MurphyA/hacker-news huggingface dataset:
by sublinear | 2025-05-06 06:30:11+00:00
You could, but in the real world not every frontend dev has control over the CSP on the server allowing nonces to even be an option.

Even when they do they might be subject to a security audit forbidding it. There's two reasons nonces can suck: first is that nonces may be passed around for 3rd party script usage and that blows a hole in your security policy, and the other is that many implementations to generate nonces are not implemented correctly, so the security team might have less trust in devs.

It really depends on the organization and project. Once you start getting near the security fence you may find it's more trouble than it's worth.

I would try to find less complicated solutions for small details like this. Obvious question might be why your CSS can't be a separate file that is small enough to not cause a performance issue.
by gopalv | 2025-05-06 06:30:37+00:00
An OLTP solution fixes a lot of the headaches about the traditional extract-load-transform steps.

Mostly a lot of OLAP starts when the data loads in Kafka logs or a disk of some sort.

Then you schedule a task or keep a task polling this constantly, which is always prone to small failures & delays or big failures when schema changes up.

The "data pipeline" team exists because the data doesn't move by itself from where it is first stored to where it is ready for deep analysis.

If you can directly push 1-row updates transactionally to a system and feed off the backend to write a more OLAP friendly structure, then you can hookup things like a car rental service's operational logs into a system which can compute more complex things like forecasting of availability or apply discounts to give a customer an upgrade for cheap.

Neon looks a lot better than YugaByte in tech (which also talks postgres protocols) and a lot nicer in protocol compatibility than something like FoundationDB.

Alloy from Google feels somewhat similar, Spanner has a postgres interface too.

The postgres API is a great abstraction common point, even if the actual details of the implementations vary a lot.
by otabdeveloper4 | 2025-05-06 06:31:02+00:00
> are just really useful input/output devices that respond to a stimuli

LLMs are huge pretrained models. The economic benefit here is that you don't have to train your own text classification model anymore. (The LLM was likely already trained on whatever training set you could think of.)

That's a big time and effort saver, but no different from "AI" that we had decades prior. It's just more accessible to the normal person now.
by FirmwareBurner | 2025-05-06 06:31:33+00:00
>I have some professional experience in the field [...] That won't work on optic fibers.

I'm not a professional in this field like you, but even I know that undersea fiber optic cables have actively powered repeaters/amplifiers spread across their length, so it's logical to assume those amplifiers, with their 16kW power source, generate quite some EMF at repeater points that could be picked up via side channel analysis by sophisticated and well funded state actors like US submarines equipped with dedicated surveillance equipment, as we can infer from the Snowden NSA leaks.
by kijin | 2025-05-06 06:31:51+00:00
Yeah, it's a neat trick but kinda pointless. In a world with CDNs and HTTP/2, all this does is waste bandwidth in order to look slightly better in artificial benchmarks.

It might improve time to first paint by 10-20ms, but this is a webpage, not a first-person shooter. Besides, subsequent page loads will be slower.
by panick21_ | 2025-05-06 06:31:54+00:00
I'm not sure what you mean by 'in the end it was more successful'

All these polices operate together its not like the first did one, then the other. Depending on the situation the adjusted policy many times. And they also had many polices that you didn't mention, like an active air war and air defense against Germany (and the allies at time). I don't know what you are basing the claim on that one was more successful then the others.

Also, why are you using a fictional movie as source for anything? I do not think people were actually kicked out, only denied entry. At least I have not read about that, anybody can provide a source for that?

Here some information about the denial of asylum:

"According to the Bergier Commission final report, during the Second World War, Switzerland granted asylum to 25,000 Jews while denying around 20,000 refugees (of which a significant portion were estimated to be Jewish) admission to the country in total.[42] However, Serge Klarsfeld, the French-Jewish historian, activist and Nazi Hunter stated in 2013 that the Swiss authorities rejected fewer WWII Jewish refugees than believed. Based on his own research, Klarsfeld claimed that the number of entry denials was closer to 3000."

> The report on arms revealed that from 1940 to 1944, 84 per cent of Swiss munitions’ exports went to Axis countries.

Of course more trade goes to Axis in this period, as Switzerland was surrounded by the Axis on literally all side.

And Switzerland was in desperate need for food and coal. It would have been literally insane not to sell things like munitions to Germany in that situation.
by ricksunny | 2025-05-06 06:32:10+00:00
I love the quote of one of the comments, the odd mix of wistful promise yet shuddering, which sent me down a context-sourcing rabbit hole:

Quote: This is very much a "the new world struggles to be born, now is the time of monsters" moment, but you are weathering it as well as anyone I've seen. (Commenter L.O.)
by sshine | 2025-05-06 06:32:20+00:00
> paying for someone to run the infra (eg getting a proton or fastmail address), and hoping they dont enshittify or fail

I don’t experience them doing that. They’re email companies going strong. Maybe they get sold in some decades, and you move on. But I’ve had FastMail for one decade now, and it’s remained the same throughout. Including the minor UI bugs in their email client. But I’d much rather live with those than suddenly they’re also an AI company.
by root_axis | 2025-05-06 06:32:42+00:00
> but one could make a pretty easy argument that the LLMs we have today can't drive a car only because they aren't physically able to control the car.

Of course they can. We already have computer controlled car systems, the reason LLMs aren't used to drive them is because AI systems that specialize in text are a poor choice for driving - specialized driving models will always outperform them for a variety of technical reasons.
by IshKebab | 2025-05-06 06:35:14+00:00
> Being a generalist with depth of understanding means you are the type of person who needs to understand things properly before doing them . .You are lot of time learning things which are not required for get the task completed.

Ha, I feel seen. Though also I wouldn't frame this quite so negatively. I've seen a lot of tasks "completed" by people who just got the job done without fully understanding it and they frequently get it done badly.
by mgurlitz | 2025-05-06 06:35:45+00:00
They swapped out MIT [0] for BSD-3 just five months ago, which doesn’t seem to have been announced at all. Nixpkgs still has the 0.6.5 release as MIT, and 0.6.6 is in the AUR as MIT as well.

I wanted to be on the dev’s side here. CLA’s can be reasonable and I’ve happily let others convert my GPL code to them before. But reading the Open WebUI developer’s blog [1] makes it evident this isn’t really about the community — as he says, “It’s just me” and what he wants that matters for Open WebUI.

[0]: https://github.com/open-webui/open-webui/pull/8468/files [1]: https://jryng.com/thoughts/my-purpose
by dang | 2025-05-06 06:35:47+00:00
Related. Others?

Sneakers – The Team's Demands [video] - https://news.ycombinator.com/item?id=41493927 - Sept 2024 (2 comments)

Sneakers Film Promotional Floppy - https://news.ycombinator.com/item?id=38585213 - Dec 2023 (54 comments)

No-more-secrets: recreate the decryption effect seen in the 1992 movie Sneakers - https://news.ycombinator.com/item?id=36799776 - July 2023 (257 comments)

Happy 30th anniversary to ‘Sneakers,’ a cult classic that was ahead of its time - https://news.ycombinator.com/item?id=32788136 - Sept 2022 (47 comments)

‎Cracking the Code: Sneakers at 30 - https://news.ycombinator.com/item?id=31378418 - May 2022 (76 comments)

Memories of the “Sneakers” Shoot (2012) - https://news.ycombinator.com/item?id=29840802 - Jan 2022 (198 comments)

Sneakers: Robert Redford, River Phoenix nerd out in 1992’s prescient caper - https://news.ycombinator.com/item?id=29620095 - Dec 2021 (7 comments)

Sneakers (1992), the Film - https://news.ycombinator.com/item?id=26111977 - Feb 2021 (2 comments)

Tool Recreating the “Decrypting Text” Effect Seen in the Movie “Sneakers” - https://news.ycombinator.com/item?id=11643270 - May 2016 (54 comments)

Sneakers - movie about pen testing, crypto/nsa, espionage, and deception (1992) - https://news.ycombinator.com/item?id=6196379 - Aug 2013 (5 comments)

What it was like shooting the movie Sneakers - https://news.ycombinator.com/item?id=4498985 - Sept 2012 (46 comments)

Sneakers (Film, 1992) - https://news.ycombinator.com/item?id=1499298 - July 2010 (1 comment)

Joybubbles: the blind phreaker whom Whistler was based off of in Sneakers - https://news.ycombinator.com/item?id=1443241 - June 2010 (1 comment)
by genewitch | 2025-05-06 06:36:06+00:00
One of my go-to for making a new instrument sound is to tamper with the ADSR envelopes, the attack (as you say, the first part, like a pluck of a string or mallet hitting a bell), decay, how long the note "fades" naturally, sustain which is the total length of a note, and release, which is how long a note plays after you "release" it.

Turning the attack up removes the pluck, setting the other three short makes anything percussive, and you can get weirdness if you mess with decay and release with echo / delay effects.

I should sleep, this was way harder to explain than it should have been.

Example, harp has a sharp attack, and real long decay, sustain, and release. To make that a pizzicato violin, you snap the decay and sustain to nothing, and leave a little release. Now your harp sounds like a violin.
by mtnGoat | 2025-05-06 06:36:14+00:00
I could have, and did on occasion, but that would have required my dad to go buy lunch food and keep it on hand. But he didn’t need to do that… the school needed to feed us!

I did learn around 7th grade that I could steal his cigarettes and sell them. I guess he did pay for more lunches than I realized, now that I wrote this.
by pastage | 2025-05-06 06:36:38+00:00
It is not worth the bother. I really wish I had a source for this because it stills feels important, and I value links more than most.

Links would be nice but it does not add enough value to be worth it, it actually costs too much and is easy to mess up. The ones who care will search for it, and the great majority can not be bothered. Source: internal statistic from a webbserver, with fact heavy articles.

There were some types of articles that needed source material. But these kinds not so much. I say this because I was involved in a project that worked on QA and maintaining links. We wasted money on that project.
by undebuggable | 2025-05-06 06:36:55+00:00
Shortcuts are disappointingly undocumented and incapable. Once had few shortcuts to push arriving text messages to multiple devices. It worked surprisingly well by creating CalDAV reminder. CalDAV reminders can be synchronised everywhere from Thunderbird on Linux, through DAVx on Android, to Outlook on Windows. Then suddently with an iOS update the Shortcuts lost permission to create reminders. Old shortucts worked but no way to create new ones. What can I do with Shortcuts right now, enable bluetooth on connecting to Wi-Fi? Why bother?
by gopalv | 2025-05-06 06:37:45+00:00
> Just roll it into property taxes and call it a day.

It's what my district does and the benefits are obvious - there's no "gimme your lunch money" kids who have it hard at home & trying to supplement their diets.

The school even hands out a free breakfast, which serves as monitored childcare for the parents who need to drop their kids off before 8 AM, to get to work. The highschool also gives out double servings for kids who come off the morning sports practice sessions.

The cynic in me says the biggest beneficiary will be the US Army, who can reliably look for a stream of well fed kids from families which aren't doing well enough to pay for college.
by andsoitis | 2025-05-06 06:40:44+00:00
> More than 380 grant projects have been cut so far, including work to combat internet censorship in China and Iran and a project consulting with Indigenous communities to understand environmental changes in Alaska’s Arctic region.

I do not know that these are two strong examples in favor of an argument that important research is being cut.

If anyone thinks they are, I would be curious to hear whether the EU would fund these two projects.
by baq | 2025-05-06 06:41:23+00:00
He’s right but if everyone around you tells you you’re wrong, you’re also in a very bad spot.

If your kids are hurting because you stand on the moral high ground… you get your cigs stolen from, by your children no less. All for the psychological comfort of being right.

You could say he was right, just early: this is also known as very wrong in e.g. financial markets.
by timewizard | 2025-05-06 06:42:26+00:00
> Are you serious.

Yes. I'm calling into question the idea that modern treatment of children is responsible for the world we live in. Clearly it is not given the relative scarcity of it in our history. I'm not saying we shouldn't give children a free lunch just that the OPs reasoning was rather lofty and detached from history.

> They said "without kids", not without this particular program.

They're replying to someone with the obvious implication that this program is in some way critical to children "learning and becoming productive members of society."

> Someone is carrying them no matter what.

Now are you serious? Do parents consider it their career to raise their own children? Does this career have the effect of increasing the number of children they care for in exchange for greater profits?

Which is why I invoked incentives. The tragedy here being that schools consider their primary obligation to the child and not to the family. So when parents are in a situation where they cannot care for their children successfully, for whatever reason, we completely ignore the core problem and instead patch over it. Worse it can sometimes create negative stigma for the child and work to further destabilize their living situation.
by Nevermark | 2025-05-06 06:43:34+00:00
I have spent some percentage of my life attempting to rewrite all software from first principles up.

Software is so spectacularly broken. Applications that don’t let me adjust the position of a little button for my work habits. Why is that impossible!?! A global software and commerce system, where you can buy candy or transfer $ billions, both with cute warnings like “Please, oh, please, sir! Please don’t hit the back button!”

I can sum up the results of my quest quite simply: “The rewrites continue…”

Is this chasing windmills? The case for that seems solid on the surface, but…

It is true that every rewrite of a specific set of features, or a platform for enabling better support for efficiently and correctly commingling an open class of features, inevitably runs into trouble. Some early design choice is now evidently crippling. Some aspect can now be seen to have two incompatible implementations colliding and setting off an unnecessary complexity explosion. Etc.

But on the other hand, virtually every major rewrite points to a genuinely much improved sequel. Whose dikes keeping out unnecessary complexity hold up longer with less finger holes to plug, for a better return. Before its collapse.

Since there must be a simplest way to do things, at least in any scoped area, we have Lyapunov conditions:

Continual improvement with a guaranteed destination. A casual proof there is a solution.

It’s a dangerous phantom to pursue!

——

It would be interesting to compile a list from the heady 90’s, when corporations created boondoggles like Pink and Cyberdog, and had higher aspirations for things like “Object Linking and Embedding”.

You just don’t see as many romantic technological catastrophes like those anymore. I miss them!
by JumpCrisscross | 2025-05-06 06:45:05+00:00
> At the time this movie was being made I don't think NK was any more sanctioned than any other Eastern Bloc country

The U.S. “imposed sanctions in the 1950s and tightened them further after international bombings against South Korea by North Korean agents during the 1980s” [1]. And by the 80s, savvy Eastern Bloc countries could read the writing on the wall.

[1] https://en.m.wikipedia.org/wiki/International_sanctions_agai...
by forty | 2025-05-06 06:46:02+00:00
I do that too, I run everything in rootless podman managed by systemd units it's quite nice. With systemd network activation I could even save the cost of user space networking, though for my single user use case, it's not really needed and for now I could not bother.

I also have Quadlet on my backlog, I'm waiting the release of next stable version of Debian (which I think should be released sometimes this year) as the current version of Debian has a podman slightly too old which doesn't include Quadlet
by mr_mitm | 2025-05-06 06:46:20+00:00
I don't understand why client certificates aren't way more common as a second factor. They have existed forever, are available on all platforms, they are phishing resistant (unlike OTP, and don't get me started on SMS), browsers or OSs could generate them during setup, and you could enroll them seamlessly with one click. Instead we had to invent new things like passkeys which do essentially the same thing.

You can use client certificates even with IMAP and SMTP.
by kleiba | 2025-05-06 06:48:18+00:00
StackOverflow has this feature that when you write a new question, it tries to fuzzy-match that up against existing questions. I wonder if an approach similar to yours, using search, could be employed on HN as well to reduce the number of dupes?!

This would be helpful especially for those cases where the same story gets covered on multiple places on the internet and so URL matching doesn't help.
by kshitijzeoauto | 2025-05-06 06:48:37+00:00
It claims to plug into your CI pipeline, detect what changed, and generate relevant test cases using LLMs.

As someone who’s struggled with stale or missing tests—especially in fast-moving codebases—I find this idea quite compelling. But I’m also curious about how it handles:

Contextual understanding across large codebases (e.g., multiple modules touched in a PR) Avoiding flaky or non-deterministic tests Matching team-specific coding styles or conventions
by maephisto666 | 2025-05-06 06:49:15+00:00
Amazing piece of text. Honestly, I saw myself in everything you wrote. The struggle, the attempt to write a single line of code to make it perfect, durable, etc. it never works at the first try...but man the joy of having the control over fixing things... And I also relate with the personal chaos that maybe we tend to fix by fixing our software... I see a lot of this "unfinished" behaviour with other things in my life as well... Cleaning the shed, finishing videogames.... Sometimes even the feeling of having the challenge is enough...I don't even try, because I know it will take time to make it right
by maxberdnikau | 2025-05-06 06:49:21+00:00
Hi! I am Max. I am a Full-stack Engineer with 13+ years of experience and extensive knowledge in several areas: UI Design, Software Development, Analytics. Involved in creation of several startups and have previously created my own products and tools. I have a strong mathematical background. Particularly interested in fintech, crypto, LLMs, AI, complex systems (business & technical). I'm keen on working in a startup but open to discussing any opportunities.

Location: Warsaw, Poland

Remote: Yes

Willing to relocate: Yes

Technologies: Ruby, Rails, Hotwire, JavaScript, TypeScript, React, Vue, Svelte, Nest, Next, Nuxt, Tailwind, Postgres, Docker, CI/CD (Gitlab & Github), Grafana, etc.

Résumé/CV: https://www.linkedin.com/in/maxberdnikau/

Email: maxberdnikau@gmail.com
by sschueller | 2025-05-06 06:49:25+00:00
I recently found out there in a command bunker (K85) smack in the middle of Stadelhofen, Zürich. It was only declassified in 2009. The primary access is via the tunnel. The 30m shaft was originally used while constructing the tunnel but was never filled in and turned into the bunker. It went into operation in 1989 and closed in 2009 but is still used as an emergency tunnel exist in case of a fire etc.

[1] https://www.tiktok.com/@mikealpharomeotangoindia/video/74960... (in Swiss German)
by maxberdnikau | 2025-05-06 06:50:04+00:00
Hi! I am Max. I am a seasoned Designer & Developer with 13+ years of expertise across Product Design, UX/UI Design, Software Development, Analytics, and Management. I craft well-thought-out user-centered visually striking digital products, and implement them in code. I am involved in creation of several startups and have previously created my own products and tools. I have a strong mathematical background. Completely self-sufficient, and also lead a team that includes all essential roles: Web Software Engineer, Graphic Designer, UX/UI designer, 3D Designer, etc.

If I can be of assistance, please feel free to contact me.

Location: Warsaw, Poland

Remote: Yes

Willing to relocate: Yes

Des: User Research, User Flow, UX/UI, Web, Holistic, Design System, Wireframes, Email Design, Dashboards, Mobile App Design, 3D, Illustrations, Animations, Figma, FinTech, E-commerce.

Dev: Ruby, Rails, Hotwire, JavaScript, TypeScript, React, Vue, Svelte, Nest, Next, Nuxt, Tailwind, Postgres, Docker, CI/CD (Gitlab & Github), Grafana, etc.

Email: maxberdnikau@gmail.com
by d1sxeyes | 2025-05-06 06:51:49+00:00
As an idea, I like this. I didn’t create an account but do you have to pay for this?

If not, why do you need to create an account?

One thing I would say is that the whole concept of 7 days is great, but some people would benefit from future/past review.

Maybe hiding “advanced” past/future views somewhere would be beneficial?
by h4kunamata | 2025-05-06 06:51:54+00:00
I followed this blog to get the firewall dynamic firewall in place: https://labzilla.io/blog/force-dns-pihole

Like you said, you cannot just block 443, the dynamic firewall uses a public list, which contains all the public DNS known to man ( the last bit was just to sound a little dramatic haha )

So OPNSense will block anything within that list in both 443 and 853.

So my Samsung QLED TV can no longer use Google:443 for DNS resolution. OPNSense blocks it and redirect it to PiHole, a NAT is also required to avoid devices getting mad.

I didn't pay a kidney for that smartTV back in 2019 to make it dumb, when it is on, PiHole logs goes brrrrrrrr

It is also one of the reason why my whole network was going down, it was making too much request exhausting PiHole 150 concurrent DNS requests, there is a flag to increase that and no more issues.

Google:443: DNS request only, not actual 443 request gets blocked

Cloudflare:443: DNS request only, no actual 443 request gets blocked

etc etc Read that blog I shared to understand it.

If I run a dig google.com @8.8.8.8, PiHole terminal shows the request

If I run 8.8.8.8:443 on the browser, OPNSense firewall log shows access denied, the same msg when my TV turns on or my Home Assistant goes on.

DoT on 853 is simple to block on its own, no much secret there.