MurphyA/hacker-news huggingface dataset:
by throwanem | 2025-05-26 15:32:14+00:00
Yeah, they've been pushing hard since 2020 to get picked as the winner of a government-guaranteed monopoly on legal ramps between USD and crypto. It looks like they might pull it off, too. I haven't stopped being glad I didn't decide to work for Armstrong in '21 but I have to give him he's got the nous to recognize what a good thing Visa's always had going. I wonder how many skeletons they buried in the 60s...
by dahart | 2025-05-26 15:32:19+00:00
Your story is an argument that it’s possible (as is the parent comment btw), but it doesn’t demonstrate that it’s likely. We have pretty hard evidence that it’s more difficult to get good jobs without the degree. Not impossible, just more difficult. The number of people without formal degrees occupying good jobs is a minority. Companies often screen for degrees, before you can ever get an interview; credentialism is real. And to parent’s point, some of the best jobs require advanced degrees. Do a little searching for the average pay with and without a degree (the answer shocked me!). Do a little searching for the number of patents filed by people with varying levels of formal education. Poke around for how many senior engineers, managers, and executives get there without formal higher education. There are some, it is possible! But not that likely.

While it might be true that warning someone away from college might be a disservice, it’s also a disservice to not talk about reality and avoid looking at who’s getting the jobs, right? If 90% of the 200k/yr jobs are people with degrees, then what is the practical choice for someone young who wants that and is weighing their options? Instead of telling someone not to go the self-taught route, would you feel more comfortable with telling them you’re roughly ten times more likely to get to $200k/yr mark with a degree than without, but make your own choice?

Personally I suspect the people like you who do best without a degree are often the ones who are going to ignore our advice anyway, and it doesn’t matter if you warn them. People who are super motivated and figure out what to learn and know what they want in life when they’re 18 years old are going to go get it. Most kids aren’t like that, they don’t know what they want yet, and aren’t motivated enough to learn everything they’d get from a 4 years degree on their own. For that majority, it’d be a disservice to recommend anything other than education, no?
by eqvinox | 2025-05-26 15:32:37+00:00
This entire article seems poorly written, or rather not have thought through the real security requirements. It seems to be intended as an ad piece, but honestly for me it does the exact opposite, tells me I shouldn't be using this company for my APIs.

> However, webhooks aren’t so different from any other API request. They’re just an HTTP request from one server to another. So why not use an API key just like any other API request to check who sent the request?

Because it's still you requesting the event to happen, not the origin of the webhook. It makes no sense for the webhook to use normal API key mechanisms that are designed to control access to an API; the API is accessing you. (To be clear, of course it wouldn't use the same API key as inbound, that's a ridiculous suggestion. I'm saying the mechanics of API keys don't match this use.)

The real issue is that the webhook receiver should authenticate itself to the sender of the webhook, and the only widespread way that's currently happening is HTTPS certificate checks. As the article kinda points out for the other direction, that's kind of an auxiliary function and it's a bit questionable to rely on that. One way to do this properly would be to add another layer of encryption, which only the intended webhook receiver is given the keys for, e.g. the entire payload could be put into an encrypted PCKS#7 container. This would aid against attackers that get a hold of the webhook target in some external manner, e.g. hijacking DNS (which is enough to issue new valid certificates these days, with ACME).

> Signing requests does give extra security points, but why do we collectively place higher security requirements on webhook requests than API requests?

And now the article gets really confused, because it's misidentifying the problem. The point of signing a request that already makes use of an API key would be integrity protection, except that is indeed a function HTTPS can reasonably be relied on for in this scenario. Would a more "complex" key reduce the risk of lieaking it in log files or somesuch? Sure, but that's an aspect of API keys frequently being "loggable" strings. X509 keys as multi-line PEM text might show up less frequently in leaks due to their formatting, but that's not a statement about where and how to use them cryptographically.
by kayodelycaon | 2025-05-26 15:33:00+00:00
All of those rely on condensation, which is caused by temperature getting low enough the air can’t hold water. The mechanism for the new material is completely different. It doesn’t appear to require the air to be saturated.

We already have substances that remove water from air. In those the water becomes absorbed. This seems to work on a similar principle. The real difference is the water doesn’t stay absorbed.
by alerighi | 2025-05-26 15:33:32+00:00
True, but, the advantage of using 32 bit pointers to save a couple of RAM is not that important, since applications typically don't use that much pointers, thus if you half the size of them you will save probably a couple of kb of RAM.

Maintaining the support for a different architecture only for that doesn't make a lot of sense, probably the reason it was never supported. RAM is cheap these days so...
by globnomulous | 2025-05-26 15:34:07+00:00
This sounds like hell on earth to me. Automating the "boring" stuff does not sound healthy.

Two stories:

When my father was in Japan in the 1970s, he was strutting around like a rooster in an obnoxious, white suit and crossed paths with a Zen monk quietly sweeping a path. The monk looked up at him and my father felt, he said, about six inches tall. The dignity and focus of the monk put my father to shame.

I was once in Princeton, NJ, waiting to cross a crosswalk at a streetlight. Someone extremely famous (I think) and certainly incredibly wealthy was in a car at an intersection, waiting for the car in front of her to turn so she could proceed. She was beside herself -- honking, screaming, practically crying. Being asked to wait for someone else was more than she could stand.

Obviously these experiences relied on a lot of assumptions and interpretation on my and my father's part. I'm sure there were other ways of reading the monk and driver.

Regardless, when I imagine the world you're describing, what I see is a combination of my father in the white suit and the driver: spoiled, incompetent, impatient, egocentric people incapable of enduring the indignity of having to make any decisions for themselves, wait for anything, or stoop to the humiliating depths of thinking about the boring stuff. In a weird, backwards way, what you're describing also sounds like subservience to me.

Smartphones are bad for people. This sounds much, much, much worse. I hope I die before/if the technology "matures."
by slightwinder | 2025-05-26 15:34:11+00:00
Even if someone seriously works 100 times faster with AI, it doesn't mean they can easily dominate any established market. A product is more than just code, and a company is more than their headcount. There is domain knowledge about the product and market. There is the personal ability of the workers and the synergy coming with, also the strength of established structures grown over years and decades. Just the habit and trust of users is a big fortress every new product has to conquer. That's not something some random dev or team of devs can easily reach just by being 100 times faster.

And realistically, there is also the question of where this claim is coming from. Someone being 100 times faster with AI is probably not starting from a place of high competence. Of the 100x, 90x are probably just for filling the gap to peak devs. So at the end they would be probably as productive as a highly competent dev of some domain, just that they can more easily access any domain without years of experience in that domain. And if we are honest, we somewhat have that already without AI, just by people copying and cookie cutting any sh*t
by rthomas6 | 2025-05-26 15:34:35+00:00
I really wish someone would make a stablecoin not pegged to some currency but to a basket of goods. A CPI-coin, if you will. How would that work? Maybe similar to the programmatic way DAI works, by collateralizing other assets in a way that make DAI some desired price.

How cool would it be to have a decentralized coin that has zero percent inflation.
by hollosi | 2025-05-26 15:35:31+00:00
From the actual paper ( https://www.science.org/doi/10.1126/sciadv.adu8349 ):

"All measurements were performed at 20° ± 0.2°C maintained by an air circulation system unless otherwise noted. The temperature of the films was controlled using a heating/cooling unit (THMS350V, Linkam Scientific Instruments, Salfords, UK) when necessary."

So the latent heat is conducted away by the cooling apparatus, it's just not explicitly stated, to sound more sensational.
by elric | 2025-05-26 15:35:56+00:00
Almost everyone can tolerate CPAP. The problem is that the medical establishment sucks at helping people adjust and is awful at properly titrating them. Followup is abysmal. If they did a better job of that, compliance numbers would skyrocket.

Skepticism is very much warranted. CPAP is the gold standard because nothing has come along that comes even close. I'm much more optimistic about an upcoming generation of micro-implants that stimulate various throat muscles than I am about pharmaceutical treatments using stimulants.

Edit: to be clear, I am not dismissive of any OSA patient's concerns. But most of their issues are a consequence of shitty titration and poor support from their sleep docs.
by epistasis | 2025-05-26 15:36:11+00:00
First, that's not an example of negative effects being banned and then developers getting around it.

Instead you are saying that some people wanted a particular land use on a parcel, bet then a different land use showed up. Lots of VeryNiceIdea have nobody around to execute the idea and actually make it happen. When an abandoned lumberyard next to lots of homes in my area had a proposal for condos, neighbors were livid at the homes, and refused the zoning change. Instead people asked for a music center for senior citizens, but nobody stepped up to raise the money to build something like that.
by porridgeraisin | 2025-05-26 15:36:17+00:00
Yeah, people keep trying to find a purely economic reason for why folks are having less kids. I think I'm satisfied with the very simple reason that raising kids is hard work. Most people feel like 1 kid already gets their hands full. That's really it IMO. Whenever it was that joint families split up into disparate nuclear families, obviously the load of raising say 5 kids that was being shared among 20 people, suddenly fell on just 2 people.

In the places with high fertility rate, you will almost surely observe joint families. I'm from India where we have such demographic variety that you can see adjacent areas with completely different fertility rates. In one, you will see old-style large houses with courtyards and 15+ people in them living as a joint family. Invariably these people have more kids. But in the next town with more nuclear families and modernish apartments, you will be lucky to see 2 kids per family. [1]

This is what births the secondary economic incentives which are mentioned a lot in popular discourse. For example, if you're already living in a house with 15 people your financial realities will require a similar number of people in the next generation to continue the same lifestyle.

[1] Wealth is not a confounding factor here. The specific two areas I have in mind are both more or less equally wealthy, one has folks running a coconut business primarily and the other is a small town with the usual assortment of office jobs.
by r00sty | 2025-05-26 15:36:35+00:00
I imagine his opinions might have changed by now. If we're still residing in 2023, I would be inclined to agree with him. Today, in 2025 however, LLMs are just another tool being used to "reduce labor costs" and extract more profit from the humans left who have money. There will be no scientific developments if things continue in this manner.
by stackedinserter | 2025-05-26 15:37:04+00:00
I never watched sports but my kids want to, so tried to buy them subscription to some sport broadcaster.

Bundesliga, F1, NHL and FIFA world cup, that's all I (they) needed.

It turned to total mess. Service A shows F1 but not NHL. Service B shows NHL but not all NHL, only games where my city team plays. Some show LaLiga but not Bundesliga. All cost $30/mo but still show ads. Periodically they show ads instead of the event. If they can't, they split screen show the event in a little rectangle that's 25% of screen space. Dazn, TSN, ESPN are all total scam. You can see a lot of bull riding though.

We cancelled all this nonsense and just moved to pirate sites. Screw this bs.
by jsheard | 2025-05-26 15:37:26+00:00
CloudFlare is free/cheap, has (AFAIK) no KYC policy, and is generally unresponsive to abuse reports unless the courts get involved, so it's the default choice for nearly all piracy sites, phishing sites, DDoS providers, etc. The few which do get kicked out of CF generally have to resort to dubious Russian CDNs because none of the other mainstream CDNs will have them.
OWASP PTK – browser extension all-in-one for pentesters and bug hunters
by DenisPodgurskii | 2025-05-26 15:37:28+00:00
OWASP PTK is a lightweight browser extension that brings DAST, IAST, SAST, and SCA together - no more juggling tools or context switching.

It's also a part of the Athena OS - https://athenaos.org/en/resources/browser-pentesting/#_top

Why you’ll find it useful:

Instant Scans: Launch DAST/IAST/SAST/SCA from one “Scans” panel.

Deep Interception: Built-in proxy, traffic capture (HAR), and R-Builder for custom requests.

Token & Cookie Tools: JWT Inspector (alg=none, brute-force, JWK injection) and full cookie manager.

Quick Helpers: Decoder, Swagger Editor, and XSS/SQLi cheat sheets.
by rayiner | 2025-05-26 15:37:47+00:00
If you want to work a 25 hour week you can go to where my wife’s family is from and pick up however many shifts you want at the local convenience store. You can live a lifestyle comparable to my wife’s grandparents working far less of the day.

The problem is in knowledge work fields where manpower isn’t scalable (read the Mythical Man Month), and the industries are competitive and winner-take-all. A programmer who works 30 hours a week is far less valuable than than one that works 50 hours a week.
by simonw | 2025-05-26 15:38:28+00:00
This is fun: it turns out you can paste this GraphQL query:

{ viewer { issueComments { totalCount } issues { totalCount } } }

Into https://docs.github.com/en/graphql/overview/explorer in order to see the total number of issues and comments you've posted over your time on GitHub.

I got 9,413 issues and 39,087 comments, for a grand total of 48,500 combined!
by sigmoid10 | 2025-05-26 15:38:28+00:00
>Cambridge analytica had absolutely no impact on the election whatsoever

Say the guys who were implicated and facing public humiliation or even punishment. Meta has already paid billions of dollars in fines and settlements because of this, so all these people not covering their asses would actually be surprising. But if you look at the raw evidence uncovered during the senate hearings, there is no doubt that it had a major effect on the election and beyond.
by macNchz | 2025-05-26 15:38:34+00:00
Where I've found LLM coding assistants really effective in my client consulting work is around iteration: I can deliver so many more versions of an application UI in a given amount of time that it really changes the entire process of how we dig into a project. Where I might previously have wanted to start with low fidelity wireframes and go through approvals to avoid proto-duction and pain down the line when the client didn't like something, now we can rough out the whole thing in a functional proof of concept and then make sweeping changes live on a call as we test different interaction paradigms.
by layer8 | 2025-05-26 15:38:48+00:00
I put a colored sticker on each box, where the color corresponds to the room where the box should go. The destination rooms are marked with the same stickers during the move, so helpers have an easy time telling where to put each box.

In addition, I’m numbering the boxes, and when packing them keep a list mapping the numbers to what’s in each box. So when later searching for something, I know it should be in box number x. This can be helpful even years later when you don’t unpack all boxes.
by OptionOfT | 2025-05-26 15:39:23+00:00
Sorry for the late reply.

GitHub Actions' macOS runners do not come with Docker installed, because of licensing issues: https://github.com/actions/runner-images/issues/17

Then there is the issue that the macOS runners are virtual instances, and pass-through virtualization has not been enabled:

https://github.com/douglascamata/setup-docker-macos-action#:...
by hermitcrab | 2025-05-26 15:39:25+00:00
Good for Germany, but it is all too rare to see bad corporate behaviour punished like this. Steal £10k from a company, and you will probably go to prison for a long time. Start a company and steal billions from your customers and/or the tax payer, and you will probably get away with it. I believe Iceland was the only country to jail bankers after the 2008 banking disaster. We are still waiting for the British government to bring any individuals to account for wide scale corruption and profiteering during COVID.
by abracadaniel | 2025-05-26 15:39:38+00:00
PET is a decent insulator, and they seem to be trying to ensure it wasn’t the temperature difference causing condensation, but the nano structure itself. I’m assuming they were controlling temperature and humidity, so it would mean the material must get hotter, but that seems like it can also be passively solved with a radiator. What they are describing would be a pretty big deal and seems plausible.
by slashdev | 2025-05-26 15:39:48+00:00
> Global oil demand is projected to increase in 2025 compared to 2024, but the growth rate is expected to slow down. The International Energy Agency (IEA) anticipates a decrease in global oil demand growth for the remainder of 2025, but expects demand to reach 104 million barrels per day (bpd) in 2025, a notable increase from 2024.

Perhaps you meant the pace of growth is slowing this year. But that has a lot to do with the macro economic situation, with central banks around the world cutting rates as growth slows (and some countries enter recession.) The global economy is slowing, when it rebounds again, so will growth in oil demand.

We're still far from peak demand.
by brainwipe | 2025-05-26 15:40:12+00:00
Two things! - Videogame, you live inside a mechanical ladybird called a Clomper, which you control by making pipes to power machines with steam. https://store.steampowered.com/app/2349380/Clomper/

- Building plastic self organising maps (Lang 2002) using Python CUDA build to parallelise the more expensive bits. Also fancy building the directed graph half in Unity 3D.

- Also doing some data engineering pre-training and AIIA at work but no deets, sadly.
by epistasis | 2025-05-26 15:40:58+00:00
> Data centers aren't and there are already too many of them.

And here you're just repeating the same arguments that NIMBYs use to block housing. And saying "you're using the same arguments as X, X is bad, therefore your argument is bad" is nat actually a sound argument in itself, I point it out because it's ironic when you accuse me of repeating Cloud provider's talking points!

Where the NIMBY argument actually falls down in that the assessment of "too many." How is that determined? Why is your answer right and the person who wants a datacenter wrong?

And don't you see that your determination of "too much" is exactly what converts productive capital allocation into rentier capital allocation? What happens if you are right and the cloud provider is wrong? The cloud providers spends a bunch of money building a datacenter that doesn't get used, and loses lots of money, and pays property taxes to the local government. If you are wrong, then existing data centers are able to jack up their prices a ton, and will, and make a lot more money not because they are providing a better service, but because there's an artificial shortage. It rewards speculation, and incentivizes speculation on land uses.
by hansvm | 2025-05-26 15:42:14+00:00
"zero-percent inflation" relative to some particular basket of goods. If efficiencies and demand change to make that basket relatively less expensive than other things you care about (like land), you'll expect positive inflation in real terms. Negative inflation is possible the other way (e.g., if other baskets of goods wind up being more amenable to automation and the demand curve isn't too inelastic).
by elric | 2025-05-26 15:42:27+00:00
It's a common issue. If you breathe through your mouth at night, it's often because you can't get enough air because your airway is compromised. Once you add PAP, that problem goes away, and many people can revert to nasal breathing.

There is an adjustment period, turbinates can swell up from the extra airflow, and it might be uncomfortable for a while. And some people have such awful septum deviations that they're breathing through a straw. But most people are fine.
by snapplebobapple | 2025-05-26 15:42:36+00:00
Health insurance is complicated and I think it's not right to say it's a problem that the employer is paying (or that the government is paying). I think it's more accurate to say the cost for service is way too high in general, and we are missing out on network effects and efficiency gains by not providing healthcare to some and/or no not providing enough healthcare soon enough to some (and by providing too much healthcare to some too soon).

Under that problem statement, it makes a lot of sense for a large subset of healthcare (i.e. the routine or semi routine stuff like emergency services, family doctor routine visits, many common diseases, especially childhood diseases, routine dental, drugs for these diseases, etc) to be single payer (i.e the government) as long as the government is very proactive and flexible in crushing those costs through its multiple available levers.

I see more of a role for private insurance for the rarer stuff where the cost/benefit to society of society paying isn't as obvious and the optional stuff (ie treatments that have a generic option and a newer drug that is more effective, cover the generic, let people buy insurance if they think they want access to the expensive latest and greatest). There is pretty clearly a role for private and public providers of healthcare in both the government single payer and the private insurance role as well.
by lolinder | 2025-05-26 15:43:29+00:00
I totally understand that inversion but I think it's a bad analogy.

Industrial automation works by taking a rigorously specified designs developed by engineers and combining it with rigorous quality control processes to ensure the inputs and outputs remains within tolerances. You first have to have a rigorous spec, then you can design a process for manufacturing a lot of widgets while checking 1 out of every 100 of them for their tolerances.

You can only get away with not measuring a given angle on widget #13525 because you're producing many copies of exactly the same thing and you measured that angle on widget #13500 and widget #13400 and so on and the variance in your sampled widgets is within the tolerances specified by the engineer who designed the widget.

There's no equivalent to the design stage or to the QC stage in the vibe-coding process advocated for by the person quoted above.