MurphyA/hacker-news huggingface dataset:
by ivan_gammel | 2025-05-03 10:33:53+00:00
You are misunderstanding and exaggerating this particular risk and assuming there’s only one way to handle it. First of all, it concerns unchecked user inputs: it is not enough just to fix the hash code, the entire HashMap is not great for storing it regardless of hash algorithms. Hash may be ok, but HashMap has no size constraints, so there may exist a vulnerability related to DoS attack exhausting server memory. Developers must always validate inputs as early as possible. Even the dumb ones.

Second, this risk was reliably mitigated in Java as soon as it was discovered. Just because hash collisions may exist, it doesn’t mean they are exploitable. CVE for JDK was not fixed, because it has been taken care of elsewhere, in Tomcat etc, where meaningful validation could take place.

Context matters.
by varjag | 2025-05-03 10:35:08+00:00
After series of interrogations, during which he had his jaw broken

It was worse than that. He was beaten with rubber hose and wire harnesses, had needles pressed in the body, was urinated on. He then was sent to a gulag where he was left dying from hunger and scurvy. He was saved by a fellow imprisoned engineer who was fortunate to fight his way up though the inmate hierarchy.

The broken jaw, out of the many broken bones in his body is mostly mentioned because it was ultimately the cause of his death in 1960s.
by perlgeek | 2025-05-03 10:36:34+00:00
I'd describe the robot's level as "good for outdoor table tennis".

There are pretty much too distinct classes of players. Those that occasionally play for fun, typically at stone tables found in parks and open-air baths.

And then there are those that play and train at least once a week in indoor halls with wooden tables, and often try to learn proper stroke techniques, and often participate in leagues.

The robot is pretty good fit for the first category, and that's already a pretty impressive achievement.

In the second category, it'd lose to anybody playing for more than a year or two, so it would be on par with the lowest tier players there.
by account-5 | 2025-05-03 10:37:15+00:00
No contraversial at all. And without sounding like I'm flogging a dead horse, since I've mentioned it elsewhere, but you're after Nushell. Everything is data, structured data. And of interest to a sibling comment it's syntax is similar to SQL, with things like where and select.

Edit: in relation to the other sibling comment, Nushell was developed as an improvement over powershell. I use both and prefer nushell's syntax.
by lazide | 2025-05-03 10:37:55+00:00
The idea of the 3 branches is that there are systemic incentives for ‘bad people’ (which is a fundamental normal state, btw) to have incentives to screw up the bad people in the other branches. Not that ‘good people’ (an idea which most of the founding fathers would have considered a naive fantasy) would use it to save everyone.

They are supposed to be 3 selfish pillars fighting each other to what is likely an actually reasonable state, not 1 or 2 pillars of ‘hero’s’ fighting evil. Which notably, presenting the executive as the ‘hero’ here is exactly what Trump is trying to do to squash what limited resistance he is getting.
by edwardshuddle | 2025-05-03 10:38:05+00:00
SEEKING WORK | REMOTE | REACT, REMIX, REACT NATIVE, NODE.JS, GO, KUBERNETES

Hello! With almost a decade of experience, I'm a pro at helping create and launch web and mobile apps from the ground up. My toolset includes React, Remix, React Native, Node.js, Go, Kubernetes, and Docker, well-versed in using both AZURE, AWS, and GCP cloud services.

If you need to hit the ground running on your project, please drop me a line.

You can check more information about me at my website: https://edwardsmoses.com, check out my GitHub at https://github.com/edwardsmoses, and check out my portfolio at https://edwardsmoses.com/portfolio

Drop an email at hi@edwardsmoses.com, and let's get to work!
by praptak | 2025-05-03 10:39:36+00:00
Ah yes, ass cover as a service.

There's a classic article (2010) about it: https://thetech.com/2010/04/09/dubai-v130-n18 (HN: https://news.ycombinator.com/item?id=1257644)

The difference is that while the decision has been made, it isn't necessarily very good.
by jlaternman | 2025-05-03 10:40:13+00:00
Yeah, that’s what I find. In fact I’m only on this article catching up with my RSS.

I skim through, I arrange feeds in folders alphabetically sorted by both priority and subject. I constantly remove feeds I find too noisy, and I sort chronologically (ascending). I update read status in bulk based on my scroll position (mark above as read). It works really well, though took about a year to figure out what works best for me.
by NexRebular | 2025-05-03 10:42:39+00:00
"At that moment, Iran said, when I had the TV sound off, I was in a 382 mood; I had just dialed it. So although I heard the emptiness intellectually, I didn’t feel it. My first reaction consisted of being grateful that we could afford a Penfield mood organ. But then I realized how unhealthy it was, sensing the absence of life, not just in this building but everywhere, and not reacting — do you see?"
by joshstrange | 2025-05-03 10:44:03+00:00
I assume you are referring to IAP not “Apple Pay” (it’s confusing, not as confusing as “Apple TV”, but still).

Apple Pay: Apple’s digital wallet, “free” to business and consumers (Apple takes a few points off the transaction)

IAP: Apple In App Purchase system that takes 30% (or 15% on subscriptions after 1 year OR if your revenue is <1M)

Apple Pay can be used inside apps today for no extra change as long as you aren’t selling digital content in your app (I do think). I’m guessing you can’t just start using Apple Pay in your app instead of IAP but you could link out to a web page that supports CC entry, Apple Pay, Google Pay, Link, etc.
by znpy | 2025-05-03 10:45:16+00:00
One more major piece of software is not open source (BSD) anymore, it's now Free Software (AGPL).

And every time someone talks about Open Source licensing, we'll remember how Redis was BSD and that became a shitshow so bad (everybody was fleeing to Valkey) they had to relicense it to AGPL (Free Software).

If this isn't losing...
by inferiorhuman | 2025-05-03 10:45:25+00:00
There's basically no zoning whatsoever in much of Texas. That's how you get industrial explosions like the 2020 industrial explosion right up against a residential neighborhood in Houston.

California's largely the other extreme. Even large parts of San Francisco are zoned for single family housing (or maybe duplex if you're lucky). So already things like larger apartment buildings or mixed-use buildings that can be more profitable are out. CEQA allows for a lot of public feedback which is in turn allowed to grind projects to a halt.

For example there's undeveloped land in Brisbane, just south of San Francisco. It's near a freeway (CA-101) and commuter rail (Caltrain). The city of Brisbane's been (successfully) trying to block any development that would include residential buildings — they want office jobs not new residents. I don't know enough about other cities to make relative comparisons, but again in SF the department in charge of permitting (DBI) has seen a number of bribery and conflict-of-interest charges recently. Look at any big project in California really. Corruption at the city/county level may differ but the process by which anyone can gum up the works is a state mandated one.
by krapp | 2025-05-03 10:46:12+00:00
>Maybe it’s watching your whole community fall apart piece by piece. Maybe the tax base dries up so the schools get worse, the local stores shut down, the houses rot, and the kids who can leave bounce the moment they’re able to. Maybe the ones who can’t are left behind with no real options and no way out leading to all the shitty outcomes one would expect. And maybe… none of the people responsible for any of it have to live with the fallout. The politicians, the executives, the media, none of them are losing sleep over it. Their towns don’t get gutted. Their futures don’t disappear. Their kids aren’t overdosing.

No. No, it really isn't.

Because your sprawling victimhood narrative describes the situation of many in the US to some degree or another, but not even that of most Trump supporters. And not even most Trump supporters voted for him just for the catharsis of seeing the people they hate suffer. Although again, many did, and will admit so openly so I'm not the one engaging in caricature here. I never mentioned "brainwashed idiots" or a cult, although Trump does have an actual, literal goddamn cult so I don't even know what you're objecting to in that case.

It isn't my fault that the more you try to defend these people, the worse they come off.

Good day.
by exe34 | 2025-05-03 10:46:16+00:00
> It isn't Android that makes this inconvenient. It is the app developers that cause "prompt fatigue" (by showing permission requests repeatedly) or "blackmail" by refusing to work until permissions are granted. A new sandbox mechanism is unlikely to change much.

That's why spoofing should be an option. You want GPS? Timbuktu. You want my camera? Here's a close up video of a saggy scrotum. You need access to my contacts? Here's an address book with the contact details for all the funeral services within a 50 mile radius.
by mike_hearn | 2025-05-03 10:47:56+00:00
I already showed that the UK - definitely a country in Northern Europe - doesn't have a majority that finds its state broadcaster trustworthy. We can assume those people who don't find it trustworthy don't support it, or if they do, do so only out of inertia and wouldn't care if it went away either.

> The business model of for-profit digital news production is not economically viable outside of certain niches or clickbait/ragebait

State media is much more than just news, so are you agreeing at least that all of the non-news production should be defunded?

But, of course it's viable to do for-profit news. There are plenty of successful private news companies out there that aren't niche. You are welcome to define all news you dislike as ragebait but that's clearly not an argument, it's just a "lame value judgement".

> Free, broadly available, non-commercial journalism is a critical part of our society

It's not free and it's not non-commercial. People are paid to produce it via ordinary commercial contracts, and then people are forced to buy it. Nor is it a critical part of society. Society did just fine before state media was a thing. Meanwhile the injustice upon innocent people remains, and the existence of it harms society itself greatly via other paths as well.
by thrance | 2025-05-03 10:48:04+00:00
Your comment make really little sense to me, I'm completely lost.

> The thing 'anti-capitalists' never seem to understand, is that it's not a top down system but bottom up emergent human behaviour.

They don't think that. Seems like a straw-man.

> A function of consent/interoperability at scale beyond the immediate family/tribe unit. Thus hard to see an "end to capitalism". That would be like an end to language. We'd just re-invent it.

Why? Are you claiming that any system would contain capitalism and thus we can never be rid of it? Because they are other systems without accumulation of capital in the hands of the few. Seems like an appeal to nature to me.
by ajb | 2025-05-03 10:48:16+00:00
It's a lot easier to optimise your phase change fluid for a temperature range than to add another constraint to chip design.

Anyway, apparently fluid in heat pipes work at a range of temperatures not just at the exact temperature of phase change

What I always wondered is why we didn't get flexible heat pipes that plug directly into server boards, leading to some centralised heat exchanger or cooling tower, rather using the air as a transfer medium
by 90s_dev | 2025-05-03 10:48:19+00:00
I've been experimenting with minimal blogs for about 15 years. Some tricks I learned:

* You can get away with const title = lines.match(/# (.+)/)[1] and avoid frontmatter.

* My blogs never have so many posts they need pagination or tags, or categories, or sorting.

* JSX turns out to be a great vanilla server side string builder if you use a questionable hack like https://immaculata.dev/guides/enabling-jsx.html

* GH Pages with arbitrary build steps instead of (sigh) Jekyll is really easy now with things like https://immaculata.dev/guides/using-gh-pages.html

* highlight.js is still basically the king of super easy code syntax highlight by adding literally three lines to your HTML (shiki is cool but slooooow)
by Grustaf | 2025-05-03 10:48:22+00:00
Location: Copenhagen and Stockholm

Remote: Sure

Willing to relocate: Yes, to SF, NY or other major city

Technologies: Startup CTO, and advanced iOS and Mac apps from start to finish

Résumé/CV: Apple, MLB, Marshall, various startups. Theoretical physics M.Sc. + classical languages + finance.

Email: arrow_02_paddies [cinnamon bun] icloud [dot] com
by tomalaci | 2025-05-03 10:48:49+00:00
I've been wondering what is the benefit of putting up your own web server or scripts to serve your static content when you could put it in a Github repo or serve from something like S3?

The nice thing about latter is that the bandwidth, DDoS or other load-related issues aren't that much of a problem. Server maintenance also isn't a problem as you don't have any.
by Retr0id | 2025-05-03 10:49:50+00:00
One of my more dubious design decisions (7 years ago...) was to inline all my images as base64 (I was originally planning on having only simple diagrams that would compress well, but this is less true now). I like that every page load generates just a single request, and that you can ctrl+s the page without any breakage.

I haven't profiled anything though, it could also be the syntax highlighting being slow (it generates quite a soup of HTML tags).
by dns_snek | 2025-05-03 10:51:51+00:00
That's easy. What makes someone a sycophant, by definition, is that their encouragement and flattery is unconditional and completely disconnected from any sort of realistic consideration of your ideas.

You can't judge whether LLM is acting like a sycophant without reading the conversation, and you can't judge whether a human is being an irrational pessimist without having the full context.

Are they a highly intelligent, technically skilled, and socially competent person (probably not if they discuss their ideas with ChatGPT instead of a friend), or do they have a high school diploma, zero practical skills, and have spent the past 20 years smoking weed all day?
by lukan | 2025-05-03 10:52:28+00:00
SVG indeed also has come a long way and also with just using images in the browser you can solve it quite performant, that is right. I have done both (no map service, but having lots of images on the screen). But WebGL is still leagues ahead. And that shows on old smartphones for example. And I regret not having made the switch earlier as more performance gives much more possibilities, than being restricted to what the DOM offers.
by exsysadmin | 2025-05-03 10:52:46+00:00
The last time I had to call fsfreeze (or xfs_freeze) before creating an LVM snapshot was maybe 17-18 years ago on a system with rather old (even for the time) "stable" versions of everything, where it was not yet integrated.

Since decades, lvm triggers a freeze before snapshot creation and an unfreeze afterwards, if the filesystem supports it.

> fsfreeze is unnecessary for device-mapper devices. The device-mapper (and LVM) automatically freezes a filesystem on the device when a snapshot creation is requested. For more details see the dmsetup(8) man page.

https://man7.org/linux/man-pages/man8/fsfreeze.8.html

It is part of the VFS:

> freeze_fs > > called when VFS is locking a filesystem and forcing it into a consistent state. This method is currently used by the Logical Volume Manager (LVM) and ioctl(FIFREEZE). Optional.

https://docs.kernel.org/filesystems/vfs.html

All relevant filesystems implement it.

> List of these filesystems include (2016-12-18) btrfs, ext2/3/4, f2fs, jfs, nilfs2, reiserfs, and xfs. Previous list may be incomplete, as more filesystems get support.

Using LVM snapshots is absolutely fine for creating consistent and complete copies of sqlite databases. You have to to copy the rollback-journal or WAL, too: they are part the db, it will checkpoint to the db file when you open it or its copy. Every committed transaction before the snapshot is in it. It is complete.

And even if you do use a mode below PRAGMA synchronous=FULL ( https://sqlite.org/pragma.html#pragma_synchronous ) -- FULL is needed to ensure durability as it fsync()s the WAL on every commit -- you are better of than with a system crash: the freeze writes out every dirty page to disk, which is not guaranteed in case of a crash, where in NORMAL mode, you might lose the transactions written to the WAL file, but not to synced to disk yet.
by red_admiral | 2025-05-03 10:52:47+00:00
> Bad people react to this by getting angry at the gate attendant; good people walk away stewing with thwarted rage.

> You ask to speak to someone who can do something about it, but you're told that's not company policy.

People somewhere in between realise that the point of the gate attendant (or Level 1 tech support person) is to shield management from customers, so you have to outflank the shield.

Being yelled at by a customer is bad for the Level 1 support person, although there's usually a policy in place for phone support that you can hang up if the customer is getting aggressive. What's much worse is saying to management "hey here's something you might want to look at" and being super yelled at by their boss for not doing their duty of keeping the customer away from the higher-ups. That kind of thing can get you fired.

But you can hack the system in many ways. The point is to find someone higher up without going through the person who's not allowed to help you, and without blaming them for doing their job.

Some possibilities: find the higher-ups on linkedin, speak to a company rep or executive personally at an event if your professional circles overlap, send a printed physical letter to someone in control, and so on.

Something I've seen work many times: if you're a student, find out about the university's management structure and ask for a personal meeting with the Dean of X of whoever sits above the department admin person who's assignment is "we've taken this decision, now make the students happy with it". A dozen students asking to personally speak with the Dean or President lets them know something's up and the shield was ineffective. Since there's usally some kind of statement of values about how the "student experience" is central to everything they do (read: "students are paying customers"), they can't just turn you away.
by angra_mainyu | 2025-05-03 10:52:50+00:00
> If you can’t benefit from that then you spend that deposit on renting, which means you can’t buy in your 30s and are trapped in the rent cycle.

I disagree with this - assuming the average white collar job (given HN), you _will_ progress salarywise from your early 20s to your early 30s.

When I was a Jr. Software Dev at 23, I both didn't have the money to afford a house where I got all the job offers (which wouldn't make sense), nor would it have been a good idea given I would've wanted to stay open to chasing higher salaries after 1-3 years elsewhere (which I did).

Maybe some decades ago it was common to spend your whole professional career in the same city, but as a dev I've had jobs pop up in different cities, heck even different countries!
by ben_w | 2025-05-03 10:53:16+00:00
Given your expectation:

> It's my expectation is that, at least, some kind of maintainable code is generated from what's it's learnt.

And your observation:

> LLM failed at the most basic things related to maintainable code. Its code is basicaly a hackery mess without any structure at all.

QED, *your expectations* are way too high.

They can't do that yet.
by thomanq | 2025-05-03 10:53:49+00:00
Up until recently, you could export your LinkedIn connections in the EU.

Now, the connections are supposedly available 48 hours after data export request[1], but the complete archive doesn't contain the connections CSV file. [2]

[1] https://www.linkedin.com/help/linkedin/answer/a1339364 [2] https://imgur.com/gallery/linkedin-removes-connections-data-...
Show HN: Year old solo dev revolutionizing the private investing industry
by SebastianTrygg | 2025-05-03 10:54:03+00:00
I began building PitchPortal after getting to talk to people like Richard Brandson, Steven Bartlett and Marc Randolf among many other investors and founders at an event in Stockholm. I left with a long list of ”problems” in the startup capital raising industry and came up with a set of solutions.

It has taken time and some unconventional decisions for the building of my AI models but now I am collecting some first impressions.

// Sebbe
by ndsipa_pomu | 2025-05-03 10:54:05+00:00
As repairing roads costs so much, it annoys me that we don't make some attempt at penalising the heaviest vehicles. As road damage is roughly proportional to the fourth power of weight, it would make a lot of sense to prevent logistics companies from just using the largest vehicles that they can - it should work out costing less if loads are broken up and delivered via multiple, lighter vehicles. However, as the public bears the cost, it means that logistics companies will just look at their expenses (drivers' wages, fuel etc).
by znpy | 2025-05-03 10:54:26+00:00
Yes. I moved a few repository from java 8 up to Java 21.

Java 8 -> 9 is the largest source of annoyances, past that it's essentially painless.

You just change a line (the version of the JRE) and you get a faster JVM with better GC.

And with ZGC nowadays garbage collection is essentially a solved problem.

I worked on a piece of software serving almost 5 million requests per second on a single (albeit fairly large) box off a single JVM and I was still seeing GC pauses below the single millisecond (~800 usec p99 stop the world pauses) despite the very high allocation rate (~60gb/sec).

The JVM is a marvel of software engineering.
by perihelions | 2025-05-03 10:55:09+00:00
Thousands of innocent kids in cages, and Mr. Biden actually pardoned that judge as a "nonviolent offender". I think I'll never forget that particular pardon, the obscenity of it. It, just, inverts the ideals behind the reform movements, turns them upside-down in mockery.

His constituents petitioned him about the crooked jails, and... Biden heard them; and freed the jailer.
by paulnpace | 2025-05-03 10:57:28+00:00
Cache plugins still go through the PHP interpreter. I'm under the impression there still isn't anything faster than serving HTML files.

Better is use a static site plugin, then you don't have to bother with configuring any caching or external services.

Best is also use the SQLite Database Integration plugin, so the server doesn't even have to run MySQL/MariaDB (other than initial installation), and on an otherwise light server, the filesystem will effectively keep the site in page cache while using less memory, if I understand that correctly.

The WordPress interface can be kept behind HTTP auth or client cert.
by agurk | 2025-05-03 10:59:41+00:00
When you go around a tight corner and are thrown to one side, what term would you use for the tram's change in motion then?

Deceleration is a useful but non-technical term, like vegetable. A tomato is a fruit which is a tightly defined concept, but it is in this loose category of things called vegetables. It's still useful to be able to call it a vegetable.

From a physics perspective all changes in motion (direction and magnitude) are acceleration, and it's correct to say the designers had to consider acceleration in most (all?) directions when designing the tram. This is including gravity's, as they tend to give you seats to sit on, rather than velcro panels and straps like on space ships.

It is useful to say to your friend in the pub that you got thrown out of your seat due to the tram's heavy deceleration, rather than give a precise vector.