MurphyA/hacker-news huggingface dataset:
by hamandcheese | 2025-05-11 11:08:36+00:00
Business idea. Maybe this already exists. A disclosure aggregator/middle man which:

- protects the privacy of folks submitting

- vets security vulns. Everything they disclose is exploitable.

- publishes disclosures publicly at a fixed cadence.

- allows companies to pay to subscribe to an "early feed" of disclosures which impact them. This money is used to reward those submitting disclosures, pay the bills, and take some profit.

A bug bounty marketplace, if you will. That is slightly hostile to corporations. Would that be legal, or extortion?
by Ylpertnodi | 2025-05-11 11:10:39+00:00
For the last few months I've been using notebooklm.google.com.

I can't see anything better from this site/ author...is there something I'm missing? Tried youtube to see it in action...nothing.

On a privacy note, item 4 of the privacy link states: You can request deletion of your data by contacting us at [email address].

So if, in the future, something happens...what then? Seems like a lot of info [for me] to give out, but no future, cast iron, guarantees. What if something happens to williamcranna2008@gmail.com?
A new way to automatically deprecate DockerHub repository: Bulk Archive
by vipulgupta2048_ | 2025-05-11 11:11:19+00:00
At the moment, there isn't a clear way to deprecate a DockerHub repository. Communicating that the container images are no longer being maintained is essential to the users for a number of reasons.

DockerHub offers the archive feature to mark repositories as read only but that can be automated when you have about 20k+ base images hosted on DockerHub.

To solve this, I built a Playwright script that automates the DockerHub UI and mass-archives DockerHub repositories.
by xrhobo | 2025-05-11 11:11:41+00:00
I use to play on Full Tilt with guys from work all the time.

Quite often I would be at a table with someone I know and chatting on the side.

We wanted to beat each other though for bragging rights so never colluded. Thinking about what could be done though if sharing card information is really bad. There are so many spots that knowing for certain 2 cards have been removed from the deck would be an absolutely massive advantage.

I can't even imagine the schemes real cheats have come up with.
by manarth | 2025-05-11 11:12:26+00:00
The energy source in TNT is the chemical potential within the explosive, which is greater than the potential outside, so the reaction is explosive.

In this example, the energy source is the pressure of the water column, which is equipotent with the depth, and applying equally to all external faces of the sphere. It'll be dramatic for the sphere, but fairly inconsequential for anything not immediately adjacent.
by ang_cire | 2025-05-11 11:12:48+00:00
> You're effectively shifting responsibility to consumers, who are probably not going to see a CVE for one of the dozens of softwares they use every day.

Which is again, a problem created by the companies themselves. The way this should work is that the researcher discloses to the company, and the company reaches out to and informs their customers immediately. Then they fix it.

But instead companies refuse to tell their customers when they're at risk, and make it out to be the researchers that are endangering people, when those researchers don't wait on an arbitrary, open-ended future date.

> Increasing the chance of a bad actor actually doing something with a vulnerability seems bad, actually.

Unless you know who knows what already, this is unprovable supposition (it could already be being exploited in the wild), and the arguments about whether POC code is good or bad is well tread, and covers this question.

You are just making the argument that obscurity is security, and it's not.
by geye1234 | 2025-05-11 11:14:01+00:00
You may be familiar with it, but you haven't understood it. 'Soul', for Aristotelian-Thomist philosophy, simply means the form of a living thing. A form of anything is what makes it what it is. The form of quartz is what makes this particular chunk of matter be quartz. The form of an oak tree is what makes that particular chunk of matter be an oak tree. The same is true for a dog, or a man. But in the latter three cases we call the form a 'soul'.

So yes, of course the form of a living thing is what makes it be different from a non-living thing! That in no way implies vitalism, if by that you mean a mysterious force that makes a dead but otherwise complete animal body come alive. The form (soul) of a body is what makes this particular body -- and body is understood in the classical sense of "solid lump of matter", not in the modern sense where it refers only to an animal -- be what it is. Just as it would be for any other material thing in reality.

And to head off the charge of obscurantism, and deal with your "god of the gaps" assertion, this not meant to be a complete, biological explanation. Nor is it meant to be some explanation for something that we can't otherwise understand by scientific means. It is only the beginning of an explanation of why a thing is what it is. It falls to the particular science, in this case biology, to flesh out (pun not intended) the details.

Hylemorphism (the form-matter distinction) is an absolutely basic Aristotelian doctrine, and without understanding it, complete confusion will result from trying to understand Aquinas' (or Aristotle's) discussion about the soul. Of course, you may think hylemorphism is nonsense, but that's a different argument.

You also refer to the soul as a "supernatural" principle in a previous post. Again, this way of talking and thinking is utterly foreign to Aquinas. He does not think digestion requires a supernatural explanation. This shows a very grave misunderstanding.
by FMecha | 2025-05-11 11:15:26+00:00
>Huawei even sells phones without Google Play in the west! Of course the first thing people try to do on them is get Google Play working, because the cheap hardware is all people care about.

For the devs' part, some of them did port their apps to Huawei's store (at least from my observation in Indonesia). Samsung also has their own app store on their own phones that's mostly for their built-in stuff.
by Ey7NFZ3P0nzAe | 2025-05-11 11:15:45+00:00
Yes taxing is the natural first choice.

But I'm not sure there's not something better. Notably because a very high tax de facto creates a black market, but even a moderate tax is actually often high enough to create a black market for poor people, which in turn are already the one paying the highest price (health wise) of environnemental diseases (junk food, tobacco, alcohol, not exercising, and cannabis).
by geye1234 | 2025-05-11 11:17:44+00:00
https://www.thomasaquinas.edu/about/our-patron/popes-st-thom...

Metaphysics is not some interchangeable bolt-on to theology, like the parts of a vacuum cleaner. If you change metaphysics, you change theology. Nominalism led directly to Protestantism, for example. Hume and Kant led directly to theological modernism (and heavily influenced personalism). Etc.
by bartread | 2025-05-11 11:18:02+00:00
I can only give a personal perspective but I don’t necessarily trust reviews from large, established mainstream outlets, as opposed to independent creators and reviewers.

My taste in games tend to lag by at least a few years, so I’d often far rather watch a let’s play or an independent review - especially one created some time after the fact - to get a true impression of the game than an overly curated take whose perspective is often overly skewed and coloured by then-current trends and tastes in gaming.

For anything >10 years I still find myself looking for content from CGR and, particularly, CGR Undertow, for example.

Plus it’s not unknown for mainstream reviewers to overhype new games.

The plethora of content, and view counts, suggest I may not be alone in this point of view.
by UncleMeat | 2025-05-11 11:19:54+00:00
Even if this was true, this is totally unrelated to the question of habeas corpus. "I don't like the ways in which the 9th amendment and the substantive due process clause have been applied" is a fine thing to believe, I guess. But there zero connection to any path to Trump establishing full blown fascism by saying we are under invasion and locking up his political enemies.
Show HN: Oauth2_capture – A Django package for handling OAuth2 token flows
by simplecto | 2025-05-11 11:20:05+00:00
I've created oauth2_capture (https://github.com/heysamtexas/django-oauth2-capture/), a Django package that makes it easy to capture, store, and refresh OAuth2 tokens from multiple providers.

The package currently supports Twitter/X, LinkedIn, GitHub, Reddit, Pinterest, and Facebook, with more providers planned. It handles the entire OAuth2 flow, from authorization to token storage and automatic refreshing.

Key technical features:

* PKCE support for providers that require it * Token refresh with retry logic for rate limiting (429 responses) * Clean Django models and admin integration * Proper token expiration handling

I built this because I kept reimplementing OAuth2 flows in different projects and wanted a reusable solution. The package is designed to be easily extended to support additional providers.

I'd love feedback from the community on the API design, code quality, or additional features that would be useful.

Yes, Allauth does a great job of oauth and user signups/management. This is not that.

When to use oauth2_capture

Choose oauth2_capture when your application needs to:

* Post to social media platforms on behalf of users * Access provider APIs (GitHub, LinkedIn, etc.) using user permissions * Perform actions that require fresh OAuth tokens with specific scopes * Maintain long-term API access with automatic token refreshing * When to use django-allauth

Choose django-allauth when you primarily need:

* Social authentication for user login * User registration and management * Email verification workflows * Account linking between social providers

Can they be used together?

Absolutely! You can use django-allauth for user authentication and oauth2_capture for API interactions. They solve different problems and complement each other well.

Simply put: django-allauth manages users, oauth2_capture manages tokens.
by Rochus | 2025-05-11 11:20:22+00:00
Thanks for the link. We already have computer-implemented objects which "sense their environment" since the seventies; e.g. each network adapter "senses" the physical medium for packets it is interested in (which was actually also invented at PARC); also in message queue systems, senders and receivers are not directly connected, but the receiver observes the queues it is interested in and reacts to messages. Even though there are still significant differences to biological systems, where information is encoded not only in the type, but e.g. also in concentration of molecules; there is also no message order, but communication is subject to stochastic processes.
Show HN: PulseGuard – Free and Smart Uptime Monitoring with EC2 Control
by hrshw | 2025-05-11 11:20:44+00:00
Hi HN

I’m Rahul, a cloud engineer and indie hacker. I built PulseGuard — an AI-enhanced uptime monitoring tool that’s fast, simple, and affordable.

I made this after getting frustrated with overpriced monitoring tools that were too heavy for simple projects and didn’t offer helpful features like EC2 instance control or intelligent alerts.

Features: Website/API uptime monitoring with alerts

SSL certificate expiry warnings

Server performance tracking

Developer-friendly API

Start/stop your AWS EC2 instances via web UI

Clean and lightweight dashboard

AI-powered alert system to avoid false positives

Pricing: It starts at $0 — with all core features included on the free tier. Paid tiers just expand limits:

1 monitor (Free), up to 25 (Ultra – $8/month)

No credit card needed to start

I’d love your feedback, critiques, feature ideas — or bug reports!

Check it out: https://pulseguard.in Docs here: https://pulseguard.in/help

Thanks HN!
by alpaca128 | 2025-05-11 11:21:18+00:00
> Psychologists and experienced authors intuitively understand people

I interacted with at least 7 psychotherapists (one of them is a relative) and a whole bunch of other specialists in the field. It took three decades and a push from my side for someone to even figure out that something about me was kind of strange.

Yes, experts can recognize patterns. But that has limits & biases, and tends to be unreliable for outliers. And when that person doesn't even check their results all bets are off.
by StopDisinfo910 | 2025-05-11 11:22:20+00:00
> I simply took the approach of reverse engineering the EC firmware, binary patching it, flashing that back, and getting on with life. Skill issue.

There is no simply here.

You can’t list a litany of niche skills before implying that’s just life and it’s everyone fault they don’t have the time and knowledge to just, you know, casually reverse engineer and patch a binary.
by FirmwareBurner | 2025-05-11 11:23:01+00:00
Out of curiosity, what got you to spend 1000 Euros on a Zenphone 10 phone when Samsung S23 was net superior and cheaper and provides like 5 years of updates? It's not like previous phones from Asus had a better track record. I kept waring people to stay away form the Zenphone yet the online community kept overhyping it for some reason as the second coming of Christ or something.
by bdavbdav | 2025-05-11 11:23:24+00:00
I’m not quite sure that was the point I was trying to make… more that the effectiveness figures often have “normal use” and other effects built in.

To your point, people were promiscuous before contraception, and we are now in a much better situation unwanted pregnancy / STD wise since its advent. I’m not convinced by the reasoning whatsoever.
by defrost | 2025-05-11 11:24:03+00:00
> they are not visible from space, they can be estimated based on satellite images using a complex model.

Much like a human brain estimates or imagines an image based on a complex model transformation of sensor data from various cones arrayed within the eyes.

Here we have a straightforward, readily pipelined, multispectral transformation that combines 'colours' from the non (human) visible part of the greater spectrum and creates a shifted blended colour image in the human eye visible part of the spectrum such that target vegetation is prominent.

In the remote sensing domain calling such things visible has been common parlance for three decades.

It's similar to that trope scene in action films that has a sniper using a thermal filter to enhance body heat for better target imaging.
by turtleyacht | 2025-05-11 11:25:21+00:00
We who are prey argue consciousness because we are able to ask, "What is it like to be the hunter?"

But the hunters still eat us.

The hunters have a faction who agitate for equal rights on our behalf, since we feel pain and suffer, and create engines (but not interstellar ones).

None of us want to tell them they are a little bit wrong in the essays, having picked up rudiments of their language and writings, even though both we and they understand calculus.

Or we could tell them, and propose we are just as important to the idea of an intergalactic organization, although we do just want to borrow some of their schematics around movement and weapons. (For our protection, of course.)

Therefore, the only beings a conscious folk consider likewise are those who may emerge in a fashion to make war to preserve themselves.

Does that mean we should expand consciousness otherwise to species that cannot?
by Workaccount2 | 2025-05-11 11:26:59+00:00
The point is that people are spoiled and still complaining. A replacement for Google is 15 services that are $9.99/mo or ad-supported with zero tolerance for ad blocking.

People are blind to this, they think Google is a charity that got greedy. Meanwhile they haven't let a Google ad through their ad blocker for 15 years.
by adrian_b | 2025-05-11 11:28:10+00:00
The effect depends on the plant and on its environment.

While more CO2 is good for plants, the associated changes in temperature and humidity can be bad and they can counterbalance the effect of increased CO2.

There has been a recently published study, for which I cannot remember a link, which has evaluated the current effects of the climate change for 7 major plant crops. For 3 of them, including rice, increased CO2 has resulted in higher productions, but for other 4, including maize, the associated changes in air temperature and humidity has determined lower productions, despite the higher availability of CO2.
by Waterluvian | 2025-05-11 11:29:00+00:00
I think this effort would benefit from trying to qualify what “unpredictable ways” actually means. If anyone is testing devices, a catalog of test results describing the actual failure modes that were revealed would help make this whole thing more concrete.

I think many software engineers know that if you want to make any organization care about this type of issue, you need to be ready to demonstrate the severity and impact.
by fastball | 2025-05-11 11:30:17+00:00
You are shopping at a store along with some other customers. When entering the store, you notice that an employee of the store has left a large knife outside, under a trashcan. A shady character is wandering around the store, looking for someone to steal from, but hasn't figured out the right angle of attack yet. At some point, you (ever the responsible citizen) stand up on a table in the store and yell "Hey! Just wanted to let everyone know that there is a large, scary looking knife under the trash can outside. You have been warned." You then climb down from the table and leave the store. Knives are dangerous, after all. Immediately after your announcement the shady character goes and grabs the knife, which they then use to stab a customer on their way out of the store and steal their stuff. Unfortunately the customer didn't hear your announcement about the impending danger because they were in the toilet at the time.

Whew, thank god for public disclosure with no prior warning to the people who would've been best equipped to retrieve their knife.

---

This was clearly not the best way to handle the situation.

Sure, you didn't know that the thief was unaware of the knife before your announcement, but he sure as shit was aware afterwards. You not knowing what they know is not a good reason to indiscriminately yell to no one in particular.

I did not make the argument that obscurity is security. The knife being under a trashcan is a risk and should be addressed by management. But that doesn't mean non-obscurity automatically improves security.
by cyclotron3k | 2025-05-11 11:30:19+00:00
Hey, they don't have excel or word, like I have at work, and none of the other professional software like Photoshop or premiere, I can't play AAA games, and none of my friends use it either. But that's cool. The clipboard though... that I cannot abide.

Put another way, I strongly disagree that the clipboard is the main obstacle. (And fwiw, Linux has been my main OS for decades)
by Avamander | 2025-05-11 11:30:33+00:00
A few of the drivers they install (or want to install) are also on Microsoft's vulnerable actively exploited driver blacklist. So that's fun, they have no intention of fixing it because they do not support "third party software". I'm also pretty sure their installer doesn't work without unencrypted HTTP traffic being let through. Plus they keep offering bloatware as "updates" to you.

On top of it all, the software they offer is slow and buggy on brand-new hardware.

But most of those issues also exist with AMD's or Gigabyte's drivers, most hardware vendors seem trashy like that. Like, if you install Samsung Magician (for their SSDs) then that even asks you if you're in the EEA (because of the privacy laws I suspect), it's absolutely crazy.

Microsoft should make it *significantly* harder to ship drivers outside of Windows Update and they should forbid any telemetry/analytics without consent.

I find Linux's hardware support model significantly nicer, although some rarer things do not work OOB, there's none of this bullshit.
by airspresso | 2025-05-11 11:31:19+00:00
I see it much more being a mindset. Either you approach everything with the goal of improving it, or you approach everything with the goal of finding a works-and-is-good-enough solution. One is about maximizing quality and another about minimizing effort.

Since it’s a mindset, you can define it as different classes of people.

What I’ve observed is that the ones that are minimizing effort in the area you care about (tech as we talk about here), are doing it as a conscious choice to free themselves up for another area of life they value higher. Could be kids, could be something else.
by mihaitodor | 2025-05-11 11:32:29+00:00
I was thinking of exactly the same album when I saw this post yesterday :)

By the way, while it’s not really metal, you might also like this live version of Sarah Brightman’s - Fleurs Du Mal: https://youtu.be/cOllWAhZhXY. It was filmed in Stephansdom Cathedral in Vienna and I went to visit it after seeing this video. It’s really impressive!
by throw0101d | 2025-05-11 11:32:47+00:00
> what if the vulnerability cannot be easily fixed within the week, even if the company stops all work and focus completely on the problem?

A week is an example and not a definitive value dictated by law, statute, or regulation.

When you report the vulnerability you give the developer a timeline of your plans, and if they can't make the deadline they can come back to you and request more time.
by kragen | 2025-05-11 11:34:16+00:00
Interesting! But it's not just a linguistic coincidence; it's really part of the causal structure of the world, arguably because there are conscious beings in it. In my example, if I use up the last of the tea leaves today, that can cause the stove burner to stay off tomorrow, because you might realize that the lack of tea leaves means you can't make tea. Me using up the tea leaves might cause you to visit the grocery store, too.
by p_l | 2025-05-11 11:34:45+00:00
It was the common complaint about writing VCL apps in Delphi - that single message box app would be 0.5MB binary.

But that was the static overhead of VCL core library and the benefits were considerable compared to writing raw WinAPI.

And unlike MSVC 16kB WinAPI executable you didn't have chance of sudden surprise "oh, but you need to update msvcrt.dll to run this" because Delphi (and Lazarus/FPC) default to statically linking the runtime
by throw0101d | 2025-05-11 11:35:19+00:00
> But corporations making big bucks from their software need to be able to fix things quickly. They took money for their software, so it is their responsibility. If they cannot react on a public holiday, tough luck.

Because it is not corporations who are reacting on public holidays, but developer human beings.

It is not corporations that are reacting to install patches on a Friday, but us sysadmins who are human beings.
by ndsipa_pomu | 2025-05-11 11:36:58+00:00
I'd say that it depends on how threatened the targets feel - I'd guess that "agile practitioners" as a group wouldn't take it seriously as a threat, but instead as a joke.

However, if there's often rallies and protests against "agile practitioners" and cases of violence against them, then it should count as "hate speech".

In some ways, I see this as similar to "assault" laws where it depends on the specifics of the situation and whether the target is in fear of their safety. e.g. someone holding a knife and backing away from the victim would not be assault, but holding a knife and advancing towards them in a threatening manner most likely would be assault.