MurphyA/hacker-news huggingface dataset:
by vacuity | 2025-05-09 04:54:22+00:00
I was also the one who wrote a sibling comment saying that capabilities aren't magical, but I do think they are excellent as far as any mechanism goes. Linux doesn't nearly go far enough in capability-based security, and merely adapting practices fails to make full use of capabilities. It's a bug if I have to verify my identity often for a routine task, whether it's through sudo or polkit. User friction is bad for security in many ways. Instead, configure the service once to have the capabilities you would give it each time anyways. Take it out of the user's hands and set it down on the desk (still in their control, just not taking up space). polkit is not quite there, whereas capabilities easily confine all programs (don't have to support polkit), are trivially flexible in behavior while being both secure and invisible by default, and provide control to the proper agents (users and involved programs). Capabilities turn access control from a hard problem plus various pitfalls to just a hard problem. Rather than an incrementally better solution, changing paradigms here is a good idea. Although Unix already most has capabilities through file descriptors, so in some sense its "everything is a file" philosophy can't go far enough.
by rafram | 2025-05-09 04:55:03+00:00
I do think Citi Bike should be cheaper (and not run for Lyft’s profit), but some of the arguments here are suspect. For instance:

> Another revenue source? The bill itself. The savings from Mamdani’s free bus pilot led to a 30-40% increase in ridership on those routes. It stands to reason that similar price cuts on Citi Bike would also lead to ridership boosts. Unlike free buses, however, Citi Bike would still get fare revenue with a fare cap.

We’ll lose money on each ride, but we’ll make it up in volume?
by int_19h | 2025-05-09 04:56:07+00:00
The fact of the matter is that, when doing research on all kinds of non-trivial issues, it's routine to come across a StackOverflow question about this exact thing that was erroneously closed as duplicate of something that it's not, and it's clear that the people who did close it didn't have the expertise to judge.

I'm sure mods well and truly believe that what they are doing is for the greater good, and I can even believe that the bulk of questions that are closed really are dupes etc. But there are a lot of babies getting thrown out with the bathwater even so, and the net result is that SO is less useful overall
by LargoLasskhyfv | 2025-05-09 04:56:55+00:00
Yes. Acceptable. Though it's looking slightly orange/apricot/peachy. But that's in line with HN, so be it ;>

Thank You!

Edit: After a few minutes I'm thinking its better than both hckrnews.com, because that has too bright BG, and less disturbing than HN, because no jump between grey borders and that pale yellow they use. MUCH LESS annoyance/eyestrain.
by emporas | 2025-05-09 04:57:38+00:00
Thanks. This workflow of 4 prompts, has the benefit of not using the mouse.

I have a friend who uses Photoshop to make posters for bands, the resulting images are better, faces of real people are put in the poster, but he does 1 million clicks every time. I use only Emacs to make the image, much faster workflow, more relaxing, i just edit text most of the time.

Gemini's image generation abilities, especially regarding typography, are in the same ballpark as Ideogram. Ideogram is a little bit better sometimes, vertical text for example trips up Gemini, but Gemini being native multimodal, works very well with text descriptions of images.

Ideogram has an upper limit to the total number of tokens it can accept as a text input. It is not native multimodal as far as i know.
by skinkestek | 2025-05-09 04:57:56+00:00
> I will say, this is a level of question that is too sophisticated for SO

Could it be that, for years, they've been selecting for things like:

- Low friction onboarding

- Upvoting “easy wins” and thought experiments over real-world, in-the-trenches problems

- Penalizing questions that didn’t fit the format—even when those of us around since the early days knew they’d likely get good answers within a few days

- Incentivizing moderators to strictly enforce rules that, frankly, weren’t necessarily great to begin with

Just a thought.
by int_19h | 2025-05-09 04:59:28+00:00
The contributions are under CC-BY-SA, so while the company can legitimately profit from it, the ShareAlike part requires that derivative works are also distributed under the same license. This is the part that LLMs infringe upon, in my opinion. So, all I want is for OpenAI, Meta etc to release their model weights under CC-BY-SA, and then we're square.
by energy123 | 2025-05-09 04:59:34+00:00
> I don't use it in large codebases (all agentic tools for me choke quickly), but part of our skillset is taking large problems and breaking them into smaller testable ones, and I give that to the agents. It's not frequent (~1/wk).

Where is the breakpoint here? What number of lines of code or tokens in a codebase when it becomes not worth it?
by unloader6118 | 2025-05-09 05:00:50+00:00
There are some fundamental different between two ecosystems.

On Google, the Google Drive and Photo are encrypted to a key owned by google.

On iCloud, the iCloud Drive and Photo are encrypted to your account key. In which, without ADP, this key is shared with Apple. When ADP is enabled, Apple does not store this key. iCloud Backup is stored with the same technology as iCloud Drive.

When it comes to lost password account recovery:

- Google can just reset your password, and your drive and photo are still accessible. All barrier are procedural, not technical.

- iCloud (with ADP), they can still reset your password, but then your icloud drive and icloud photo are loss forever.

There are some trade off ..:

- Lost password recovery experience. _Some_ user will lost their password anyway. How high should the bar be?

- Cloud first? or local device first with cloud backup?

- Are you giving the cloud data same protection as local device?

In google's solution, they put the google drive data at risk...

In apple's solution, it need extra steps to ensure you have proper account recovery flow covered.
by milkshakes | 2025-05-09 05:02:11+00:00
sorry! that might get me in trouble. i didn't get in trouble for registering the alias, though i did remove it after getting one too many disturbing emails.

that didn't stop me from registering it again at my next employer, where i received more complaints, but in this case they were less out there and i actually knew the people who could do something about them (smaller company, support shadowing shifts), and there i was eventually able to wire the alias into their official process after forwarding enough of them to the people i knew.
by hackernudes | 2025-05-09 05:02:20+00:00
> Drawing on existing research [3], our preliminary analysis of these programs and configurations suggests that the network stack architecture is somewhat similar to DPDK [4], mainly relying on a user-space C++ program to bypass the kernel for handling network packets.

The way it usually works is that the initial packets are handled in software but once the endpoints are established it flows through hardware. Sometimes certain patterns are always handled in software. The software could be a patched kernel or a XDP style kernel bypass.

Source: worked peripherally on an Intel Puma cable modem router/gateway that used DPDK or something like it. So I'm not 100% sure, but it is an educated guess.
by jiehong | 2025-05-09 05:03:26+00:00
Refactoring from a function returning a string to another returning a string, and all compiles, yet without tests nothing works in production because it’s not the same string.

On top of that, sometimes mocking in tests also hide the string breaking change you don’t yet know about.

On top of my head, I saw this happen with a base64 string padded vs unpadded, or emojis making their way through when they did not before, etc.

So yeah, the compiler tells you which pieces of your jigsaw apparently fit together, but tests show you if you get the right picture on the jigsaw at the end (or on some regions).
by smitty1e | 2025-05-09 05:07:20+00:00
In a similar fashion, I once saw a python script that called out to a one-page C program that read a .csv dump (probably from SQLServer) and blew away the upper byte of each character, demoting it to ASCII.

Once I understood what was afoot, I was sad that someone had worked so hard when python's open() call supports an 'encoding' argument for just these occasions.
by modeless | 2025-05-09 05:08:43+00:00
That's all fine, but tangential to my complaint, which is about iMessage specifically. iMessage, as a system that strongly promotes e2ee as a core feature, should not be backing up its encryption keys to non-e2ee iCloud backup in any scenario. Messages should fall in the same category as keychain passwords and (yes!) Memoji, backups of which are always end-to-end encrypted even when ADP is not enabled.

In fact I would say calling iMessage an e2ee system is false advertising until this is corrected. Reasonable people would assume that an Apple system advertised as e2ee would make an effort to prevent Apple servers from having the keys to decrypt most iMessages, while the reality is with these defaults it's likely that a large majority of iMessages can be decrypted by Apple servers at will.
by tgma | 2025-05-09 05:09:53+00:00
Perhaps I should document it and link to it in detail but basically you use Apple Configurator to create a profile and set its restriction flags accordingly and keep it somewhere you can redeploy with ease and simply DFU restore the iOS device so that it gets the latest clean iOS image. After that you don’t activate it by going through the setup screen. Instead you use the connected Mac with Apple Configurator to “Prepare” the device and the computer activates it and pairs it with your “organization” public key and you can add the profiles you created in the previous steps to apply the configuration restrictions. It’s like having an enterprise MDM except you don’t need a server just the local profile is enough.
by fiiv | 2025-05-09 05:10:36+00:00
I do this. Ollama makes it very easy - just pull the model you want. The great thing is the ability to test them in the same tasks, there's a huge difference in comparable models.

You can set it up in your editor of choice - I use Zed, and it's just listed as one of the providers you can choose.

In terms of performance - it works decently well.
Problems with scheduling apps like Calendly
by chetansorted | 2025-05-09 05:11:36+00:00
I've been building a scheduling tool for solopreneurs and small businesses, and along the way, I realized how many people dislike using tools like Calendly — even if they rely on them.

Here are some of the common complaints I've heard (and experienced myself):

Feels impersonal: Sending a link feels transactional, not collaborative. Especially awkward in cold outreach or with high-trust clients.

Too rigid: Most tools assume static availability or recurring blocks. Life isn’t always that predictable.

Hidden costs: Features like payment integration, group bookings, or email/SMS reminders are often behind paywalls or require multiple tools.

Overkill for simple use cases: Sometimes you just want to quickly agree on a time without creating a new "meeting type." Poor UX on mobile: Many tools are clunky on phones, yet that’s where a lot of scheduling happens.

Curious to hear from others — do you run into these problems? What’s your biggest frustration with scheduling tools right now?
by _carbyau_ | 2025-05-09 05:11:51+00:00
I mean, we don't have to expect they will want to migrate. But life is all about how we handle change, both at the personal level and as a society.

When people throw money at an IPO only for it to tank we don't go around refunding them. Investments generally are NOT guaranteed, this includes assets like a house.

Should society at large be paying for someone's luxury beachfront home to be rebuilt over and over in the face of lack of insurance? Should people ignoring the climate observations and making dumb decisions NOT be penalised by losing their assets?

Honestly, there are good answers to this last question - no one wants to see an instant slums and the ongoing effects burdening society. No one wants to see grandma thrown to the curb. To be considered a society one has to act like it, which includes helping those who are down.

But not by trying to reset it back the way it was. Not by guaranteeing that people can make decisions - silly or not - with any level of guarantee.

Maybe a government buyback for property in an area that is rezoned because of climate reasons. Maybe a change in building standards to make rebuilds more reliable in the face of the new normal. Maybe public housing elsewhere to absorb the impact of such events until people can remake their lives and move on. Feel free to insert better ideas.

But the change in circumstances - in this case climate activity - has to be handled or it borders on stupidity.
by jruohonen | 2025-05-09 05:14:50+00:00
"Specifically, they want to focus more on testing validity, which for quantitative social scientists refers to how well a given questionnaire measures what it’s claiming to measure—and, more fundamentally, whether what it is measuring has a coherent definition."

Ref.:

https://news.ycombinator.com/item?id=43933962

https://news.ycombinator.com/item?id=43927550
by soulofmischief | 2025-05-09 05:14:54+00:00
> Source: you.

My source is nearly two thousand years of well-documented history.

> For many, it is a place where they find community and make friends and build their lives around.

That is completely beside the point that not every person gets to have this positive relationship with their cult community, and that some find themselves in its crosshairs.

> This kind of crosses into a personal attack, but I'll let it slide

No. Lol. Calling your viewpoint ignorant is not a personal attack. It's objectively ignorant, as you have already demonstrated. "Let it slide?" Did Jesus teach you that one? You need to check yourself and tone down the pompousness and patronizing attitude in your posts.

> With empathy, God didn't do that to you, you don't even believe in him so it wouldn't make sense for you to blame him

I don't blame an imaginary patriarch who was whitewashed in order to establish colonial White supremacy.

> perhaps you're in for a treat later in life :)

I'm going to again request that you tone down the patronizing, I-know-better-than-you attitude. Apparently you did not pick up on Jesus' teachings of humility.

> if a crime has been committed against you, there are social structures in place to call in for help, and judge and punish the people involved

More demonstrable ignorance. I had no one. Everyone I told ignored what was happening, and the police who frequently ended up at my home told me to endure my abuse or find myself in a more abusive foster care system. The Church and my Catholic family empowered this man to do whatever he wanted. You can't just disbelieve this away. I know you're used to just deciding on randomly believing or disbelieving things without veritable proof, but that's not how reality works. My experience is real, and cannot be shallowly dismissed without acknowledgement as to the very real, very documented violent history of the Church, including the Vatican's ongoing direct involvement of covering up child abuse within its ranks, which again, is public record, with plenty of court cases you can google at your leisure.

> Oh yeah, because I should have taken offense at that and throw a tantrum, instead of writing a thoughtful comment. Sure.

Now you're just in denial and being sarcastic, presenting a false dichotomy. No, there were more than two choices you could make when replying, and practicing some humility would reveal those options to you.
by radioblahaj | 2025-05-09 05:15:10+00:00
Hi!

My name is Arav Narula, and I'm a 17 year old high school senior from Toronto!

Over the past 2 years, I've had the opportunity to help rebuild Toronto's high school hacker community. It's been really magical being able to run hackathons, and see Toronto's high school hacker scene come more to life in the last 2 years. Last May, me and a group of friends ran Apocalypse -- Canada's largest and longest high school hackathon at Shopify HQ! It was a really rewarding event, but I'm not here to talk about that.

There's something that's bothered me for a long time and that is that there is a tendency in online communities where there is a lack of physical connection. This is true in Hack Club and almost every other community I’ve been part of that’s tangentially computer-related. Programming and programming-related mediums are often solitary activities, and hackathons attempt to solve this problem by bringing hackers together to build a long-term hacker community. Hackathons are great for just technical experiences, but they don’t give an opportunity to connect beyond just simple conversation.

The fact is that hackathons have a culture of building and shipping, and that’s perfect for the problem it's attempting to solve. I think hackathons still have their place and should exist. But in my opinion, social connectivity is also vital. When it comes to building and maintaining hacker communities, there needs to be further incentives for people to hang out, learn from each other, and have people they can just do things with.

I think meetups provide the missing middle of bringing people together; while hackathons allow for the base of a hacker community to form, meetups allow those people to gel from just acquaintances into real friend groups!

While I contend that this blog post might not be fully relevant to most of the people who read Hackernews, I hope the account opens up the floor to how we can better build and maintain hacker communities, and how meetups can play a role there. I hope it also serves as an inspring story of how this happened.

Would love some feedback! The template I'm using for my blog is a bit janky, and I'm aware of errors. If you're on desktop, reloading should fix the problem.
by DavidPeiffer | 2025-05-09 05:15:59+00:00
My favorite application of dead reckoning is the early 80's Honda system to display the car location on a map. While testing the system, there were times where the car showed itself off of the road. After looking into it further, they learned the map maker had taken some liberties with the exact position of the road, and the vehicle was correct.

Previous discussion: https://news.ycombinator.com/item?id=38135979
by soulofmischief | 2025-05-09 05:17:24+00:00
> He's mocking me in another comment already ... the tolerant ones

No one is mocking you. You appear to have some sort of persecution complex, and are using it to shield you from having to earnestly engage with my replies. You're literally suggesting there is some kind of conspiracy to be unfair against you. I have not downvoted or flagged any of your comments. Perhaps you should consider the wisdom of the crowd and open yourself to criticism.

> I'm honestly tired of all this "I'm catholic and I am involved in the church" being enough to warrant attacks from random strangers.

You didn't have to reply to my comment with an ignorant, invalidating, dismissive and patronizing take. That was your choice, and the consequence is that people might reply to you in order to point out faults in your attitude and message.

Just because you thought you were well-meaning doesn't mean you were. Your sour approach to discourse has made itself apparent in this thread. Many perpetrators of the Crusades also thought they were doing a good deed.
by FireBeyond | 2025-05-09 05:19:13+00:00
So now you just need to fake a cell tower and a GPS constellation so that the phone gets a new time on power cycle. Which would be about 60s minimum, to boot and acquire.

And that’s with a power cycle, so 14,000 a day? I’ll not going to assume the button will last more than 100,000 presses, so I don’t see many combinations being tried.
by soulofmischief | 2025-05-09 05:20:11+00:00
There is no hypocrisy here. I am in good faith asking what proof you have to justify this unshakeable faith you're proudly declaring.

> You're not a teenager anymore.

Nor are you, I'm assuming, so please answer my question.

> I hope one day you are able to understand this and live in peace with others who do not wish you any bad.

You should not become so defensive when pressed for proof of claims you make about invisible patriarchs living in the sky and turning cities into salt because people had too much anal sex.
by ImJamal | 2025-05-09 05:21:11+00:00
> That article is pure sophistry. No actual reasoning why. Just the assertion that "we don't think it makes sense, so it doesn't matter". That's not how holy books are supposed to work. If they really are inspired by God, who are they to disagree?

You are not making a good argument. If the rule required bishops to be married then a large chunk of the bishops consecrated by the apostles were not legitimate. Nobody thinks that.

> "You can't find any reliable scholar" is an appeal to authority fallacy. EVERYONE regardless of Christian denomination agrees that the text says what it says very clearly (can you point to even one controversy about 1 Tim 3:1-7 ?). The idea that they reject what the book clearly states while also claiming the book to be divinely inspired is extreme cognitive dissonance.

Fine, ignore the scholars. Point to anybody in the first 1500 years of the Church that takes your position. If it was that clear you should be able to find somebody who agrees with you.

You are being prideful and assuming that you are reading it correctly despite nobody agreeing with your interpretation. This is why there are thousands of different churches. Everybody just reads whatever they want into scripture. You are trying to prove Christians, or maybe just Catholics, are idiots or whatever you are trying to do. If you actually want to convince somebody maybe you should have some charity and humility.

> If you are a Christian, prove your position from the Bible alone. In this case, that clearly isn't possible. You should look at what other claims from many churches (including the Catholic Church) that also aren't supported by the Bible without resorting to sophistries while obviously ignoring the parts that are inconvenient to your position.

Maybe you should learn basic Christan beleifs. No Christian, including those who believe in Sola Scriptura, believes everything can be found in scripture.

The Catholic Church believes in 2 Thessalonians 2:15

> So then, brothers, stand firm and hold to the traditions that you were taught by us, either by our spoken word or by our letter

There is clearly things outside of scripture they believe.

Anybody who can follow basic logic can come to the Catholic position from the Bible as I have already mentioned.

Premise 1: The apostles are bishops.

Premise 2: Paul was an apostle.

Premise 3: Paul was not married and had no children.

Therefore bishops are not required to be married and have children.
by RHSeeger | 2025-05-09 05:21:53+00:00
> The rule is that you can't cache a value in an interface, because interfaces don't store data.

Right, but the start of where I jumped into this thread was about the fact that there are places where fields would make things better (specifically in relation to traits, but interfaces, too). And then proceeding to discuss a specific use case for that.

> A better approach might be for each item to simply know the URL to their metadata.

Not everything is a coming from a url and, even when it is, it's not always a GET/REST fetch.

> but I suspect in this case, using inheritance as a stand-in for a class extension / mixin is probably going to always be your most favorite option

Honestly, I'd like to see Java implement something like a mixin that allows adding functionality to a class, so the class can say "I am a type of HasAuthor" and everything else just happens automatically.