MurphyA/hacker-news huggingface dataset:
by eesmith | 2025-05-13 11:40:26+00:00
It should ask if by "Carlsbad" you mean the city or the caverns.

And point out that you likely meant Roswell. (There is a Rosewell in Virginia. https://www.geonames.org/4782965/rosewell.html )

It should also ask about what interests you have, to optimize what "best route" means since it can mean something different than shortest time/distance. Like, if you are interested in space history then there's a few things to check out in Alamagordo. Or, do you like model trains?

On the other hand - are you serious? A 1950s paper map would almost give you what you want. Specifically, this one https://archive.org/details/x998732558805867 . You just need to add a few numbers in your head.

El Paso to Carlsbad = 101 + 46 + 20 = 167 miles.

Roswell to White Sands = 58 + 47 + 9 + 3 + 13 = 130 miles.

While the road names have changed, and the surfacing improved in 75 years, the routes have not.
by helro | 2025-05-13 11:41:49+00:00
I got 20k+ downloads for my app by posting on Reddit. It's an app/website blocker for iPhone & Mac, so I focused on relevant communities like r/digitalminimalism and r/dumbphones with genuine, non-spammy posts: https://www.atten.app

I also tried "apps gone free" campaigns by posting on Reddit and using sites like AppRaven. These were very effective for visibility, the launch is currently the #5 all-time post on r/macapps (https://www.reddit.com/r/macapps/top/?t=all). While these campaigns drove a strong spike in downloads, retention was low, so they weren’t as useful for building a long-term user base.
by MobileVet | 2025-05-13 11:42:41+00:00
> It's immediately obvious to me that the illustrations are AI slop

I don't believe this qualifies as AI Slop. They are all consistent in their style and thus 'on brand' for what they are trying to convey. While visuals are fairly subjective and these may not speak to you, they don't have 'obvious slop characteristics' eg 6 fingers or 3 eyes imho.
by imtringued | 2025-05-13 11:43:07+00:00
What you need to do is have first party formal verification/design by contract support. Instead of the old school test bench approach, you should prioritize tools like fuzzing and model checking to find counter examples (e.g. bugs).

If there is something worth checking, but its only possible to check it in simulation (think UBSan), then you should add it anyway, just so that it can get triggered by a counterexample. (Think debug only signals/wires/record fields/inputs/outputs/components) You don't want people to write lengthy exhaustive tests or stare at waveforms all day.

Note that the point of formal verification here isn't to be uptight about writing perfect software in a vacuum. It's in fact the opposite. It's about being lazy and getting away with it. If you fuzz Rust code merely to make sure that you're not triggering panics, you've already made a huge improvement in software correctness, even though you haven't defined any application specific contracts yet!
by sph | 2025-05-13 11:43:35+00:00
Please, can we stop assuming every single software has actual lives on the line? These comment threads always devolve into implicit advertisement of Rust/Ada and other super strict languages because “what about safety?!”

It is impossible to post about a language on this forum before the pearl clutching starts if the compiler is a bit lenient instead of triple checking every single expression and making your sign a release of liability.

Sometimes, ergonomics and ease-of-programming win over extreme safety. You’ll find that billion dollar businesses have been built on zero-as-default (like in Go) and often people reaching for it or Go are just writing small personal apps, not cruise missile navigation system.

It gets really tiring.

/rant
by llm_nerd | 2025-05-13 11:44:42+00:00
Google specifically allows the use of the permission[1] if the app falls in a set that truly require it to function.

File managers Backup and restore apps Anti-virus apps Document management apps On-device file search Disk and file encryption Device-to-device data migration

This Nextcloud app seems to be an app that mirrors your Nextcloud storage to your device, and I cannot understand why it would need all access to any other data stored on the external device -- with the enormous risk that entails -- much less that can't be selectively picked by the user. It isn't a file manager, it isn't a backup utility, it's a cloud provider with local mirroring. I get why Google told them to do things otherwise.

Another comment mentions this is "bad faith" security and that's just overly cynical. Android and iOS both suffered from basically trusting app developers, and both were burned for it. Hardening down and making apps only request precisely what they actually need seems to be a massive user positive.

[1] - https://developer.android.com/training/data-storage/manage-a... - the exclusions can be found at the bottom.
by int_19h | 2025-05-13 11:45:29+00:00
> The USA jailed a student for 45 days for worrying an op-ed suggesting that the situation with Gaza was plausibly genocide.

... by abusing the fact that the student in question is not a citizen, thereby working around that whole pesky First Amendment thing.

If anything, this goes to show what would happen to everyone if they could do that. And the obvious takeaway from it is that First Amendment should apply in full to immigrants, including obvious retaliation through unrelated immigration regulations.
by eddybruel | 2025-05-13 11:46:32+00:00
Hello HN!

We’re happy to finally announce our first public release of Makepad.

Makepad is a UI framework written in Rust. It’s designed for performance — relying almost solely on the GPU for rendering. It features a novel styling system, based on the idea of using shaders to adjust the look and feel of your application. To this end, it also features a custom DSL, including a shader language that compiles to multiple graphics backends.

A major feature of Makepad’s DSL is real-time UI editing: Makepad apps listen for changes to their DSL source code and update themselves at runtime to reflect the new code. This allows developers to adjust the layout and style of their app without having to do an expensive recompilation step on each change.

Makepad currently works on all major native platforms (OS X, Windows, Linux, iOS, Android) as well as the web (via WASM builds).

This is an early release — lots of core stuff works, and you can build real apps with Makepad today. In fact, there are some real apps being built with Makepad today:

- Robrix, a Rust Matrix client https://github.com/project-robius/robrix - Moly, a Rust AI LLM client https://github.com/moxin-org/moly

To get a better overview of what Makepad can do, you might also want to check out our UI zoo (currently desktop only): https://makepad.nl/makepad-example-ui-zoo/index.html

That said, there are still some rough edges and missing bits. Looking forward, our intent is to start releasing regularly from now on, so Makepad will only become better over time.

Check it out and let us know what you think!

crates.io: https://crates.io/crates/makepad-widgets github.com: https://github.com/makepad/makepad website: https://makepad.nl
by pcrh | 2025-05-13 11:46:38+00:00
The distinction is between ‘data peeking’, i.e. repeatedly checking the p-value you've obtained and stopping if it falls below 0.05, and repeating assays in the light of new information. Such new information can relate to the distribution of the values, the expected effect size, or any other parameter that you did not know at the outset of the study.

In ‘data peeking’, the flaw is that if an assay is repeated often enough, one will eventually get a result that deviates far from the mean result. This is a natural consequence of the data having a normal distribution, i.e. not all results will be identical. It's the equivalent of getting six heads or tails in a row (which should happen at least once if you flip a coin 200 times), and then reporting your coin as biased.

Repeating an assay because the distribution of the data is not what you thought, or because the likely difference between means is smaller than you thought is a valid approach.

Source: Big little lies: a compendium and simulation of p-hacking strategies Angelika M. Stefan and Felix D. Schönbrodt

https://royalsocietypublishing.org/doi/10.1098/rsos.220346
by arp242 | 2025-05-13 11:46:41+00:00
Jacques Philippa, a member of the SS, spent 29 years in the attic of his parents after the second world war to escape his death penalty. He was only found out because his mother died and elderly father could no longer take care of him.

It seems the main difference is that Philippa spent most of this timed confined to the attic rather than just walk around outside assuming no one would find him. Or trading his crypto assuming no one would notice.

Kind of an amazing story by the way, but not many resources available about it in English. But for those who can speak Dutch there's e.g. https://meitotmei.nl/zoldernazi-jacques-philippa-begon-zijn-... or https://www.youtube.com/watch?v=GQceZ5O2oog
by thrance | 2025-05-13 11:47:15+00:00
This just in: consumer protection is "woke" and "cultural marxism". Americans elected the most corrupt president ever, that just received the largest bribe in history [1], and then act surprised when this administration fucks over consumers.

[1] https://www.theguardian.com/us-news/2025/may/11/trump-accept...
by spacerzasp | 2025-05-13 11:47:17+00:00
>The need to switch between the examples given is niche

This is what I argue against, that given it's purpose, a need to switch is important. The use case for hauling things has been taken up by other things, but the use case for detachable loads hasn't gone anywhere where loads need to be hauled.

>Farming isn't comparable and doesn't have the same needs

Farming needs wheeled vehicles to transport heavy materials, I think it's exactly comparable.
by incomingpain | 2025-05-13 11:48:17+00:00
Their approach is misguided and ultimately more harmful to public health than any benefit mrna ever provided.

Back in 2020 COVID responses split along ideological lines. mrna should've stayed politically neutral. They aligned with 1 side of politics, pushed the false claim that vaccines stopped transmission, and then enforced mandates, banning people from public life, job suspensions and firings, and even criminal fines for the unvaccinated... Greece and Quebec for examples.

They enabled censorship of dissent and framed skeptics as dangerous. While coercion won over 90% in places like Canada... how about that trust in public health. Now we’re seeing measles outbreaks and growing vaccine hesitancy.

Now HIV and cancer, they play the victim: “How dare you criticize us after all we did to you and not for you”

Antivaxxers arent the heroes here, but liberty and staying politically neutral would have not resulted in such terrible consequences to public health.
by ulbu | 2025-05-13 11:48:42+00:00
and we should probably look at alcoholic liver disease as an expression of capitalism.

data is bytes. period. your suggestion rests on someone else seeing how it is the case and dealing with it to provide you with ways of abstraction you want. but there is an infinity of possible abstractions – while virtual memory model is a single solid ground anyone can rest upon. you’re modeling your problems on a machine – have some respect for it.

in other words – most abstractions are a front-end to operations on bytes. it’s ok to have various designs, but making lower layers inaccessible is just sad.

i say it’s the opoposite – it’s 2025, we should stop stroking the imaginaries of the 80s and return to the actual. just invest in making it as ergonomic and nimble as possible.

i find it hard understand why some programmers are so intent on hiding from the space they inhabit.
by croemer | 2025-05-13 11:49:07+00:00
What the article doesn't emphasize enough: Pinning of the contact line is crucial (e.g. due to surface roughness), otherwise the ring would not be as pronounced. Due to higher curvature, evaporation is faster at the edges, causing the non-evaporating solids to flow to the edge leading to more of them there in the end when everything has dried up. But on a smooth surface, droplets just shrink. When they don't, you get the ring stain.

Relevant: https://www.nature.com/articles/nature10344
by AtomicByte | 2025-05-13 11:49:30+00:00
I really don't want to waste my time explaining this to someone with clearly a subpar understanding of cybersecurity so I'll get an "AI" to:

The blog post "MCP: May Cause Pwnage" highlights critical security vulnerabilities in the Model Context Protocol (MCP) and its associated tools, such as the Inspector. These issues include default configurations that expose services to external networks by binding to 0.0.0.0, the use of GET requests for executing commands—making them susceptible to CSRF attacks—and the potential for DNS rebinding exploits due to the use of Server-Sent Events (SSE). While some may argue these are merely implementation flaws, the fact that these insecure practices are present in official SDKs and tools suggests systemic oversights in the protocol's design and default settings. Given MCP's growing adoption among major AI providers, addressing these vulnerabilities at the protocol level is crucial to ensure secure deployment and operation.

Security experts have echoed these concerns. For instance, in a podcast discussion, professionals highlighted the simplicity and severity of these exploits, emphasizing that such vulnerabilities are inherent in the protocol and its tools, not just in individual implementations. Critical Thinking - Bug Bounty Podcast

Do your research first, kids
by RMPR | 2025-05-13 11:51:43+00:00
Nice write-up.

> Screen offers a multi-user mode which allows to attach to Screen sessions owned by other users in the system (given the proper credentials). These multi-user features are only available when Screen is installed with the setuid-root bit set. This configuration of Screen results in highly increased attack surface, because of the complex Screen code that runs with root privileges in this case

I wasn't aware of such a feature but I guess it's what makes stuff like tmate possible. Speaking of which, I wonder if tmux is affected by the same kind of vulnerability.
by whstl | 2025-05-13 11:51:45+00:00
IMO, DOD shows that you don’t have to sacrifice developer ergonomics for performance.

ECS is vastly superior as an abstraction that pretty much everything that we had before in games. Tightly coupled inheritance chains of the 90s/2000s were minefields of bugs.

Of course perhaps not every type of app will have the same kind of goldilocks architecture, but I also doubt anyone will stumble into something like that unless they’re prioritizing it, like game programmers did.
by AndrewDucker | 2025-05-13 11:51:59+00:00
Well, yes. It's an economic problem (which is to say, it's a resource allocation problem). Do you have someone spend extra time optimising your software or do you have them produce more functionality. If the latter generates more cash then that's what you'll get them to do. If the former becomes important to your cashflow then you'll get them to do that.
by snowwrestler | 2025-05-13 11:52:41+00:00
Literally thousands of bills get introduced each Congress. Most go nowhere… many are intended to go nowhere. Instead they are basically PR exercises.

In addition to the obvious First Amendment concerns, this bill would run up hard against the bro caucus of the Trump coalition. Do we think Elon Musk and Joe Rogan are going to spend their resources on a federal porn ban bill? Are Libertarians likely to support this? Will it get 60 votes in the Senate? Etc.
by int_19h | 2025-05-13 11:53:10+00:00
> A proper democracy being overzealous can be fixed by the democratic process.

The democratic process can only work if citizens are fully informed on the issues, which is precisely what censorship prevents. It allows complete excision of some viewpoints from political discourse and even actual voting (if parties can be banned on the basis that their platforms contain such and such). Imagine for a moment what happens that your democratic society decides that advocating against hate speech laws is itself hate speech.
by ToucanLoucan | 2025-05-13 11:53:39+00:00
The problem is the naughty/nice dichotomy in terms of software that needs effectively global permissions to accomplish it's task, like apps like this arguably would. I have also compromised the ever loving hell out of my household ubuntu box to make it do various things, but I'm also doing that on purpose, knowing full well that it's kept safe by other means.

The problem is casual users aren't interested in learning about this shit so they can make informed choices. They just click through and give apps access to the entire device without thinking or reading, and then bitch at Google when their data is breached. Google doesn't want to deal with that so they lock everything down.

I dunno isn't this why Android users root their phones?
by IshKebab | 2025-05-13 11:55:11+00:00
> Jira and bugzilla are vastly superior to GH Issues.

I think you're in the tiny minority with that opinion.

> Most of what makes Jira awful is the people using it.

Not even close. Yes, people aren't good at administering it, but there are soooo many reasons that it's shit apart from that. Not least the hilarious slowness. Jira Cloud is so slow that not even Atlassian use it.

Also I don't think you can just say "you're holding it wrong". Part of the reason people screw up Jira configs so much is that it makes it so easy to screw them up. You can't separate the two.

> but at least it's still free and open source.

Just being open source doesn't make something good.
by sillystu04 | 2025-05-13 11:55:19+00:00
To play devil's advocate, many successful developer focused companies have gone down this route successfully. Neon, Cloudflare, Firebase, Github and many more have all made free tiers work.

I suspect there's a special dynamic for developers. I'm usually more willing to try out new things on personal projects, but I also don't like paying for things on personal projects. At work I don't care how much things cost, but I'll definitely advocate for tools that worked well on personal projects.
by neonsunset | 2025-05-13 11:55:51+00:00
No, that's just the memory model of CLI and the choice made by C#. By default, it emits localsinit flag for methods which indicates that all local variables must be zero-initialized first. On top of that, you can't really access unitialized memory in C# and F# anyway unless you use unsafe. It's a memory safety choice indeed but it has nothing to do with P/Invoke.
by Carbonhell | 2025-05-13 11:56:13+00:00
Loved it! I immediately thought of a survey we do at work monthly as a check-in for HR purposes, to gauge how we feel about the company, our work, the workload and so on. Right now we do it with a simple Google Form with a mixture of a score based question and an open-ended one. I'd probably like it a lot more from an employee perspective if the questionnaire was served with a system like yours. I imagine it would be cool for a HR member to have a set of metrics derived from the conversation, like a dashboard. Just my two cents. The only negative point is that it feels like the conversation never ends - as others said, it felt like the assistant asked similar questions to points already established before in my mind. It'd be nice to have some sort of progress bar, not sure. Amazing idea anyway, I wish you luck!
by int_19h | 2025-05-13 11:56:42+00:00
> Musk seems to be censoring Twitter all over

Twitter is a private platform, though, so it's not government censorship. Musk can censor all he likes there, but there are still multiple alternative avenues for communicating those viewpoints. When government censors something, it applies universally, so this isn't comparable.

> peak up for Palestine and ICE detains you

... if you're not a citizen. This is an example of why the 1st Amendment in US doesn't go far enough, because it doesn't fully protect free speech rights of certain groups (at least as this administration interprets it; the courts are still working through the challenges, so we'll see). I find it very strange that you're using this example as an argument that there should be fewer free speech protections - do you want FBI to start detaining citizens as well when they criticize Israel? Because that's exactly what would happen if 1A would be gone tomorrow somehow.
by carlosjobim | 2025-05-13 11:57:04+00:00
I've found B2C much easier than B2B, and much more pleasant too.

SEO is extremely easy: Write in very clear prose what you are selling and give potential clients as much information as possible. This is all you need for SEO, apart from purely technical stuff like load times.

Turning your SEO efforts into real sales is also easy: State your price(s) very clearly on the website and then make it as easy as possible for customers to make a purchase. Get out of their fucking way when they have their wallet out.

If you insist on using paid ads and influencers, by God connect the campaigns to specific discount offers so that you know exactly how many sales origin from each channel you are paying to market in.
by CelestialMystic | 2025-05-13 12:00:34+00:00
> Farming needs wheeled vehicles to transport heavy materials, I think it's exactly comparable.

No because the farmer has to do many different things with the same piece of equipment. The number of people doing a courier job on a bicycle and then running a Gelato stand are almost nobody.

If I wanted to tow something, I wouldn't use a bicycle anyway. I am not even that convinced by existing cargo bikes tbh and this is coming from someone that built their own bicycles for 20 years. I would use my land rover.
by K0balt | 2025-05-13 12:00:47+00:00
I’d call myself a “spiritual” libertarian. Over the years, it became obvious that laws, regulations, compromises, and balances that curtail freedoms exist for a reason. It’s an imperfect world, And if the goal is to maximize human happiness and prosperity, a framework for cooperation is absolutely imperative.

I think it’s also good to push back against this flow of structure, because just as much as the idea that freedom and self-interest are the ideal drivers of society is a dangerous and intoxicating illusion, so is the idea that cooperation and goodwill can be legislated.

The reality is, of course, much more nuanced and poorly distributed. Incentives alignment to the common good is an effort that is a struggle to even properly define, much less to implement.

The fact that people seem to not understand that incentive alignment is the goal, rather than mothering or oppression, doesn’t help.

The problems of the state are much less tractable and congruous with personal experience than most people, including most politicians, appreciate. Relatable analogies such as running a business or a family used in appeals to “common sense” are farcical in their relation to the state, and often disastrous in application.

Statecraft is something that requires not only a deep understanding of political theory and practice, but also of psychology, economics, game theory, statistics, and a solid dose of intuition and luck. In short, it is demanding to the point of nearly being a fools errand, yet the electorate seems to favor simpletons, paternal figures, and shiny things that smell like upper class. I really don’t know if there is a way forward with democracy unless we lean in hard to education.
by incomingpain | 2025-05-13 12:01:37+00:00
I started a new project last week. I was replacing an old mangled project, so much of the design and what it needs to do is already well understood.

I built the new one with django. So prompting chatgpt to give me the general code and then I clean it up for my needs to was sooooo good. I got it completed in a few days which is insane.

Its absolutely insane if you dont use AI to code.