MurphyA/hacker-news huggingface dataset:
by kristianc | 2025-05-11 22:51:17+00:00
In order, I would say that your most promising plays are:

Game studios - a low touch way of getting around smurfing, botting and ban evasion, cheap farming accounts, and likely already think in terms of proxy/VPN abuse. Reach them through Unity and Unreal forums, dev groups, GameSec Twitter/LinkedIn

FinTech / Crypto compliance teams - position yourself as a plug in to KYC or KYB platforms. Behavioural analytics is a big play in fraud prevention, whether someone is using a VPN won't be the whole picture, but is part of it.

Deprioritise marketers, content teams - they're promising but ultimately false positives as no one but the very biggest players amongst them are losing sleep over this.

The key more than anything for both is going to be to emphasise in your positioning the ease of integration. Remember how Stripe had the exact code you needed to use on its homepage for ages? You've got to give the impression that integrating this is going to be super simple.

I feel like you spend quite a bit of time on your homepage selling why someone would want to do it, but not so much on the how and why you make it so easy fo them. Clicking into your docs it looks super simple, but the minute someone's had to click into your docs if they’re a non-dev audience, you're losing people.

You also absolutely must have a GDPR story. You’re detecting proxies and VPNs. This means you’re inspecting user connection data, possibly in real time, and possibly storing flags or identifiers. Even if you’re not processing names, emails, or cookies, under GDPR, IP addresses, device signatures, and behavioural data = personal data if it’s tied to a user.

Your GDPR story needs to cover data type transparency, what exactly what you collect: IP, device type, headers, connection method? If you’re processing requests in memory and returning results via API, that’s low risk. Highlight it. Offer EU hosting or at least say “data processed within EEA-compliant infrastructure." IANAL but you'll want to have a lawyer look at it.
by atombender | 2025-05-11 22:51:18+00:00
We have the Geberit AquaClean Tuma Comfort [1]. It's a marvel of German engineering. The jet is really powerful. Painfully so, on the highest setting, and it can also be set to be really hot.

It's an entire bidet toilet for wall integration, not one of those things you put on top of an existing toilet. It has a heated seat, a suction fan that removes odor, and a dryer for after washing.

[1] https://www.geberit-global.com/bathroom-products/wcs-urinals...
by efitz | 2025-05-11 22:51:34+00:00
This is great. Let us remember this link, and archive the data right now.

I will wager $1000 of my own money right now that if the exact same methodology is used to measure sea level in 10 years, as was used at the publication of the study, and if the editors do not apply any “offset” to sea levels, that in 10 years the sea level will have risen less than 50% of their predictions at more than 50% of stations.

Applying any offset for any reason or changing methodology will invalidate the bet.

I’ll try to set up a Kalshi market.

If climate change studies should be used to influence public policy, then they must be empirical, repeatable and have predictive value.
by jandrewrogers | 2025-05-11 22:51:35+00:00
There have been attempts at it. Unfortunately, they consistently botch the execution so badly that most of the executives in the business have PTSD from the experience. And these were very expensive failures that become lore inside the companies. When they do acquisitions of small companies entering this market those end up getting smothered by the culture of the automotive companies.

Everyone has spent a mountain of money on this problem but spent it all assiduously avoiding addressing the root causes.
by fallingknife | 2025-05-11 22:53:41+00:00
> High School is just 4 more years of school after you've already done 8 in K-8. It has no special properties.

This is probably also true. High school standards have been lowered so much that everybody with a pulse can graduate so the degree is meaningless in terms of educational achievement. Basically just a filter now that says "I am at least one tiny step above a total retard or a complete 100% screw up."

I worked jobs part time as young as 14. Child labor laws are mainly about keeping kids in school rather than protecting them from anything bad because with our society defined around credentials, failing to obtain them is bad for that child's future. But that's just a rule we made up. There's absolutely no reason that a 14 year old who has finished 8th grade and knows how to read and do basic math couldn't go off and apprentice to a trade and be successful. In 1910 only 10% of Americans had finished high school and we still had a perfectly well functioning society. And at that time only 2 % had college degrees and still we were in an era of rapid scientific progress and economic growth.
by FireBeyond | 2025-05-11 22:54:48+00:00
But you're doing it again. You're saying "I don't trust X Y and Z". So who do you trust? "Someone who doesn't break the law." Who?

Because you're only just saying "I don't believe anything because everyone lies" and you can't name a specific person/group/entity that you'd trust, it's just this nebulous and vague "people who don't break the law".

So again, who would you trust to break this story (assuming, for the sake of argument, that the allegations are correct)? Because so far you have "not the media", "not the government" and "not people involved".
by hshdhdhj4444 | 2025-05-11 22:55:23+00:00
Honestly when you’re a small company or starting up, when you’re unsure of how much, if any, usage your product will receive, it makes sense to start on the cloud.

And then as you grow, it makes sense to periodically check in as to whether the cloud vs on prem calculus still holds for you or not.

There is a huge place for the cloud in our eco-system. And the cloud companies have been an incredible enabler for startups especially.

The problem lies with the lie that has been peddled by the cloud companies and many others who know about little other than the cloud, that it’s always the best solution, when in reality there are many scenarios where it’s not the best solution even when you consider the cost of migrating from the cloud to on-prem.

TLDR: Whether you’re on prem, or in the cloud. Regularly assess whether your workflows will work better and/or cheaper in one or the other. With the cloud you do have the added caveat that costs have been raised significantly whereas on-prem costs have been fairly stable (and actually dropping) over time, but again, that can be a factor in your analysis.
by hedora | 2025-05-11 22:55:26+00:00
My biggest concern is lack of a stereo. Did they include speaker cutouts and wires, or are you looking at a $1000 labor bill, minimum?

I’d much rather they included a $200 system, since ~ 100% of their customers will want to be able to have speakers in the doors and a mic in the dash (at the very least).
by scripturial | 2025-05-11 22:55:46+00:00
The allure of the perfect notes and todo app. Having gone through phases of various modern todo and note apps over the years, I’ve finally let it go and decided to embrace just using text files. (Neovim for me, not that it matters which text editor one uses)

It’s not that there aren’t cool apps for this stuff, it’s more that I have a trail of data across various todo and notes apps from years of different tools.

One solution to the problem of making things “feel native” is to go all in on letting go of native. Target a different style, be it minimalism, Commodore 64, pixel art, etc… it can be fun that way, especially if it’s mostly just a tool for you.
by kaoD | 2025-05-11 22:56:09+00:00
> What is a DNS resolver if not a proxy for DNS requests?

A DNS resolver... resolves (recursively). unbound[0] would be an example.

A proxy instead only forwards to a trusted DNS server (or servers) and may cache their responses but won't do any resolution by themselves. dnsmasq[1] would be an example.

My guess is a simple proxy is less vulnerable to UDP amplification attacks (and also vastly simpler to implement and maintain).

The drawback is you need a resolver you trust, but that might be okay if you actually do have one. E.g. some DNS server that you know is safe but is not operating in your country (you might just want to proxy it so its closer to you for lower latency).

[0] https://en.m.wikipedia.org/wiki/Unbound_(DNS_server)

[1] https://en.m.wikipedia.org/wiki/Dnsmasq
by deergomoo | 2025-05-11 22:56:39+00:00
I want a 7-10” central display that spends 99% of its time showing CarPlay but also has a radio if I need it, the backup camera when I’m in reverse, and lets me change a couple of settings for convenience features like auto locking etc. Everything else can be dials, knobs, and buttons. My Mazda3 is perfect for this and I’m quite sad that I’m almost certainly not going to be able to find anything like it by the time I come to replace it.
by kumavis | 2025-05-11 22:57:06+00:00
hadn't heard of breakapp! paper author Nikos Vasilakis also contributed to Mir (https://github.com/andromeda/mir).

This is similar to my work on LavaMoat (https://lavamoat.github.io/) which provides runtime supplychain security protections to js apps (nodejs or browser) by eliminating ambient authority and only exposing global capabilities per npm package according user-specified policy. LavaMoat is used in production at MetaMask, protecting ~300M users.
by betaby | 2025-05-11 22:57:07+00:00
That's how:

$ dig kernel.org @208.67.220.220

; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> kernel.org @208.67.220.220 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 12644 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 2

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1410 ; EDE: 16 (Censored) ;; QUESTION SECTION: ;kernel.org. IN A

;; ADDITIONAL SECTION: kernel.org. 0 IN TXT "The OpenDNS service is currently unavailable in France and some French territories due to a court order under Article L.333-10 of the French Sport Code. See https://support.opendns.com/hc/en-us"

;; Query time: 8 msec ;; SERVER: 208.67.220.220#53(208.67.220.220) (UDP) ;; WHEN: Sun May 11 22:56:23 UTC 2025
by jftuga | 2025-05-11 22:57:42+00:00
Here is one of few Windows apps that I have written, albeit in C#. compinfo is a single, 431 KB windows executable.

It displays basic computer info including user name, computer name, OS, model, serial number (service tag), CPU model, memory, IPv4 address and uptime.

https://github.com/jftuga/compinfo
by ozim | 2025-05-11 22:57:52+00:00
Again failing to understand what parent wrote.

Team of 30 people is not needed to write fully featured application.

Team of 30 people is needed to build, run and maintain enterprise applications. Where you might need 24/7 support and such support requires at least 5 FTE, you might need features changed when 3 people go on 2 or 3 weeks vacations. Maybe that single person will come up with something better to do with their life so you need to have some people to take over.

What parent comment was about, people make broad statements not understanding that world is much bigger place.

Yea it is absolutely possible to build an app the way you describe but it doesn’t work for every app everywhere.

The same of course using React/Angular doesn’t work for everything, everywhere.
by hnlmorg | 2025-05-11 22:58:13+00:00
I do appreciate that your post is genuinely trying to come from a good place, but I can’t say I agree with any of it.

By that I don’t just mean the analysis of this specific submission but also your tangent points about AI. People have used tools to enable creativity for the entirety of human history. The definition of what tools are acceptable and which are cheating is a subjective one and often defined by the age of the person (ie what was the norm when you were in your 20s).

I’ve seen the same debates time and time again. Whether it’s Ableton vs vinyl (DJs), search engines vs directory listings (research), internet vs books (research), VSTi’s vs instruments (musicians), automatic vs manual shift (cars), Photoshop vs traditional photography effects, CGI vs animatronics (movies), I could go on and on.

Even dumb things like a central payment till in restaurants (eg McDonalds) was heavily criticised in the UK when it was new because the “correct” way to serve food was via table service…or so people over a certain age believed.

Most people hate change. I know because I’m old myself and have seen enough change first hand and how people react to it. But change doesn’t make a compelling argument for why this 16 year old shouldn’t be helped in their endeavours to build an app. Nor is it proof that this individual isn’t who they claim to be.
Ask HN: Gemini Reliability Degrading?
by martinald | 2025-05-11 22:58:32+00:00
I've been using Gemini (via the web interface) as my main 'daily driver' since 2.5 Pro came out. It's been super reliable until probably the past few days, where I am seeing a lot of slowness and 'errors', with chats not working or stopping after a few hundred tokens response.

I've also seen problems with some AI IDEs Gemini integrations recently too, which makes me suspect it is a capacity problem.

Curious if people are seeing this with bigger/more sophisticated workloads.

Wonder if Google are having serious scale problems, which probably would be the first time I've ever written that!
by xh-dude | 2025-05-11 22:58:57+00:00
Go particularly is a sort of fixed ceiling project.

Ian recently had a really pleasant error handling proposal that nonetheless wasn’t going to change the core philosophy of error handling, or memory arenas are another area where the current tradeoffs are fine and not worth reengineering, etc.

IMHO Go is in excellent shape as far as hitting needs when it’s a good technical fit - it’s supposed to be a really stable language - and paradoxically this also may mean not everyone who’s been involved would have the same job description in the future.

That’s fine. A lot of really excellent Go team members have come and gone over the years. Russ and Ian may be some of the late leavers in a sense, so I really, really appreciate their dedication and followthrough. The culture they stewarded has payed off for the community and the kinds of upcoming things that look promising are less about the core language, more about improving and maintaining the standard library.
by photonthug | 2025-05-11 22:58:59+00:00
Woah there buddy, I'm personally a big fan of vaccines, I believe climate change is real, and we probably agree about more things than you expect.

If you're interested, I'm also not talking about who passed what laws, I'm talking about average people, and what they say about what they want, and what they say their reasons are. If you don't see hypocrisy in that all the time, then either you're not talking to very many people, or you're so deeply into groupthink that you're just not capable of making any honest appraisal at this point. If you want to start calling a dislike of hypocrisy and a desire for more integrity in more people "bothsideism" and spewing all this vitriol then I guess you can do that, but I'm not sure it will have any positive effects.
by ofjcihen | 2025-05-11 22:59:02+00:00
There’s a lot of (misconceptions/blatant falsehoods(?)) in this article but one I want to focus on is in this statement:

"Often, the high-tech services that the cyber security sector sells protect the front door, while offenders continue to sneak in the back one using low-tech methods."

A major part of Crowdstrikes offering is meant to detect/combat this kind of initial access. In fact most of the companies I’ve worked with have had an offering devoted to it as it’s considered pretty basic.

Additionally the names given to these threat actors aren’t meant to be creative. They follow a convention determined by the intelligence gathering company involved. In this case Spider = criminals (not a nation state actor). Sometimes the first part might be based on some kind of hallmark of the group.
by nostrademons | 2025-05-11 22:59:27+00:00
He's at a level where he's part of that technical buffer layer.

And that's likely the problem. (Note: my speculation. I haven't read his internal goodbye and wouldn't make it public if I had). An L6 with a good L8 for air cover can kinda hide behind the SI rating, and because they never have direct contact with VPs, they can continue doing the necessary-but-not-glamorous part of keeping Google going. An L8/L9 has that direct contact with VPs, so there's nowhere to hide.
by jeromegv | 2025-05-11 22:59:39+00:00
We are talking millions of cars driving at a speed that can kill people both inside or outside the car. Anything you can do to reduce those distractions is a net positive for society. Less death.

As for criminalizing texting, I’ve heard enough people getting caught and getting big fines that it works enough for me to dissuade me from doing it.
by int_19h | 2025-05-11 22:59:41+00:00
Earliest practical GUIs were (Smalltalk aside) generally not OOP but rather procedural - an explicit message dispatch loop, message handlers that were basically huge switch statements etc. Here's the listing for a basic Win32 app (Win16 looked very similar):

https://learn.microsoft.com/en-us/windows/win32/learnwin32/y...

And here's Xlib:

https://github.com/smysloff/xlib-examples/blob/master/src/ev...

OOP was bolted on later to make this all more manageable. Indeed, VB itself, which is object-oriented (even if it lacks some common features such as inheritance) is a prime example of that.
by neonsunset | 2025-05-11 22:59:45+00:00
> C# strings and arrays were also almost a carbon copy of Java

You'd be surprised but .NET and Java strings have a lot of differences. In Java, String is a class which wraps byte[], in .NET - string is a "FieldSeq" object with characters stored inline. One indirection less but with no special fields and cached state like in Java.

Arrays have significant differences too, where Java arrays do not implement any actual collection interfaces - they are just contiguous chunks of elements with an indexer and length field and need to be asList'ed, so it's common to consider in Java to rely on arrays an anti-pattern, which is the opposite to C# arrays, which implement the full set of System.Collections.Generic interfaces.
by tom_ | 2025-05-11 23:00:14+00:00
I built it with VC++ and it's 23,552 bytes. Close enough. Command line:

cl /Zi /MD /Os /Fetest.exe gui.c main.c todo.c comctl32.lib user32.lib gdi32.lib shell32.lib advapi32.lib /link /opt:ref /opt:icf
by throw0101d | 2025-05-11 23:01:35+00:00
> What's your objection to LTE?

Tracking, phoning home (with related privacy issues), etc:

* https://arstechnica.com/cars/2024/09/flaw-in-kia-web-portal-...

* https://arstechnica.com/information-technology/2019/10/five-...
by areoform | 2025-05-11 23:02:23+00:00
And they shut it down. In 2023.

The current tech giants spend a lot of money on "research," where research means optimizing parts of the product line to the 10^nth order of magnitude.

Arguably, Google Brain was one such lab. Albeit with more freedom than normal.

Which is fine, it's their money. But then they (and the broader public) shouldn't bemoan the lack of fundamental advances and a slowdown in the pace of discovery and change.
by hshdhdhj4444 | 2025-05-11 23:02:27+00:00
I’m not sure where this idea that the cloud doesn’t need skill to manage comes from.

Cloud engineers are extremely highly paid because they need to be extremely skilled.

No one running stuff on prem is compiling Linux from the kernel and then building a few packages onto the hardware they built manually after designing a networking infrastructure in their office building’s basement.

You’re paying for enterprise software with support and best practices and sensible defaults provided to you, running on enterprise level hardware with support, best practices, sensible defaults configured, running in professional data centers where the data center firms manage maintenance, repair, etc while also managing physical security and other risks.

If anything, the support you can get from all the on prem providers is far superior to what the cloud providers are giving you.
by int_19h | 2025-05-11 23:03:33+00:00
Check out https://avaloniaui.net as well. It's basically a cross-platform reimplementation of WPF. It's not quite as simple as C#+WinForms or Lazarus+LCL because you don't get drag-and-drop UI designer, and you need to write markup by hand (albeit with live preview). But unlike HTML, it's actually designed for desktop UI apps from the get go, so it's much easier to write for anything non-trivial. And you can still write "quick and dirty" GUI code by directly connecting event handlers to buttons and updating values etc in it, ignoring data bindings and other more advanced facilities.
by tomrod | 2025-05-11 23:03:52+00:00
The moment you pick a non-techie off the street and help them see the amount of data collection occurring, you have another person who proves the assumption. It's not a huge assumption.

No one likes ads, no one likes their data being collected. The sooner insurance and car companies understand that, the sooner they get out of the maelstrom of false revenue from ad- and spy-ware programs.
by Jtsummers | 2025-05-11 23:04:01+00:00
> Surely the orbit of this satellite will be well known and so false positives alarms can be ruled out?

It's not the physical presence of the satellite over the US that messes up (or could) ICBM detection, it's the operation of the satellite's radar system. That's why they have to turn off the radar when it's over the US and Europe.
by tomhow | 2025-05-11 23:04:16+00:00
The comment I linked to is from Paul Graham, the founder of this site, and the principle he expressed in that comment was that downvoting for disagreement was fine, because upvoting for agreement is also normal. The quote you cited was from a reply but we haven't adopted that; we've always upheld pg's principle.

> I am making fact-based arguments. I see no fact-based counter-arguments, mostly nonsense and/or abuse that break [2]

It's fine to state facts, and we want this to be a site where everyone can discuss difficult, controversial topics. But that can only happen if people are kind and respectful, and make their own efforts to observe the guidelines. The main problem with your style of commenting is that several of your comments contain personal swipes. If other commenters break the guidelines, you should flag them or email us to point them out, but you're only in a position to do that if you show, through your actions, that you're making an effort to respect the guidelines yourself.

The guidelines that are most relevant in this case are:

Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.

Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

Please don't fulminate. Please don't sneer, including at the rest of the community.

https://news.ycombinator.com/newsguidelines.html
by pseudo0 | 2025-05-11 23:05:11+00:00
The credit card company still takes a 2-3% cut, which absolutely gets passed on to consumers. You get part of it back in the form of credit card rewards and services (eg. fraud protection, charge backs) but it's still a tax on everything.

BNPL is worse, they take 5% and all you get is a small loan for a few weeks. Their whole business model relies on it being "free" for middle-class people who will pay back their loans, because the fee is hidden in the purchase price. This is an area where government regulation is actually required, all transaction fees should be disclosed and charged as a surcharge on the base purchase price, whether it's a credit card or BNPL, to provide a fair and competitive market for consumers and merchants.