems become too big ignore and thus ends up being a larger medical bill, which they can’t afford. So ya I think it’s still about control. Society as a whole is weirdly obsessed with controlling those with less means
by bitbasher | 2025-04-17 03:29:14+00:00
1. I run 5k every morning.

2. I do a low carb diet and only eat within a four hour window (12pm to 4pm).

3. Use a RSS client (I use newsboat) to curb consumption of content. This means I only consume Youtube and blog content I see via my rss reader (keeps me from scrolling and clicking around Youtube). I use a newsboat mapping to open the Youtube link in mpv to view the video (so I don't go to youtube.com).

4. Use a pomodoro timer and try to get at least eight solid pomodori a day. Ideally, I'd get around 12 on great days.

5. Take some time to read/learn every day (but don't count towards your daily pomodoro).
by Dylan16807 | 2025-04-17 03:29:51+00:00
I think you mean the actual size, and in that case no it's not bigger. Inodes are a fixed size, usually 256 bytes, and a file strictly has one inode. The only growth happens in data blocks.

It's also worth looking at NTFS, where a file can have multiple records, the equivalent of inodes. But it uses the same logic for tiny files. If it doesn't fit inside the base record, it goes into a data block. Multiple records only show up for large amounts of metadata.