MurphyA/hacker-news huggingface dataset:
by FooBarWidget | 2025-05-02 06:00:45+00:00
Cloud vendors have been strip-mining open source for years, yet judging by user and contributor sentiment on forums such as HN, and the lack of OSI-approved licensing innovation, there’s been no meaningful progress toward a solution. If anything, I get the feeling that the community is effectively more on the side of cloud vendors than on the side of authors. It seems the community at large doesn't care about authors' businesses suffering. Meanwhile, they largely don't oppose cloud vendors forking the latest open source version either.

AGPL protects better against cloud strip-mining than most opens source licenses, but doesn't solve the fundamental problem of big cloud vendors easily outcompeting authors' businesses. AGPL only compels source sharing when the software is modified and offered over a network. But cloud providers can sidestep that by hosting the unmodified version. They excel at operations at scale and sales. Most open source consumers seem to care more about benefiting from this than about the authors' struggles.

Fair source licenses — such as SSPL and Elastic License — while not OSI-compliant, are designed thoughtfully to balance authors' business and user needs, and don’t impact the vast majority of users. They often only restrict cloud-scale commercial hosting, not self-hosting or local use. Yet they trigger disproportionate outrage.

This is part of a broader problem: the community’s lack of empathy for authors. It is unsustainable. Open source maintainer burnout has been going on for a long time now. The "indie" open source author community is aging. Meanwhile, many big open source projects come from large coporations who use open source as a loss leader.

My impression is that:

1. the community at large is too stuck in ideological purity, in an age where the original FOSS ideology is a bad fit. Permissive licenses made sense when open source was a grassroots movement fighting for adoption — not when it’s powering trillion-dollar clouds.

2. People prioritize their own short-term interests too much.

Companies are doing open source because of the momentum we built over the past few decades. This momentum is being eroded by maintainer burnout, fragmented ecosystems, and declining trust between authors and users. Yet the open source consumer and authorities such as FSF and OSI effectively neglect indie author health. This is going to collapse one day.

If we want open source to survive as more than just free labor for cloud providers, we need a new movement—one that defends both user freedom and author sustainability.
by wqaatwt | 2025-05-02 06:01:10+00:00
Howard Taft was a a progressive/socialist? Interesting idea..

Eugenics were universally popular back in those days. Willson (hardly a progressive either) was a strong supporter of eugenics. Just like Theodore Roosevelt.

> more or less accurate

It would be more or less just as accurate to say that conservatives were the US equivalents of socialists following this silly logic..
by toolhouseAI | 2025-05-02 06:01:38+00:00
Toolhouse | Software Engineer (Fullstack) | Onsite (Austin, TX) | Full-time | $180k + Equity

What if you built a product that helped thousands of engineers build AI features and AI agents? That is what we do at Toolhouse.

We are a high performance team working in the "infra/backend" horizontal space. We are building the infrastructure that powers AI products and agentic workflows.

We're building a team of special people that want to win in Austin.

This is no 9-5 gig. You're in or you're out. This is a startup and we need to ship code to make this thing happen. You will learn to trust your gut feeling and the data attached to any decision, and we do it all together.

We are looking for engineers who are excited to do great work. - Engineers who trust their instincts and who also love to discuss ideas and write them down. Humans invented writing, and built the future. - People who enjoy building developer tools that can really help other developers.

No BS attitude. Just engineers shipping code and having a good time doing it.

The role: You’ll work across our stack (TypeScript, Python, Postgres, Docker), building powerful backend and frontend for a population relying on function calling infrastructure, RAG, evals, and tons of data (prompts).

Perks: Equity vesting from day one, unlimited PTO, lunches, a real family outside of your own.

We’re in-person & in Austin. We do not sponsor visas.

We don't want your resume, show us what you shipped on Github - send it via email to our toolhouse.ai inbox: hello@...
by godelski | 2025-05-02 06:02:45+00:00
> I fear this particular guy isn't senior enough to be the example we really need. >> Tim Cook ignored Schiller >> Cook chose poorly. >> Cook, Schiller, and Maestri were the ultimate decision makers “about what they felt was [an] acceptable” level of risk to cabin the Injunction’s effect in terms of link placement and design.

It really seems like the judge is saying Tim Cook was acting in willful violation of the court orders. Tim Cook is as senior as you get. I think the usual problem is that they're not able to gather good enough evidence. IIRC the FTC went after Bezos last year because be was using disappearing messages with Signal to hide business records.
by remus | 2025-05-02 06:03:16+00:00
I wonder how long these short lived cookies actually live for? From the article it sounds like chrome makes a request to the server every time it has to generate a new short lived cookie, so if they do have very short lives (say a few minutes) chrome could be making a lot of requests to your server to generate new cookies.

Ed: reading a bit more closely it sounds like the request is more of a notification and actually all the real work happens in the user's browser, so you could presumably ignore it and hope the generated bandwidth to your server is pretty low.
by frikk18 | 2025-05-02 06:03:45+00:00
Curipod | Senior Software Engineer | Full time | Remote (US-based) ($160-200k + equity)

Curipod founder here.

Curipod is the AI-powered curriculum and instruction platform for teacher-paced lessons that get students to look up from their screens and talk.

1M+ Monthly Students and growing fast.

Most of the engineering team are former founders and CTOs. Join us to redefine how classroom lessons are done natively with AI.

I’m hiring for multiple roles.

Senior Software Engineer | Growth

Senior Software Engineer | Frontend

Product Engineer

Apply here: https://curipod.com/careers
by TFYS | 2025-05-02 06:03:47+00:00
People and communities are not that different from each other, so I don't think the idea that each community would benefit from a customized local solution would work. You'd lose the benefit of economies of scale and add a lot of friction to economic activity for no good reason. The workers are also consumers, and would have to pay a lot more for everything because a huge amount of work would have to be duplicated everywhere in the economy, making things more expensive.

Large scale is good, the problem is who owns the large scale solution. When it's owned privately, it's easy to abuse such a position of power and workers and consumers don't get the full benefits of scale. The solutions should be collectively owned and managed.
by CaptainFever | 2025-05-02 06:04:05+00:00
> To me, Anubis is not only a blocker for AI scrapers. Anubis is a DDoS protection.

Anubis is DDoS protection, just with updated marketing. These tools have existed forever, such as CloudFlare Challenges, or https://github.com/RuiSiang/PoW-Shield. Or HashCash.

I keep saying that Anubis really has nothing much to do with AI (e.g. some people might mistakenly think that it magically "blocks AI scrapers"; it only slows down abusive-rate visitors). It really only deals with DoS and DDoS.

I don't understand why people are using Anubis instead of all the other tools that already exist. Is it just marketing? Saying the right thing at the right time?
by watermelon0 | 2025-05-02 06:05:13+00:00
I think the main issue with the default BitLocker configuration is that you must have recovery key saved somewhere (either on OneDrive, printed out, or on some other storage).

If something changes with the hardware/software configuration, and TPM unlock doesn't work, your data is lost, unless you have access to the recovery key.

This is completely different compared to other platforms, where you use a separate password (Linux LUKS), account password (macOS), or PIN (iOS, Android) to unlock the drive.
by beaugunderson | 2025-05-02 06:05:28+00:00
> I’ve been around long enough to see resistance to things like the Internet, version control, bug tracking systems, ORMs, automated tests, etc. Not every advancement is welcomed by everybody

Version control is vegetables. You often have to cajole kids to eat their vegetables. AI is being sold as if it's dessert. You don't usually have to cajole kids to eat their dessert, and it's weird to make that part of a performance review. If it really made people more efficient it would spread like wildfire as people sold all of their friends on it. Instead people try it, encounter some small wins and some annoying losses, judge that it's basically "meh", and we get legions of non-technical managers who for some reason feel they need to mandate its use.
by wqaatwt | 2025-05-02 06:08:25+00:00
> is proven time and time again

It’s not though. That was only the case since the 1800s. Malthus was more or less correct about the preceding periods.

> collapse twice in recorded history, perhaps more

Not perhaps. Certainly more. If you want a clear cut and well documented example look at Europe between ~1000 and the 1300s.

Massive population expansion leading to overpopulation, very high food costs and mass starvation. The Black Death interrupted that cycle and limited population growth for the next 400 years or so (which resulted in significant increase in per capita productivity across Europe).
by solatic | 2025-05-02 06:08:54+00:00
> reinvested every single penny. thats the way you can outgrow your competition which doesn't do the same thing

First of all, to reinvest, you need to have some profits in the first place. Even getting to the point of having any revenue at all, you're losing 90% of entrepreneurs just to get there. Second, among those 10% of entrepreneurs who get to the point where they have any revenue (let alone profits), it's sheer hubris to think that you are unique or special in reinvesting; most entrepreneurs are not seeking to take their goose's golden eggs while they are the size of peas.

There are very, very, very few entrepreneurs who pass survivor's bias to talk about their golden eggs.
by bohrbohra | 2025-05-02 06:09:02+00:00
You're right. "I have a doubt" means "I have a question".

We used to have "doubt-solving sessions" in coaching centres. Everytime one of the students would ask "Sir, I have a doubt" I would always snigger within that the student was insinuating something sinister or nefarious about the instructor's character. I always found it hilarious.

But that's just how English is used in India.
by Freak_NL | 2025-05-02 06:10:08+00:00
> I feel that the Signal folks are worth trusting.

The MobileCoin integration and the long standing refusal to support a way to use the messenger without using a phone number (or a smartphone at all) make me wary. To me they sit pretty much on the same level of trust as Meta's WhatsApp, which is a sad thing to have to conclude.
by Spivak | 2025-05-02 06:10:17+00:00
Right but you have to look at this data honestly because we have one and a half generations of people who grew up with an unrestricted, and arguably worse in terms of content, internet. If you're going to point to a cause it had better be something in the set of things that didn't affect millennials or older gen-z, stuff like violent and pornographic content clearly aren't in it.
by ascorbic | 2025-05-02 06:10:44+00:00
There's nothing in this spec that says there needs to be a restriction of one session per TPM. There isn't even anything that forces the client to use a TPM. It just requires the client to generate a key pair, and then use that to sign challenge responses. There's no way for the server to know which TPM was used to store that private key, nor whether one was even used.
by pk97 | 2025-05-02 06:11:03+00:00
exactly, it stands for "I have a question" :) It stems from the school/coaching system where you are encouraged to ask questions as you figure out say a problem set in dedicated "doubt clearing" sessions with your teachers/instructors. That carries over to the workplace where you are more likely to hear this phrase when someone has a question in a technical discussion or similar, from my observations.
by dqv | 2025-05-02 06:11:05+00:00
In the US you can definitely say 17:00, but we would say "seventeen-hundred hours". It's similar to how we communicate four-digit street addresses, so 17:05 is "seventeen oh five" with or without "hours" at the end. I picked it up from military people I think.

I don't do it unless the other party uses 24-hour time though. I wish everyone did because people often omit AM/PM and then you have to ask for clarification, where as "eighteen-hundred" is always obviously 6PM and can't be confused with 6AM.
by bluelightning2k | 2025-05-02 06:11:06+00:00
Issue with deno deploy specifically: they have Deno subhosting but the model is you create an end user script, push it, then can run it.

There's no concept of "run this once" or eval. So it's a very heavy, deploy per run, model of iteration which is not suitable for the main use case of giving end users an editor to iterate with
by time4tea | 2025-05-02 06:11:19+00:00
Variable pay for sales roles is the driver of vast amounts of broken behaviour. You've seen it it your own companies, but also in the various financial crashes. It immediately sets everyone's goals in non-coherent directions. Wonder why your favourite software is getting so crap? Pressure from "sales execs" cos they are getting a bonus for the poorly thought out, inconsistent crappy feature they sold to some enterprise.
by exodust | 2025-05-02 06:12:41+00:00
> When Indian users use writing suggestions from an AI model...

Let's press pause and note the deliberate decision in using AI to help you with your "favorite food & holidays".

A better remedy to the problem invented by this article, is to recommend against using any AI for writing about your personal experiences, values and preferences.

As an Australian man, my favourite food is [shrimp on the barbie mate] Thai noodles. You see? If my AI model was drenched in Australiana culture, it will come up with stereotypes I don't subscribe to.
Show HN: Stop Searching for Documents
by dulianjik | 2025-05-02 06:12:53+00:00
...and start finding!

We're building an app that allows you to connect all your daily tools to one app and via Google / ChatGPT like searches you can easily find old documents or anything you need at the moment.

Currently we support: - Jira - Gdrive -

We just launched our beta and would like you to play around and give feedback.
by imiric | 2025-05-02 06:13:37+00:00
> Seems pretty unethical to me. Exercising a liberty in direct contradiction to its creator’s wishes for personal gain with no recompense to them is about as crassly selfish and non-prosocial as it gets.

You're ignoring the possibility that users of the software might not agree with the author's wishes. There's nothing unethical about that.

A request to not change a part of the software is the same as a request to not use the software in specific industries, or for a specific purpose. There are many projects that latch on open source for brand recognition, but then "forbid" the software to be used in certain countries, by military agencies, etc. If the author wants to restrict how the software can be used, then it's not libre software.
by pornel | 2025-05-02 06:13:55+00:00
Apple could have offered APIs for managing 3rd party subscriptions from that screen, but it's more convenient for them to have a closed system, private APIs, and use their own non-extensibility as an excuse for their closed payment system.

It's also Apple's specialty to create false dichotomies and shit sandwich bundles: it's either the 30% cut or daylight robbery. No third option (in reality PayPal is more consumer-friendly and allows managing subscriptions in one place from more than iOS).

The whole App Store model is a false dichotomy between the 30% cut and Disney-like moderation vs raging malware that will take down the whole mobile network. No third option (so you can't have Fortnight, or any app showing a nipple).
by plsbenice34 | 2025-05-02 06:14:41+00:00
I just read the section in his book that the article refers to and within context it doesnt say anything that the article suggests. It doesn't say anywhere that he believes in the noxious vapors of miasma theory or that he doesnt believe germs exist. Did you read it? Can you quote where he says he doesnt believe in germ theory?

I am not sure he even misunderstands miasma theory. At a certain point in history, miasma theorists were incorrect about the exact mechanisms for spreading disease — they didn’t understand the concept of disease vectors in the environment, like mosquitoes — but their drainage and sanitation solutions were highly successful. I think that is what he refers to with statements like "miasma’s approach to medicine". At worst it seems like he may have used the term 'miasma theory' in a different way than is typical, which hardly justifies the claims in the article.

The section of his book ends with this: "As a final side note, it seems to me that a mutually respectful science-based, evidence-based marriage incorporating the best of these two clashing dogmas would best serve public health and humankind". How can he write that if he doesn't believe in germ theory as the headline clearly implies? He is looking at the history of science and making deeper statements about the general approaches to studying the spread of disease. I think the article seems to willfully and intentionally misrepresent the text.
by bscphil | 2025-05-02 06:15:04+00:00
A huge proportion of sites (a) use cookies, (b) don't need cookies. You can easily use extensions to enable cookies for the sites that need them, while leaving others disabled. Obviously some sites are going to do shitty things to track you, but they'd probably be doing that anyway.

The issue I'm talking about is specifically how frustrating it is to hit yet another site that has switched to Anubis recently and having to enable cookies for it.
by palata | 2025-05-02 06:15:51+00:00
Being in a position where you can copy anything and crush competition is a problem.

In terms of antitrust, I believe that if you could prove that Amazon forked and offered the service with the intent to crush the competition, it would be downright illegal. A current case is Meta: back then, Zuckerberg was happily writing (internally) that Facebook needed to buy WhatsApp and Instagram and Snapchat to prevent them from ever competing. This is anti-competitive.

This post explains it well: https://pluralistic.net/2025/04/18/chatty-zucky/#is-you-taki...
by sbysb | 2025-05-02 06:16:41+00:00
Oneleet (YC S22) | Multiple Roles | US & NATO Countries | Remote | Full-time

Oneleet is an all-in-one cybersecurity startup that has built its own Attack Surface Monitoring (ASM), Code Scanner, Device Monitoring, and Compliance Platform. We are growing at an unprecedented pace and working on some very exciting projects.

What we're looking for:

Strong problem solvers who can work independently in a remote environment - Security-minded professionals passionate about building robust, scalable systems - Comfortable working during Eastern Time

Tech stack: Go, TypeScript, React, Kubernetes

Open roles:

* Senior Software Engineer (Backend)

* Security Program Manager

* Internal Security Compliance Auditor

* Technical Sales (must have background in Computer Science or Cybersecurity)

We offer:

- Competitive salary - Equity in a fast growing cybersecurity startup - 100% remote work - Company offsites every quarter (past offsites have been in The Netherlands and Italy)

If you're interested in joining our team, please reach out to samuel<at>oneleet<dot>com with the subject line "HN: <Job Title>". Alternatively, you can also apply at https://www.ycombinator.com/companies/oneleet/jobs
by Thorrez | 2025-05-02 06:16:49+00:00
So every TLS connection, both the handshake and all the subsequent bytes need to be routed through the TPM? That sounds like it'll be slow.

Additionally, the TPM will now need to have a root store of root CAs. Will the TPM manufacturer update the root store? Users won't be able to install a custom root CA. That's going to be a problem, because custom root CAs are needed for a variety of different purposes.

When a user gets an HTTPS certificate error, now it'll be impossible for the user to bypass it.
by renegat0x0 | 2025-05-02 06:17:17+00:00
https://bookmarkos.com/

https://grimoire.pro/

https://hoarder.app/

https://mymind.com/

https://github.com/omnivore-app/omnivore

https://github.com/wallabag/wallabag

https://betula.mycorrhiza.wiki/

https://zotero.org/
by chrismorgan | 2025-05-02 06:17:49+00:00
That’s definitely not how I’ve ever seen it used in Australia or India. North and south are fairly strictly geographic terms. South India is roughly the southern half of the country—following a cultural and geographical divide, but pretty neat overall. Southern Australia follows the southern edge of the country (not to be confused with South Australia, a state in the south). One is in the northern hemisphere and one in the southern, but they use the terms the same way, pointing to the poles.
by twelvechairs | 2025-05-02 06:18:48+00:00
'Global south' is just the latest in a fraught space where every term seems to eventually get dragged down. Originally it was 'third world' that started off as a positive, aspirational term but became a derisive term. Then it was 'developing country' that was supposed to be not judgmental but became so. I'm sure 'global south' will go the same way.
by teruakohatu | 2025-05-02 06:19:24+00:00
That is a really good question, I am not sure where to draw the line.

I think it would be safe to say BERT is/was firmly in the non-traditional side of NLP.

A variety of task specific RNN models preceded BERT, and RNN as a concept has been around for quite a long time, with the LSTM being more modern.

Maybe word2vec ushered in the end of traditional NLP and was simultaneously also the beginning of non-traditional NLP? Much like Newton has been said to be both the first scientist and also the last magician.

I find discussing these kind of questions with NLP academics to be awkward.
by ascorbic | 2025-05-02 06:21:42+00:00
Wait, so your use case here is that you login to online banking and while you are paying your bills or whatever your computer dies, you pull the drive from the computer that just died and put it into the new computer, boot it back up all within 10 minutes, and then expect to still be logged-in? That seems exceptionally unusual, and logging into one account seems a small inconvenience compared to replacing your entire computer. tbh I'd be amazed if it even works now. Does Linux restore the complete memory state of a dead computer when you install the drive in a new machine?
by porker | 2025-05-02 06:22:28+00:00
Sort-of, we've had a litany of Postgres devshops go bust over the past decade. Some will be for the usual reasons but I wouldn't want to discount the impact of RDS.

However I think Postgres is a bit different. It's a bigger market and more widely used. There's a need for tuning services no matter which platform provides the database servers, so there's a level to make money above cloud hosting.