MurphyA/hacker-news huggingface dataset:
by hedora | 2025-05-16 14:49:58+00:00
Actually, the Framework 12 looks pretty solid:

https://frame.work/laptop12

It's built on a previous generation intel chip, and linux details are "coming soon" though.

I wonder if they'll produce an AMD variant later. I've had extremely bad luck with my last few Intel laptops. I'd expect some Ryzen SOC to work well in that form factor. For instnace, I have a Ryzen 8845HS plugged into my TV, and it's hard to get it above ~ 11 watts unless I'm running recent games on it (idles at 3-5w; TDP 65W).
by DocTomoe | 2025-05-16 14:50:07+00:00
You could say that about any large browser vendor, and I seem to remember there having been a 'free' CA (OpenCA? FreeCA?) in the late 2000s, early 2010s which lost Firefox support over something small as well.

The truth is - the whole infrastructure depends on trust. And of one vendor of a major browser decides to no longer trust a CA, for whatever reason, the CA becomes essentially worthless overnight.

Yes, people theoretically can install their own Root certificates. No, 99,99% of internet users won't.
by neilv | 2025-05-16 14:50:23+00:00
Assuming this telling is pretty accurate, I'm wondering what the thinking was on both ends.

On the freeloader end: Did they think they were within the rules? How far up was the approval to keep doing it this way? Did someone try to pay, but get blocked? Did someone tell their boss they did this all in-house, and now doesn't want to admit they outsourced and exposed the company? Did it go to the top, and a lawyer told them to put the company name and a real person each time, and that they were covered on good faith if they only did that?

On the provider end: Seeing this locked-in enterprise user for 10 years, how was a salesperson not all over that that slam-dunk sale? How did they let this go on for 10 years without tweaking their policy to stop the freeloader and any others who might emulate them? What did the business people say about this over the years when it came up? Was business so good it wasn't worth the time to convert the freeloader to a paying customer?
by kube-system | 2025-05-16 14:50:50+00:00
There are a decent number of requirements placed on manufacturers, but the use of vehicles in the US are primarily regulated at the state level. Most states do not perform safety inspections vehicles, and even when they do, they are minimal in nature (e.g. do the lights work, are there holes in the exhaust, are the tires and brakes worn out?)

https://en.wikipedia.org/wiki/Vehicle_inspection_in_the_Unit...

Police can pull someone over for faulty equipment, but that would generally have to be an egregiously obvious defect.

From a federal level, the primary thing that is illegal to modify is emissions equipment (however, if a vehicle is registered in a state without inspections, even that is essentially unenforced)

In much of the US, you can legally drive just about anything with brakes, seatbelts, lights, wipers, turn signals.
by CuriouslyC | 2025-05-16 14:51:06+00:00
Not public on github, but here's the cloc for an easy 5k one day (10k is sweats).

github.com/AlDanial/cloc v 2.04 T=0.05 s (666.3 files/s, 187924.3 lines/s) ------------------------------------------------------------------------------- Language files blank comment code ------------------------------------------------------------------------------- Python 24 1505 1968 5001 Markdown 4 37 0 121 Jinja Template 3 17 2 92 ------------------------------------------------------------------------------- SUM: 31 1559 1970 5214 -------------------------------------------------------------------------------

Note this project also has 199 test cases.

Initial commit for cred:

commit caff2ce26225542cd4ada8e15246c25176a4dc41 Author: redacted <redacted> Date: Thu May 15 11:32:45 2025 +0800

docs: Add README

And when I say easy, I was playing the bass while working on this project for ~3 hours.
by exabrial | 2025-05-16 14:51:35+00:00
Java performance isn't the fastest, that's ok, a close 3rd place behind C/CPP ain't bad. And you're still ahead of Go, and 10x or more ahead of Python and Ruby.

Java syntax isn't perfect, but it is consistent, and predictable. And hey, if you're using an Idea or Eclipse (and not notepad, atom, etc), it's just pressing control-space all day and you're fine.

Java memory management seems weird from a Unix Philosophy POV, till you understand whats happening. Again, not perfect, but a good tradeoff.

What do you get for all of these tradeoffs? Speed, memory safety. But with that you still still have dynamic invocation capabilities (making things like interception possible) and hotswap/live redefinition (things that C/CPP cannot do).

Perfect? No, but very practical for the real world use case.
by hackthemack | 2025-05-16 14:51:35+00:00
I worked in IT from the 90s to today. My perspective is it grew and grew because Sun supported it, then IBM supported it, RedHat supported it. It had the glimmer that it was the "Enterprise Way" of doing "Real IT" programming for "Real Businesses". I am not saying any of that is the "Truth", just the perception that was held by the majority of people who could choose what to write enterprise code in.
by barnas2 | 2025-05-16 14:51:41+00:00
It's really not hard to just search "openpilot" and click the first link. There's also a link at the top of the comma.ai website that links to the same page.

https://comma.ai/openpilot

openpilot is an open source advanced driver assistance system that works on 300+ car models of Toyota, Hyundai, Honda, and many other brands.

Automated Lane Centering Adaptive Cruise Control Lane Change Assist Driver Monitoring (no wheel nags) Can drive for hours without intervention Open source and developed on GitHub
by NoMoreNicksLeft | 2025-05-16 14:51:43+00:00
>If its useful for that, then presumably it would also be useful to giving traceless donations to criminals,

One would think that, but these sorts of tricks don't always scale down to the level of paying someone a buck to get a copy of this week's Nature. When you pay a Senator $6million in bitcoin to get something through committee, there's also the unspoken truth that you can pay someone else $150,000 to go suicide the pesky journalist poking his nose into that business... not so with microtransactions. Though bitcoin still has fractional amounts small enough (looks like 1 satoshi is about a tenth of a cent?), it seems as if the fee for sending that is nearly a dollar itself. The only people who would be rewarded would be ASIC miners siphoning off stolen electric power from some third-world hydroelectric plant.

Theoretical bitcoin from 2009 is not the same thing as real world bitcoin in 2025, and hasn't been for a long while.
by wirybeige | 2025-05-16 14:51:50+00:00
They refuse to work with the community. There's also the open question of how they are going to monetize, given that they are a VC-backed company.

Why shouldn't I go with llama.cpp, lmstudio, or ramalama (containers/RH); I will at least know what I am getting with each one.

Ramalama actually contributes quite a bit back to llama.cpp/whipser.cpp (more projects probably), while delivering a solution that works better for me.

https://github.com/ollama/ollama/pull/9650 https://github.com/ollama/ollama/pull/5059
by sublinear | 2025-05-16 14:52:01+00:00
Where I work, we still log hours towards jira tasks and those end up in projects on timesheets somewhere in servicenow.

I'm not saying that hours aren't relevant at all. I'm saying that tracking hours towards tasks is a totally separate concern that should be decoupled from the workday and individual time management in general. This is especially true if your employees are on salary and often on-call as well.
by mpalfrey | 2025-05-16 14:52:22+00:00
Decent talent pool.

Decent tooling. Been around for long enough that a lot of the quirks of it are well known and documented. Basically it's a blue collar programming language without too many gotchas. Modern(ish) day Cobol.

(I'm predominantly a Java dev still, even after diversions over the years to Javascript, Python and C#).
by mystified5016 | 2025-05-16 14:52:25+00:00
Because the competition is not about being the best business or providing the best value or doing what's good for customers or society.

The only competition under our current economic order is who can make the most money by any means necessary. Even and especially illegal or immoral means.

The market will never save consumers from unethical businesses because the market favors unethical businesses by design.
by insaneirish | 2025-05-16 14:52:45+00:00
Maybe it's me, but I think in the worse case scenario (criminal liability), a jury will be more sympathetic to a person (acting in good faith) that had an issue because of the car manufacturer's provided system than they would to a person who installed a DIY/open source self-driving system.

And I say this as someone who considered trying out the project.
by ljm | 2025-05-16 14:54:09+00:00
People are way too quick to defend LLMs here, because it's exactly on point.

In an era where an LLM can hallucinate (present you a defect) with 100% conviction, and vibe coders can ship code of completely unknown quality with 100% conviction, the bar by definition has to have been set lower.

Someone with experience will still bring something more than just LLM-written code to the table, and that bar will stay where it is. The people who don't have experience won't even feel the shortcomings of AI because they won't know what it's getting wrong.
by chanux | 2025-05-16 14:54:10+00:00
I'm posting this here assuming I'd likely come across someone who knows this stuff.

Of all the UIs I have used, Github UI especially give me a sense of solid UI. As in there's nothing finicky about it and gives a sense of dependability (Since way before big-corp acquisition). I'm pretty sure I do not have the vocabulary to explain further.

So if anyone gets what I mean please chime in and help me understand what leads to this experience. Any related writeups/links very much appreciated.
Show HN: Visual flow-based programming for Erlang, inspired by Node-RED
by Towaway69 | 2025-05-16 14:54:13+00:00
Hi There,

Erlang-RED has been my project for the last couple of months and I would love to get some feedback from the HN community.

The idea is to take advantage of Erlangs message passing and low overhead processes to have true concurrency in Node-RED flows. Plus also to bring low-code visual flow-based programming to Erlang.
by vidarh | 2025-05-16 14:54:19+00:00
Note that the vast majority of authors also don't write something once and is paid forever sufficiently to life of it. The average full-time author in the UK would've made more at McDonalds, and usually only earn that much because they continue to churn out works.

Like with software, this is in large part because everyone can write, and so there is a glut of content, and while a lot of it is poorly written tripe, there's a glut of quality content in almost every niche that is good enough that outstrips the demand, and so only the tiniest proportion of authors earns well. Like with software, a lot of people also do it because they want to, rather than for the money, which further drives down the prices.

I've published two novels. They've sold substantially better than average but nowhere near bestseller level. And yet, despite selling substantially better than average, they're the lowest paid work I've done in more than two decades. I'm a fast writer - the second novel took me 3 weeks. It's still never going to pay for itself. That's okay.

If I wanted to earn a living from writing, I'd look to write articles or columns for magazines and newspapers, or doing copywriting, paid by the word, rather than writing novels.
by WorldPeas | 2025-05-16 14:54:32+00:00
The problem here is conflict of interest, Google is very interested in maintaining the GMail monopoly, that is likely the #1 reason people have google accounts. Correct me if I'm wrong but no other vendors save for edge(MS) and safari(Apple) own a mail service, a browser should be an impartial connection to an open ecosystem, and especially in Apple or MSIE's case we can see how this can be severely abused.
by bunderbunder | 2025-05-16 14:54:44+00:00
What you're telling me here is that you aren't aware of what the randomization is for in randomized controlled trials.

"Our treatment units are stupidly heterogeneous" is exactly the problem it solves. A century's worth of developing increasingly sophisticated statistical techniques for making do without random assignment has thus far failed to accomplish anything than provisional mitigations that are notoriously easy to use incorrectly in practice.
by bhouston | 2025-05-16 14:55:16+00:00
It details what it did:

> "Our relationship with the IMOD is structured as a standard commercial relationship. Like all our customers, the IMOD’s use of our technology is bound by Microsoft’s terms of service and conditions of use, including our Acceptable Use Policy and our AI Code of Conduct. "

> "In addition to the commercial relationship with the IMOD, Microsoft provided limited emergency support to the Israeli government in the weeks following October 7, 2023, to help rescue hostages. We provided this help with significant oversight and on a limited basis, including approval of some requests and denial of others. We believe the company followed its principles on a considered and careful basis, to help save the lives of hostages while also honoring the privacy and other rights of civilians in Gaza."

And then it says that it has ensured that its standard terms of service (which Microsoft links to) are being followed on its cloud services. This is actually really good.

There are exceptions but this is outside of Microsoft's services/cloud:

> "It is worth noting that militaries typically use their own proprietary software or applications from defense-related providers for the types of surveillance and operations that have been the subject of our employees’ questions. Microsoft has not created or provided such software or solutions to the IMOD."

> "It is important to acknowledge that Microsoft does not have visibility into how customers use our software on their own servers or other devices. This is typically the case for on premise software. Nor do we have visibility to the IMOD’s government cloud operations, which are supported through contracts with cloud providers other than Microsoft. By definition, our reviews do not cover these situations."

This is pretty informative.

Remember that Google Cloud created a special agreement that exempted Israel from their standard terms of service and also make it not possible to monitor what Israel was doing with Google Cloud. This does not seem to be the case with Microsoft Azure - which is good.

It is still a shame that Microsoft didn't cut Israel off yet as they did with Russia after Russia's invasion of Ukraine, but this is still progress.
by davidb_ | 2025-05-16 14:55:49+00:00
It is an advanced driving assistance system. It kind of drives your car for you (lane centering, basic obstacle avoidance, and adaptive cruise control all without you have to touch the wheel or the pedals) as long as you’re looking forward and paying attention to the road.

They have demonstrated full self driving capabilities with a car driving “itself” to Taco Bell. I have a comma3 and have never had much success with that feature. The car drove itself very slowly and seems to just weirdly creep through stop signs. I think the last time I tested that was over a year and a half ago, so it may have improved.

I use mine only on the highways. I noticed for long trips (6+ hours), I can drive longer distances in one go and not feel as fatigued when I reach my destination. As an example, a 10 hour trip to visit family (11-12 hours including stops) I can do by myself in one day with the comma device instead of stopping halfway, or splitting driving time with someone else. For shorter trips (3-6 hours), I arrive to my destination with more energy than when I drive without these features. I am also able to focus more on potential obstacles further down the road than without it.

I think my device has already paid for itself thanks to a couple year period where I had to do that 12 hour trip I mentioned a couple times per month. Plus it is a really nice dash cam.
by ZitchDog | 2025-05-16 14:56:03+00:00
I used to think prayer was really dumb too, but then I started practicing Metta meditation created by Buddhists, and I realized it's very similar to Christian prayer. The power of Metta and prayer is actually the change it makes in the one praying. Wishing well for others improves one's whole outlook and posture in the world.

The "official" way to pray outlined in the Lord's prayer isn't selfish (other than asking to have enough food to get through the day), and is asking for redemption / forgiveness rather than specific goodies. This is the right way to do it.
by marcusb | 2025-05-16 14:56:11+00:00
I had a couple of customers that deployed 7 endpoint security tools of the "hook into processes and inspect everything" variety. The exact mix was customer-specific, but if you're wondering what that looks like:

* Stand-alone "best of breed" endpoint DLP

* Stand-alone "best of breed" EDR

* Process whitelisting tool

* NAC posture assessment agent

* Three different AV agents

This is not even counting their VPN client(s) or the third party disk encryption agent they used.

I marveled at how they even got all of the agents to coexist, let alone have enough CPU left for people to do their jobs.
by alphazard | 2025-05-16 14:56:24+00:00
Economics always matter. All we have is our time, and if you want people to do things or act in a certain way or otherwise use their time in a way that benefits others or you, then you need to align their incentives.

For small/upstart projects, cryptocurrency is the best way to create economic incentives at the present moment. And you can blame regulations and poor financial infrastructure for that.
by immibis | 2025-05-16 14:56:25+00:00
Meta can absolutely block most of the scams. Evidence: They block so many things that aren't scams. And they have a report button for scams. Nobody can convince me they don't have enough human-power to review all the things.

They apparently choose not to, because it improves engagement, or something. Periodically, they have to release this PR pretending it's not their choice, to keep the heat off the question of why they choose the way they do.

Remember the time they enabled a genocide to happen, pretended they had no idea what was going on, but internal documents were leaked showing they knew what was going on, and intentionally chose to allow it?
by chipsa | 2025-05-16 14:57:07+00:00
Define drones. Define missiles. How big are these drones? Are they group 1? Group 3[0]? Can this ship with missiles use its group 4 drones to find and fix these patrol boats so it can toss missiles at the opposing patrol boats? Can the patrol boats do anything about the missiles incoming at M3? Can I use some group 4 drones to drop a bunch of group 1 drones in the vicinity of those patrol boats, where they have no response because they don’t have medium anti-air capability?

Vulnerable does not mean obsolete.

0: https://en.wikipedia.org/wiki/UAS_groups_of_the_United_State...
by mdaniel | 2025-05-16 14:57:10+00:00
Comma.ai uses uploaded video from anyone[1] with a Comma device to train their models, so it is most definitely not just SoCal. I thought they had a few datasets available because they run competitions on them but I didn't have much luck digging up supporting links

1: I believe it's possible to opt out, and believe it's also possible to change the upload endpoint to a storage bucket that you control, if you do want the segments just not for Comma to have them
by jawns | 2025-05-16 14:57:28+00:00
This approach to prayer uses what I call the "genie in a bottle" view of God.

It treats prayer as wishes, and the only metric that matters is how many of those wishes turn out to be granted by the genie.

Here is a reflection on that point by Pope Francis, who passed away this year.

"Prayer is not a magic wand: It is a dialogue with the Lord. Indeed, when we pray we can give in to the risk of not being the ones to serve God, but of expecting Him to serve us. This is, then, a prayer that is always demanding, that wants to direct events according to our own design, that admits no plans other than our own desires. Jesus, on the other hand, had great wisdom in teaching us the Lord’s Prayer. It is a prayer of questions only, as we know, but the first ones we utter are all on God’s side. They ask for the fulfillment not of our plan, but of His will for the world. Better to leave it to Him: 'Hallowed be thy name, thy kingdom come, thy will be done.'"

https://www.americamagazine.org/faith/2021/05/26/pope-franci...
by fpoling | 2025-05-16 14:57:33+00:00
The automated setup makes it less likely that the private key leaks. That alones makes it a reasonable justification to shorten the validity timeframe to force automation.

And then if a certificate authority knows that it’s certificate root can be disabled quickly, it puts more pressure on them to follow the rules.

Of cause it means that those who still run setups where the certificate cannot be updated quickly will suffer. But then one still has option to run http.
by fidotron | 2025-05-16 14:57:34+00:00
I think it's incredible with hindsight how Java countered many of the mid 90s C++ problems, especially by avoiding multiple inheritance.

It remains a shame that it didn't launch with generics though, and I still think operator overloading would have been good. Had it done so I think a lot more people would have stuck around for when the performance improved with HotSpot.
by xrhobo | 2025-05-16 14:57:41+00:00
Empiricism and rationalism both tempered by a heavy dose of skepticism.

On the other hand, maybe that is some kind of fallacy itself. I almost want to say that "scientific thinking" should be called something else. The main issue being the lack of experiment. Using the word "science" without experiment leads to all sorts of nonsense.

A word that means "scientific thinking is much as possible without experiment" would at least embedded a dose of skepticism in the process.

The Achilles heel of rationalism is the descent into modeling complete nonsense. I should give lesswrong another chance I suppose because that would sum up my experience so far, empirically.

EA to me seems like obvious self serving nonsense. Hiding something in the obvious to avoid detection.
by logifail | 2025-05-16 14:57:54+00:00
> if there are enough scientists who are keen to promote information sharing in their field without some minimal reward

I have two published papers from way back when, and thanks to the glorious broken incentives of academic publishing, I'm not even allowed to distribute my own work legally.

Most (even ex-)academics hate this crazy system with a passion, I know I do.

There's no need incentivise people to share academic papers, most people with access are only too ready to do so.
by bhouston | 2025-05-16 14:57:58+00:00
I do cover it in this response:

https://news.ycombinator.com/item?id=44006247

Please note that this is quite different than Google Cloud's usage by Israels: https://theintercept.com/2025/05/12/google-nimbus-israel-mil...

Also I understand that Israel's use of Azure is only at around $30M, unlike the massive deal with Google Cloud.

I guess my point is that we need Google to do an audit like this at the minimum now (given this precedent) and show this type of transparency as that is the system that is primarily used by Israel's IDF.
by icedchai | 2025-05-16 14:58:00+00:00
I've been experimenting with LLMs for coding / "agentic" editing using Zed over the past month or so. It's another tool in the toolbox, good for prototyping, also good for rote tasks (like upgrading a legacy code base, converting one call to another.) So far I've been most impressed by Claude Sonnet. The jury is still out... I haven't used it for any "work" tasks, only hobby projects, because I don't feel comfortable doing that yet.