MurphyA/hacker-news huggingface dataset:
by sReinwald | 2025-05-08 06:56:29+00:00
That's not quite correct. The "sovereignty" pitch here is largely illusory when dealing with a US-based company like OpenAI.

The US CLOUD Act (Clarifying Lawful Overseas Use of Data Act) explicitly gives US authorities the power to compel US-based companies to provide data stored on servers, regardless of where those servers are physically located. This effectively undermines any meaningful data sovereignty claims.

Consider the actual arrangement being proposed:

- OpenAI (US company) maintains control of the infrastructure - OpenAI controls the models and their development - OpenAI maintains the security protocols and access rights - The data merely sits physically within national borders

This isn't sovereignty - it's a limited hosting arrangement that remains fully under US legal jurisdiction. US intelligence agencies can still access this data through legal mechanisms that bypass the host country's laws entirely.
by gary17the | 2025-05-08 06:57:15+00:00
IMHO, you should definitely reflect on why you feel that "leaving is not an option". Is it because of the money? Pay off your loans, downgrade the location/size of your apartment/house and suddenly making only half the money will no longer be a problem. Is it because of all the "opportunities"? (Are you absolutely sure that does not mean "opportunities to have no personal life and to potentially lose your mental health"?) Realize that many brilliant techs consider "a dream job" to be "a job they love" as opposed to "a job for a famous company". Finally, perhaps also realize that being that tired, you might not be able to ever maintain a romantic relationship, not to mention starting a family. It might or might not matter to you down the line - you have to figure it out.
by iforgotpassword | 2025-05-08 06:57:35+00:00
It was touted as making cloud computing secure. How anyone could actually believe this is beyond me. The cloud provider has physical access to the host machine. For all I know it could all be smokes and mirrors, emulated on a C64, while all my data is getting exfiltrated. The only people who ever bought into this is cryptobro crackheads and government contractors doing it for compliance bullshit. Up to 0% of cloud customers went as far as to even try to verify the thing does what it says it does.

Case in point: TeleMessage. Supposedly E2E-Encrypted message archival turns out to be a plain text database on some servers. Surprised Pikachu face.
by DrBenCarson | 2025-05-08 06:58:11+00:00
Look I’m a first generation American with a sister 3 years younger. We grew up in poverty in the 2008 aftermath. Like food stamps and stretching leftovers by mixing them with pasta broke

I navigated the system alone for myself then again to help her after I had learned from all my college friends. We both went to “prestigious private schools” with single digit acceptance rates and have similarly “prestigious” jobs

Here’s the truth: yes, like everything else in this world it’s a LOT easier with money. But it’s not impossible if you’re willing to understand the expectations and put in the work to meet them.
by blizdiddy | 2025-05-08 06:58:34+00:00
We don’t have a national ID system, just a single, poorly suited Social Security number that’s been overloaded to serve as our entire identity in the eyes of the state. These numbers are effectively public knowledge, thanks to private credit agencies created to fill the gap when banks failed at risk assessment. We could’ve replaced this broken setup decades ago, but there’s a vested political interest in ensuring federal programs fail, to justify further privatization and the dismantling of social services.

A proper national ID and strong privacy laws would be obvious policy wins, but that would require competent lawmakers.

In my lifetime, the most consequential federal legislation has been the DMCA (1998), the Patriot Act (2001), and Obamacare (2010), which effectively marked the end of meaningful legislative power and the handoff of governance to the executive branch.
by potamic | 2025-05-08 06:59:41+00:00
I've always felt safer in motorcycles compared to scooters. Something about the handling in scooters doesn't feel reassuring. I can't quite put my finger on it, but it's more apparent when you ride on patchy, broken roads. It's much easier riding over bumps, zigzagging to avoid potholes on a motorcycle. Of course, I'm comparing motorcycles and scooters of similar weight. Riding a litre class machine is a different dimension altogether.
by logicallee | 2025-05-08 06:59:55+00:00
This happened to me, with the difference that nobody was abducted.

Defense contractors associated with the U.S. military said they would sever fingers to make me "care more" here is a screenshot:

https://imgur.com/a/eYP7Xsj

or

https://ibb.co/DD6XTppy

This was sent over a Department of Defense channel.
by kubb | 2025-05-08 07:01:05+00:00
How do you reconcile the belief that personal responsibility is the solution with game theoretical analysis? It seems contradictory to me.

In order to change the game theoretic outcomes, we‘d need a systemic change that affects the rewards, not a personal attitude change that will become a losing strategy in the game.

Also, do you remember how tobacco companies were invited to the table to discuss whether smoking is bad for you? Were those the days of personal responsibility or was it even before that?
by suraci | 2025-05-08 07:02:01+00:00
For those who aren’t familiar with how it works: if you’re a CCP member, you belong organizationally to a Party branch, and you’ll have a liaison(a handler!) whose job is to keep contact with you.

If your company or school has more than three Party members, you’re required (perhaps secretly) to set up a Party branch. So, in theory, the vast majority of US universities that admit students from Chinese institutions have an internal branch of the CCP

hope everyone can sleep soundly :)
by int_19h | 2025-05-08 07:02:09+00:00
In C# interface members can be implemented explicitly, which means that: 1) they are not visible on the object itself, only on interface-typed references to it, and 2) implementations of methods from multiple interfaces don't need to match since they live in separate namespaces.

It's true that you can't access private members (not just fields) on `this` from the mixin interface. But explicit implementations of members mean that only someone explicitly downcasting the object will get access to those members, so accidental access is not an issue.
by raxxorraxor | 2025-05-08 07:02:51+00:00
I would say investing in it makes you indeed at least partially responsible. Not investing isn't telling people what they shouldn't do.

Of course people using fossil fuel take part of the blame as well, but responsibility for investments more than normal consumption by quite a margin.

While others use the ressource, you have a profit incentive with its use and you also now have incentives to increase usage further.
by Gigamegs | 2025-05-08 07:03:02+00:00
Pure PHP Aho-Corasick algorithm finite state machine) and pattern match with a wildcard and a ternary trie.

Unittest: $tree = new Ahocorasick\Ahocorasick(); $tree->add("AC"); $tree->add("GTG"); $tree->add("AACT"); echo $tree->match("ACCGAGTGCGTGGACAAACTACGATTGTGGAATGAACT","AC*GT"); $this->expectOutputString("ACCGAGT,ACCGAGTGCGT,ACCGAGTGCGTGGACAAACTACGATTGT,ACAAACTACGATTGT,ACTACGATTGT,ACGATTGT");

web+git: https://tetramatrix.github.io/phpahocorasick/
by dhaavi | 2025-05-08 07:04:24+00:00
Yes, Mycoria is primarily about connections between network participants, eg. access your server at home without public IP, or a hybrid/fully remote team with a couple servers here and there.

In an open mesh network, you still want privacy from the other network participants.

Mycoria might have exit nodes similar to Tailscale in the future, but it won't be a fan-out multi-exit system like SPN, for example.
Show HN: I Made a Generative Art Engine with a Genetic Algorithm
by lmanhes | 2025-05-08 07:05:28+00:00
You can either generate an artwork from a single prompt (classic method) or create a diverse population of artworks. In the population method, initial individuals are generated from descriptions or existing artworks. The algorithm selects the most novel artworks based on embedding distances, crosses their descriptions using an LLM, and applies random mutations (style, technique, color, content).

Daily, Genmuse identifies popular niches from user interactions, evolving these niches into new artwork generations.

Essentially, it’s novelty search guided by human feedback.

Main model: Flux 1.1 Pro Ultra Embeddings: Voyager Agent includes a small library for post-processing.

Feedback are very welcome!
by dhaavi | 2025-05-08 07:08:10+00:00
Wireguard is absolutely great for its use case!

Mycoria aims to interconnect participants. Eg. you and your friend all have their home server. Everyone wants to connect to their own server, but also to the server of their friends. All of this is super easy with Mycoria. Let a new friend install Mycoria, add them to your friends in the config and give them a URL for accessing. Voila!

Also, Mycoria is an automatic mesh network, I think Wireguard requires a fixed set of peers you configure.
by jaimemedicalbnb | 2025-05-08 07:09:00+00:00
Railtown AI | ONSITE (Vancouver, BC) | Full-Time | .NET + Python ML Engineers

Railtown AI (https://railtown.ai) is building AI-powered tools that help developers identify, understand, and resolve production issues faster. We focus on root cause analysis that helps engineering teams ship with confidence.

We’re hiring:

- Senior Software Engineers — experience with building and shipping production-grade .NET web applications and APIs. - ML Engineers — strong background in Python and experience building and deploying ML applications in real-world environments.

This is an on-site remote hybrid role in Vancouver, BC.

Our stack: Azure, .NET, SQL Server, React, TypeScript, Python.

If you're excited about building tools for developers and working in a focused, collaborative environment — we'd love to meet you!

Apply at https://railtown.ai/careers
by lelanthran | 2025-05-08 07:09:03+00:00
> But there's a reason the crowd is moving against inheritance.

I doubt it; the majority of code is in enterprise projects, and they do Java and C# in the idiomatic way, with inheritance.

I'm working on an Android project right now, and inheritance is everywhere!

So, sure, if you ignore all mobile development, and ignore almost all enterprise software, and almost all internal line-of-business software, and restrict yourself to what various "influencers" say, then sure THAT crowd is moving away from inheritance.
Show HN: Clues by Sam – a daily logic puzzle using natural language in a grid
by tikotus | 2025-05-08 07:09:21+00:00
I created a daily logic/deduction puzzle inspired by Murdle, but with grid gameplay combining many different puzzle types.

It resembles Murdle in the sense that the puzzle is set using natural language instead of game specific rules. This way anyone can start playing right away without first internalizing a set of rules. But unlike Murdle, this game works on a grid, leveraging known solving techniques from puzzles like nonogram, starbattle and fill-a-pix. The game also has a kind of fog-of-war keeping the solve tree tight and approachable. To prevent mistakes from spoiling the solve path, behind the scenes there's a constraint solver that prevents you from doing "guesses". The only way to lift the fog-of-war, to reveal new clues, is to find the next 100% logical choice. Just like in real life, you can't convict someone on a 50/50 hunch!

The majority of the work for creating this game was making the level generator. Levels are generated and curated (not all levels end up fun, and there are still some quirks). The generator ensures the puzzle has a narrow solve tree, poses challenging deductions, and is always solvable using some "technique" instead of through a long chain of backtracking.

There's still some ambiguity that comes from using terse natural language. To counter this there are some clarifying details listed under the game. The two main sources of confusion are: 1) Neighbors include diagonal neighbors. 2) To the left/right/below/above means in the same row/column.

If you have challenges with the red/green colors, there's a button for toggling the theme.

Side note: The name "by Sam" is just something I started using for my games recently. Just a short gender neutral name I happened to like. My name isn't actually Sam.

I also posted about this in "What are you working on? (April 2025)" sparking some encouraging discussion: https://news.ycombinator.com/item?id=43821457

The daily puzzle is available here: https://cluesbysam.com
by tornadofart | 2025-05-08 07:09:57+00:00
So 2 use-cases within grasp:

Firms could replace their VPNs for remote work with mycoria and have better security and control.

I could also set this up for my home network and access my (for example) NAS securely.

For the use-case "I want to access a publicly available page anonymously", we still need a VPN / TOR.
by renegat0x0 | 2025-05-08 07:10:25+00:00
Please correct me if I am wrong.

What grinds my gears about email monopoly is that you cannot create or integrate easily email client now.

To access mail it is not enough to provide user & password & whatever. Things can provide access without compromising security.

To access gmail? User needs to add access from some bullshit console settings, and stuff. I asked chatgpt how thunderbird is not required to do this, and it said that it has keys pregenerated, and big corpos can operate like that. I have not verified that any longer. Sounded credible. So annoying
by thequux | 2025-05-08 07:10:59+00:00
The US does identity verification by asking for a driver's license (which has no chip or biometric data) and possibly a series of questions about your past drawn from public data. All of these credentials are laughably easy to spoof. Compare this to Europe, where every resident has an eID containing a keypair and X.509 certificate signed by the government containing their personal details. It is trivial to check the validity of these cards and nearly impossible to forge without subverting either the national PKI or printing apparatus
by figassis | 2025-05-08 07:11:22+00:00
Not sure if people who opted out of security expected to be doused in gasoline. There is something to say about whether this state of no security is generally desirable by society. Everywhere else this happened was eventually regulated.

So thinking crypto will be an outlier is wishful thinking since it will never be allowed to be more powerful than governments. At most, new world orders will be created, but they will settle and be like the old ones, with some new more crypto native rules. They will always know who you ar and who you’re transacting with and where either of you are.

Current crypto fanatics are assuming they will all be part of this club. This road will be filled with poor old men with fewer fingers and lots of regret.

I want crypto to succeed, but I don’t expect it will be unregulated. You’ll pay the same taxes, you’ll go to jail if you try to avoid them or if you send crypto to entities banned by governments. Eventually the things that make crypto so valuable will be hammered out so it’s more like fiat.

Maybe the value will crash or wealthy people of today will find a way to freeze it into reserve currencies (like the newly minted federal crypto reserve), but after some point it will stop being a source of wealth just by holding it at the right time. You will need to exchange it with value you create.

The math of crypto wealth by HODLing is unsustainable.
by dhaavi | 2025-05-08 07:12:03+00:00
I'll have to read up on that.

But to be honest, the web3 / blockchain vibes are an instant turn off.

(Let's see how the votes turn out for this comment. ;) )

Note: If you _need_ a blockchain in your VPN, I would say https://nym.com/ is the most trustworthy of them out there at the moment.
by reify | 2025-05-08 07:12:25+00:00
"I am tired of going through the same life cycles: anxiety, feeling "not good enough," not feeling safe in relationships etc"

A common theme in psychotherapy when the client does not want to do the work involved.

You must ask yourself about your commitment to yourself.

You have spent a lifetime developing these feelings, behaviours, beliefs and thoughts.

There is no quick fix! You have to do the work.

You may also consider and research why is is a requirement of all psychotherapists to be in personal therapy for the duration of their professional life.

I spent 25 years in personal therapy.

Take into account and ask why CBT practitioners are not required to be in personal therapy at any time during in their professional life.

CBT is educating the client how to utilise the A,B,C's of CBT to eventually be his own therapist. This is not psychotherapy.
by nullc | 2025-05-08 07:12:25+00:00
Not so much examples, though those can help... but you have to imagine a document of a sort that would be in the training set whose completion would be the answer you seek.

Like, "Solve this equation for me: " more likely gets completed with "Do your own homework buddy!" or just a list of more similar questions without answers. While, "careful analysis revealed the solution the equation X turned out to have a solution of", might be more likely to get what you want.

Also a lot more sensitivity to tone and context, write a prompt that sounds like it was written on some teenager fan subreddit, you'll get an answer of the sort that sounds like it belongs there.
by sublimefire | 2025-05-08 07:13:07+00:00
This is some tinfoilhat stuff. An extreme suggestion that a cloud provider would physically open up machines and exfiltrate the keys so that they could then read the memory of a customer workload, for what reason? Remember that hardware is virtualised and makes it difficult to pin point which server is running what. Not using such tech makes it easier for the cloud provider to inspect memory so that is not a better approach.
by Meekro | 2025-05-08 07:13:11+00:00
If someone's maintaining an old/obscure email client, I would expect them to be importing a TLS library under the "don't roll your own crypto" principle. Assuming it's been updated at some point in the last ~15 years, it's probably capable of auto-negotiating to something better than 3DES.

And if it hasn't been updated for that long, it probably doesn't support TLS 1.2 and is getting rejected from just about everything for that reason.
by masfoobar | 2025-05-08 07:13:26+00:00
To me, inheritence makes sense if you view your codebase as actual "Objects"

The reality is that a codebase is not that simple. Many things you create are not representable as realworld "objects" - to me, this is where is gets confusing to follow especially when the code gets bigger.

I remember those OOP books (I cannot comment on modern OOP books) where the first few chaptors would use Shapes as an example. Where A Circle, Square, Triangle, etc.. would inherit the Shape object. Sure, in simple examples like this.. it makes sense.

I remember covering inheritence and how to tell if its better or composition... which is the "Object IS X" or "Object HAS X" - so you base you're heirarchy around that mindset.

- "A Chair is Furniture" (Chair inherits Furniture) - "A Chair has Legs" (Chair has array of Leg)

I will always remember my first job - creating shop floor diagrams where you get to select a Shelf or Rack and see the visual representation of goods, etc. My early codebase was OOP... a Product, Merchandise, Shelf, Bay, Pegboard, etc. Each object inherits something in one way or another. Keeping on top of it eventually became a pain. I think there was, overall, about 5 levels of inheritence.

I reviewed my codebase one day and decided to screw it -- I would experiment other approaches. I ended up created simple classes with no inheritence. Each class was isolated from one another with the exception of a special Id which represented "something" like a Pin, or Shelf, etc. Now my code was flexible... "A Shelf has this and this"

In later years I realised what I did was following along the lines of what is commonly known as ECS or Entity-Component-System. Seems popular in games (and I viewed that project is a game-like fashion so it makes sense)
by graycat | 2025-05-08 07:13:33+00:00
The story includes some skipping class yet getting a Fields Medal.

At least here in the US:

In academics, a grade of A is better than the rest yet still some independent or from outside school results can mean more than grades and even make poor grades irrelevant.

Some examples:

E.g., for getting into a selective college, SAT Math scores (from outside of school) the highest in my high school class made everything else irrelevant. E.g., overlooked my F in Typing!

Actually, the Typing class was very worthwhile and learned touch typing, but the class was nearly all girls, GORGEOUS, who buzzed away with perfect accuracy at maybe 30 characters a second!

E.g., in graduate school, found a problem and in two weeks got a solution accepted right away by Mathematical Programming. Suddenly had an impenetrable shield and all grades and everything else were irrelevant.

E.g., before grad school thought of a problem and had a first solution; in grad school wrote a first draft; wrote and ran the related software; and wrote the document, all independently. Stood for orals and graduated.

Again, course grades are not everything, and good independent work can make everything else irrelevant.
by rdtsc | 2025-05-08 07:15:11+00:00
Oh sure, if you run your own server or sell your cloud as a service, you can enable it. But if you want to run on someone else’s setup, you have to play by their rules.

> Disabling io_uring because “guy on the internet said so” or “$faang_company says so” is beyond dumb.

I think it’s more like “$faang_company already disabled it in their hosts, so I am out of luck for my containers running on their cloud”
by reubenmorais | 2025-05-08 07:16:26+00:00
This is a weakness of the Python typing system and not necessarily of individual typecheckers. Pyright has a policy of only implementing what's standardized, and the Python type system is simply inadequate to annotate most real world Python code out there. It's been years now and something as basic as properly typing kwargs is still not supported.

Ty could solve this if they rebel and decide to ignore the Python typing standards, which I honestly would appreciate, but if they take the sensible approach and follow the standards, it won't change anything.
by kubb | 2025-05-08 07:16:32+00:00
> The pattern for basically every small nation is "choose of which superpower you wish to be a client."

This is straight up Russian mentality.

> extravagant welfare states of the past decades, subsidized largely by American defense spending

This sounds to me like a US partisan narrative rather than anything else. It’s a nice story, because it strokes the American ego, but I’ve yet seen it backed up by serious analysis. Most likely it’s just a story.
by fweimer | 2025-05-08 07:17:09+00:00
This can be mitigated by limiting the amount of data that is transmitted with a single 3DES session key. I doubt that Gmail accepts that many gigabytes of data in a single SMTP session anyway, so I doubt it's impacted by this flaw.

(AES-GCM requires rekeying, too, also at intervals that exceeds typical SMTP session lengths, and is not considered terminally broken because if this.)