MurphyA/hacker-news huggingface dataset:
by snarf21 | 2025-04-16 14:05:38+00:00
Agreed and the same people do a lot of their shopping at Amazon/Dollar General/Wal-Mart where low price goods are only possible because they are made off shore for much much lower wages. Bringing that manufacturing back here would destroy their buying power.

I do find it interesting that a lot of these same people are against raising the minimum wage because "it will bankrupt all the businesses" but somehow think that bringing manufacturing for the goods they buy back to the US won't do the same. At best, going from off-shore labor costs of say $15/day to $15/hour (minimum for US workers) is an 8x multiplier and will somehow magically work but a 1.5 multiplier on minimum wage is just untenable for any business.

Honestly, it is mostly an emotional response around "fairness". They don't want others getting a "raise" when they don't "deserve it". However, everything they get is 1000% deserved. The greatest trick the rich ever pulled was convincing the middle class that all their woes are the fault of the poor. The political comic of "That foreigner wants your cookie!" captures it pretty well (imo).
by tylermw | 2025-04-16 14:05:50+00:00
MITRE is a Federally Funded Research and Development Center (FFRDC), which is a distinct type of federal contractor with strict conflict of interest regulations. They are owned by the federal government, but operated by contractors and are specifically structured and regulated to minimize conflicts of interest, so are distinct from "private industry" in many regards.

You can read a congressional report by the CRS describing FFRDCs and their role here: https://www.congress.gov/crs-product/R44629.
by physicles | 2025-04-16 14:06:23+00:00
Use ECDSA if you can, since it reduces the size of the handshake on the wire (keys are smaller). Don’t bake in intermediate certs unless you have a very good reason.

No idea why the RSA key worked even though the server used RSA — maybe check into the recent cross-signing shenanigans that Let’s Encrypt had to pull to extend support for very old Android versions.
by ThinkBeat | 2025-04-16 14:06:33+00:00
There seems to be little reason for the US government to pay for this since it is vital information that a lot of companies rely upon.

Some form of a foundation or NGO could be given a reasonable endowment from the industry to operate the CVE program.

O am quite hesitant to trust the DOD to keep track of software vulnerabilities. Some parts are developing and exploiting vulnerabilities. And given a fresh feed of what people find, and usually a delay from notification until publication, which may sometimes just be a bit longer of a delay, would allow the DOD to weaponize the vulnerability for their own use as well.
by SXX | 2025-04-16 14:06:33+00:00
I'm no hardware guy so no clue how easy it's to move from 28nm TSMC process to some other 28nm process that China supposedly might soon have according to the news.

But honestly I doubt China would just enable Russia develop and produce own CPUs. When it's comes to chinese everything they never localized production in Russia: heavy machinery, cars, electronics, etc. They are main benefactors of Russia not having own anything.
by jowea | 2025-04-16 14:06:33+00:00
The distinction is fuzzy, but I think what is meant here is more directly political. In a totalitarian system, it is considered important for everyone to know and openly and regularly support state ideology with words and deeds. In the least totalitarian but authoritarian system, the state just wants apathy and obedience from its citizenry.

So it would be totalitarian leaning for a leader to make a speech (watching is mandatory btw) saying that buying foreign is anti-patriotic and generating social censure, in addition to the tariffs, for people seen with foreign goods.
by mtmail | 2025-04-16 14:06:56+00:00
One cannot upvote their own submission for example.

The story is a duplicate. https://news.ycombinator.com/item?id=43705195 shows "[dupe][dead]". In your HN profile you might need to set showdead=yes to see it. Duplicate of https://news.ycombinator.com/item?id=43704481
by xolox | 2025-04-16 14:07:17+00:00
It sure can make a difference.

Sickness caused by bacteria doesn't happen as soon as one bad bacteria (bacterium?) enters your body, a certain critical mass is usually required. This is very similar to the concept of "viral load" where a certain amount of viral genetic material needs to be exchanged before the viral infection can take hold.

The "beneficial bacteria" on your skin and in your gut make it harder for bad bacteria to take root in many different ways, one of them simply being they provide competition, "crowding out the bad guys".

Another way is that many, many, many types of antibiotics were originally discovered as metabolites produced by bacteria and fungi (examples include penicillin, streptomycin, chloramphenicol, and tetracycline).

And for completeness sake, milk kefir contains many Lactobacillus species that are also a natural part of the mammal microbiome (which makes sense when you think about it; Lactobacillus are named for consuming lactose, an ingredient of mammal milk).
by dylan604 | 2025-04-16 14:07:51+00:00
There's plenty of times I've deliberately used a made up word that onomatopoetically just fit better. See? It just works.

I absolutely know when I'm doing it, and it's not a confusing/conflating of two words situation. I see it no different than when people say any new phrase like how people just say "bet" in a way that has absolutely nothing to do with the word's definition. At least what I'm doing still uses the meaning of the pormanteau's base words appropriately rather than just using a word randomly because it's hip
by rtkwe | 2025-04-16 14:07:53+00:00
We were getting the slow and steady version at least for chip manufacturing with the CHIPS Act but Trump has a major need to get credit for everything so that's being torn apart too.

The US faces a much tougher hill to climb though in regards to bringing manufacturing back. China had it easy because they had most of what you could want; a huge labor force that could upskill to manufacturing (the rural poor population), cheap labor (kind of an extension to point 1 but also includes their lower COL and wage expectations over all), and low environmental barriers.

To bring manufacturing back to the US is a way harder lift; we have a lot tighter labor market, if we shift a lot of people to manufacturing someone needs to take the jobs they leave. We (well I at least don't enjoy the idea of going back to when rivers caught fire on the regular) don't want to strip environmental protections back to a level to make it cheap to dispose of waste. The best targets are low labor, high price, high skill goods, like, I don't know, chip manufacturing!
by tantalor | 2025-04-16 14:08:24+00:00
Agreed, this is hard to read.

My initial impression was I can't read it fast, and when I try to read it fast then I miss words and have to go back.

If anything, it forces you to slow down. Maybe that's good for people who are learning to read. But for experienced readers, that seems bad.

On the plus side, the feeling of reading this is nice. It is easy on the eyes.

This might be a good fit for educational material. But I would not use this for journalism or literature.
by phendrenad2 | 2025-04-16 14:08:39+00:00
It's too bad that Radio Shack misunderstood the threat posed by Amazon. To get a bit ahead of myself, Best Buy did NOT misunderstand the threat, and they're still around. Anyway, Radio Shack went all-in on impulse buys. They focused on putting stores in shopping malls near entrances/exits, and filled their store window with silly gadgets like plasma balls and robots. They also tried to become a cellphone store, for some reason. Best Buy survived by picking the worst locations. In industrial parks, near highways, land nobody else wanted. They properly realized that Amazon's weakness was their two-day shipping. If you need something right now, you're willing to drive 30min-1hr to get it.

A closer competitor to Radio Shack was Fry's Electronics, which also located their stores on non-prime real estate, but their infamously bad customer service [1], embezzlement losses, and poor inventory choices doomed them.

[1] - shout out to the Fry's employee at the Freemont location who got in a huffy fit when I decided that the price for an oscilloscope probe was too high, and tried to argue with me and say he couldn't remove the item when I wouldn't insert my card to pay for it. Really A+ attitude there bud.
by badmintonbaseba | 2025-04-16 14:09:47+00:00
> The growable array type ("vector" following C++ parlance) lacks the bifurcated reservation API meaning it has the same problem as Bjarne's std::vector - but it's 2025 people, just because C++ made this mistake last century doesn't mean you need to copy them.

What's "the bifurcated reservation API"?
by blululu | 2025-04-16 14:10:01+00:00
The US definitely had a notion of quantum physics prior to WWII. Feynman got his PhD at Princeton in 1942 in Quantum Physics so I would assume that John Wheeler had some familiarity with the topic back then. I would mention that the most significant result of quantum mechanics is solid state transistors, and Shockley was awarded a phd for quantum mechanical applications back in the 30s.
by wongarsu | 2025-04-16 14:10:20+00:00
If they are truly independent of each other some of the uncertainty cancels out. 10 people and a budget of $1/person are both unlikely events, and two unlikely events occurring independently of each other is even more unlikely. And because the calculator is not about the full range of possible values but about the values in the 95% confidence interval this leads to the outer edges of the range now falling outside the 95% confidence interval
by evanjrowley | 2025-04-16 14:10:26+00:00
FYI, Google Chrome will do the same thing.

If you record a network packet capture, you will see it communicating with history.google.com. You might also notice that each time you load your browser history, that domain will be contacted to sync your history with Google's servers.

Much of your uploaded data can be seen from here, but you'll need to be logged in to see it: https://myactivity.google.com/myactivity?pli=1
by ngneer | 2025-04-16 14:10:39+00:00
That's very cool. You probably know more about it than I do, then, but my advice is to articulate the exact problem you try to solve.

I expect your field is probably teeming with AI proposals or offers on how to manage vulnerabilities, but that is doubtful the way, because again it is adding complexity, and no classifier is perfect, especially when scanners fail to understand scanned applications and their threat models or environment.

Stop selling external scanners, start simplifying code? This will never work, of course, because security vendors sell the promise of security to those willing to buy it, in the form of add-on products and capabilities.

Empower people to ignore scanner reports without so much red tape? That would never work either, because megacorp wants compliance and reduced liability.

Build secure systems as opposed to cataloging and scoring flaws? That would never work, because building secure systems is hard, nature tends to favor otherwise.

Charge people for adding complexity and credit them for removing complexity? Sadly, there is no way to do that, especially since products must ship and quality is hard to observe, since it is often invisible and only surfaces when things are broken.

Off the top of my head, would be nice to require proof of exploitation, by adding CTF-like capabilities to apps, such that only if the flag is captured do we consider the report real. This places more burden on scanners, in that it is no longer enough to report an outdated library. Requiring some proof of exploitability reduces noise and increases SNR, reducing false positives. Naturally, not all vulnerabilities have working exploits, and scanners can never fully simulate an adversary, so we may get more false negatives, but at least we would not have to waste so much time upgrading pointless modules and breaking applications to appease a false report. So the idea is "here is a dummy asset, show me how you leaked or compromised it". Adding the dummy asset should be cheap, but would force scanners to better simulate an attack.

At the very least, there ought to be a knob to decrease scanner sensitivity.
by immibis | 2025-04-16 14:10:39+00:00
There was /r/SubSimulatorGPT2, but you're telling me people would PAY for that? Maybe if you tricked them - which is arguably what Reddit is doing.

Social media's always been about giving people whatever makes them come back to the site, no matter how unethical. If an army of fake fans makes me think I have an army of real fans and keep posting for attention from my fans, they will totally do that. Unless it's illegal.
by _fat_santa | 2025-04-16 14:10:44+00:00
> There's a plethora of software products (offline & online) which cost way too much and work like crap - all you need to do is do it better for a more reasonable price (where those old companies have a big headcount and lots of mouths to feed producing a hard price floor for them).

Our startup is basically doing this right now. Our thesis is basically if we can make a product marginally better than our massive competitors and be able to peel away just a sliver of their customer base and get rich by virtue of having just 2 people and not 2000.

The business itself it not sexy at all but there are still loads of interesting technical problems to solve from building the app to marketing.

I would say our biggest strength right now is just having me and my co-founder and no other folks to pay. When your burn rate is your monthly digital ocean bill (which runs ~$50), you can burn practically forever.
by jmull | 2025-04-16 14:10:59+00:00
> The long-term goal seems to be...

Where do you get that from?

I've seen no sign of long-term goals, much less any mechanisms being put in place for follow-through on those goals.

It seems like people keep making the mistake of believing there's a detailed plan, while all evidence tells us there isn't. I guess it's the normal human tendency to see order in the chaos.
by kisamoto | 2025-04-16 14:11:07+00:00
"Responsible capitalism" is not a term you often hear but it's something I think we could strive for.

Not-for-large-profit is a set of guiding principals that tries to sit in the middle of the non-profit and profit-at-all-costs spectrum.

This is my initial attempt at an idea I've had floating around for a while and I would love to see feedback either in comments here or discussions/PRs on the GitHub repo.

Thanks and happy hacking,
by matt-p | 2025-04-16 14:11:12+00:00
reductionist in this case is not a bad thing. We need a major change to fix this situation and doing some little tweaks like increasing taxes on second homes or holiday homes does not actually fix this (we already tax those specific cases, with things like second home stamp duty or in some areas second home council tax).

You have

A - Demand (immigration of 1 Million per year)

Or

B - Supply (building only 120,000 houses per year)

We MUST fix one or both of these sides of the equation. Holiday homes aren't going to add up to a row of beans quite frankly (and will have very negative effects on the tourism industry, not so bad in London - but might be quite an impact in cornwall for example).
by jowea | 2025-04-16 14:11:17+00:00
Well, a bit. A part of liberal democracy is that elections don't matter that much. The losers can trust that they aren't going to be arrested, have their property confiscated etc. The established system like the courts, constitutions separation of powers and other anti-majoritarian things will prevent most extreme measures. And in at least some political systems, it is expect that no matter what some minimally competent people will win and govern not that differently from what the election loser was going to do.

And remember voting is not mandatory and a lot of people don't vote. Those people are ultimately letting others decide, and a lot of them are hoping the voters are going to pick well, or at least decently.
by diggan | 2025-04-16 14:11:25+00:00
> why are we not doing the same thing against DoS attackers?

The first D in DDoS stands for "distributed", meaning it comes from multiple different origins, usually hacked devices. If we start throwing off every compromised network, we'd only have a few (secure) networks left. Probably network equipment vendors would quickly have to redo their security so it actually protects people.

So yeah, good question.
by andsoitis | 2025-04-16 14:11:39+00:00
1) Historical claims - the CCP views Taiwan as a breakaway province and considers unification important. After the Chinese Civil War ended in 1948, the defeated Republic of China (ROC) government fled to Taiwan while the CCP took control of China.

2) Political legitimacy - successful unification would be a nationalist victory for the CCP

3) Strategic importance - key geographic asset. It lies in the first island chain, a line of US-aligned territories that can potentially restrict China's naval access to the Pacific. Control over Taiwan gives China more leverage over sea lanes critical to global trade and security influence in East Asia

4) Economic, technology bonus points - Taiwan is a global tech powerhouse, especially in semiconductors. TSMC is the world's leading chipmaker.

5) Global power dynamics - unification would weaken US influence in the region
by seanhunter | 2025-04-16 14:11:50+00:00
Those notes look interesting thanks. I’ve really never heard of someone saying you have to have uniform probability for a random walk on a graph. In fact the context where I’m most familiar with them (lattice/grid pricers) it’s always specified something like “the probability of branch a is p and b is 1-p” (ie explicitly not uniform) and they aren’t a weighted graph in the normal sense.
by throwway120385 | 2025-04-16 14:12:17+00:00
The other very human thing to do is invent disciplines of thought so that we don't just constantly spew bullshit all the time. For example you could have a discipline about "pursuit of facts" which means that before you say something you mentally check yourself and make sure it's actually factually correct. This is how large portions of the populace avoid walking around spewing made up facts and bullshit. In our rush to anthropomorphize ML systems we often forget that there are a lot of disciplines that humans are painstakingly taught from birth and those disciplines often give rise to behaviors that the ML-based system is incapable of like saying "I don't know the answer to that" or "I think that might be an unanswerable question."
by bunderbunder | 2025-04-16 14:12:24+00:00
I keep thinking of that time Wisconsin's state government privatized a bunch of IT stuff in the interest of "government efficiency", and the cost taxpayers paid for those specific functions increased by several hundred percent while quality of service went down.

At that same time, though, I worked for a contractor that I do believe saved states money compared to doing things in-house. The work we did really required specialists. But no one state had enough of the work to keep one busy all year. So sharing a pool of people to do the work among many states meant there was room for both saving the states money and allowing some profit for the company.

The idea that you can just blanket assume that private industry is inherently more efficient than public works really needs to die. There doesn't seem to be any more evidence to support it than there is to support the idea that it's inherently less efficient. Life just isn't that simple. It's all case by case.
by JohnFen | 2025-04-16 14:12:43+00:00
The hacker mindset encompasses far more than computers (and doesn't necessarily involve computers). Hackers are found in every domain. So, if your goal is to encourage thinking like a hacker in children, I think the first thing to do is to identify what sorts of things the particular children are interested in and encourage the hacker mindset with those things.

But in terms of computers, I think the most important thing is that the kids have their hands on things that are OK for them to break, modify, and generally futz around with in whatever ways excite them.

The hacker mindset is one of curiosity and experimentation, and I think children need an environment and tools where they can engage in those things with minimal risk of incurring the wrath of grownups.
by NoMoreNicksLeft | 2025-04-16 14:12:44+00:00
>and you keep implying that asking a police officer really nicely not to arrest you is due process.

I didn't imply this, in fact if you go up a few comments, I specifically say that due process rights are often administrative in nature. If the bureaucracy lets everyone file paperwork and processes it the same way every time, but when you show up with your paperwork to file it they throw it away without looking at it and say "we're already rejecting it"... that's a due process rights violation. In fact, that's pretty much the textbook definition of it. It's not that hard to understand. The "but he didn't even get a trial!" whiny-assed ijits don't seem to get that, or you. The "police officer" has already arrested you (though not in this case, because it wasn't an arrest, and not a police officer). They're allowed to do that, that's their job. Even when they do it to the wrong person.

Did the police officer check if he was a citizen or not? When (if?) he protested that he was, did they double-check? If those things didn't happen, no due process was skipped, ignored, or infringed. You don't know what due process is either... it's just this phrase you've heard and read from time to time in popular news media without ever thinking about it.

> The executive branch doesn't have the authority to be judge, jury and executioner.

Since these aren't criminal cases, they don't get a judge, jury, or executioner. They get a deportation. And by law, the executive branch really does have this legitimate power and authority. Deportations aren't penalties for crimes.

>The police don't get to determine your rights, the courts do.

This is a strange, distorted view. The courts aren't used to create new rights, only to determine the correct interpretation of rights when there is a dispute. It won't go your way at all. No matter how many times the media calls him a "Maryland man" despite being from El Salvador.
by daviddever23box | 2025-04-16 14:13:02+00:00
The Framework 13 11th-gen Tiger Lake Core i7-1165G7 (loaded up with 64 GB RAM and a fast 1 TB NVMe SSD) is by far the best value / battery life - that said, the latest MacBook Pro 14in M4 Pro devices are also great value.

I choose both.
by marcusb | 2025-04-16 14:13:15+00:00
MITRE has been hit with DOGE-branded cuts[0] earlier this month. CISA has been impacted[1]. It seems reasonable to assume they were involved in this.

0 - https://virginiabusiness.com/nova-govcon-firm-mitre-to-lay-o...

1 - https://techcrunch.com/2025/03/11/doge-axes-cisa-red-team-st...
by AnimalMuppet | 2025-04-16 14:13:20+00:00
Shipping fast is the correct strategy if:

1. It's a winner-take-all (or at least take-most) market.

2. Your "shipped fast" solution contains enough value to start to take the market.

3. Your "shipped fast" solution is not so buggy that it turns people off on you for an extended period.

If those three things are true, then shipping fast can be the right answer. You still have to be careful not to ruin it on points 2 and 3, though, which sets an upper limit on how fast you can go.
by mdp2021 | 2025-04-16 14:13:39+00:00
> now it's the key ... as an AI researcher

...For the moment. We will have to return to controlled processes at some stage - pure stochastic (using stochastic processes alone) is not adequate for precise questions requiring correct answers.

Only very little ago an LLM stated General Zhukov as German (probably because he had been the scourge of the German army - enough of a relation to make of something its substantive opposite in a weak mind). Imagine if we had that "method" applied to serous things.