MurphyA/hacker-news huggingface dataset:
by bko | 2025-05-26 01:53:41+00:00
Ticketmaster has it's own resale platform. It's able to double dip. They basically say tickets are relatively cheap and scalpers are the bad guys. They encourage the scalpers. Then they can resell using their own resale platform and they get fees on top of that.

The fees on re-sellers are crazy, and they take fees from both seller and buyer.

Seller Side:

List price: $100

StubHub seller fee (15%): -$15

Seller receives: $85

Buyer Side:

Ticket price: $100

StubHub buyer fee (10-15%, let's use 12%): +$12

Buyer pays: $112

StubHub's Take:

From seller: $15

From buyer: $12

Total StubHub revenue: $27

So they're making an additional ~27% (on the "true" market price) in addition to the ~25% they charge in the primary market. So if the market price was $200, if they just charged that they would make $50. But instead they'll sell it for $100, make $25 on the primary and an additional $50 when sold in the secondary market.

They don't own StubHub but they have their own. In 2017 they opened up TicketExchange which allow the sale and validation of tickets on third-party websites, including StubHub, which they did to capture some of that amount. They get to play like the reasonable party here, the scalpers are taking the heat and they're getting a cut of that.

They do other things that's baffling like selling tickets a year ahead of time, which is kind of weird considering very few people, even big fans, would be really on top of buying tickets a year out. It's obviously designed for scalpers.

You can easily solve this by having the ticket tied to a name and requiring you to show ID, maybe allow others to dump back at face value, but that would likely be gamed as well but not as easily (you dump your tickets and let someone else pick them up at that exact moment). Or make them non-transferrable but that would greatly reduce the value to fans.
by z3ugma | 2025-05-26 01:54:08+00:00
Nest Thermostats of the 1st and 2nd generation will no longer be supported by Google starting in October. I'm working on an enclosure-compatible open-source version of the 2nd gen Nest thermostat. It reuses the enclosure, encoder ring, display, and mounts of the Nest but replaces the "thinking" part with an open-source PCB that can interact with Home Assistant
by masswerk | 2025-05-26 01:54:37+00:00
I think, in terms of art, it's more like a death march: events will become more exhausting and less emotional rewarding for the performers, so there will be less events, which will be even more exhaustive as they are exclusive. So, under these conditions, there may be no performances, at all, as relevant performers just give up. (Art is not a simple product and may scale inversely.)
by Coffeebean2017 | 2025-05-26 01:55:01+00:00
The problem is that to saturate the defences of a carrier's escorts you need hundreds of missiles not dozens. The Chinese have lots of missiles but not an infinite amount; especially not of the modern, purpose-built weapons that can pose a real threat to the carriers.

In reality they're going to have just a few tries before they run out of ammo. Just shooting at everything that might be a carrier is a great way to lose the war.

To actually pull this off you need to be able to rapidly locate and identify the target, communicate it's location to all your various launchers, then coordinate a complex time-on-target attack between all of them.

Any mistakes or disruptions in the chain can ruin your whole attack; misidentify the target and your attack misses, fail to communicate and a portion of your launchers never fire, fail to coordinate and your missiles arrive too spread out and are shot down, take too long to do all of this and the carrier will clear datum and you're stuck waiting for the next pass of a recon satellite that may never come.

This is all extremely difficult even under ideal conditions let alone when Uncle Sam is jamming your comms and blowing up your servers.

Not to say it's impossible, just that it's not as easy as you may think and that accurate targeting is a major factor.
by rafaeldavidtin | 2025-05-26 01:55:36+00:00
# Jibril Runtime Security v2.1 Released

Jibril (https://jibril.garnet.ai/) is a free runtime monitoring and threat detection tool for Linux, designed for development, CI/CD, and production environments. It captures system activity - processes, files, network connections, users - with high precision and low overhead, processing hundreds of thousands of events per second. Installation takes under 5 minutes, and it integrates with GitHub Actions for CI/CD or Kubernetes for cluster monitoring.

## Introduction

Jibril delivers real-time visibility into system behavior, detecting threats like unauthorized executions, file tampering, or network anomalies. Its modular design, driven by a centralized configuration file, balances flexibility and performance, scaling from single systems to enterprise deployments. It provides comprehensive telemetry with tamper-evident logs, ensuring reliable security insights.

## Features

- *Attenuator*: Filters security events using private & public LLM models in order to reduce false-positives noise. Analyzes events for context, like process ancestry or executable paths, and deduplicates repetitive alerts. Useful for prioritizing alerts in automated pipelines. - *Alchemies*: Custom detection rules framework. Users can create "detection recipes" to define specific monitoring conditions, e.g., file access patterns or network activity. Includes built-in recipes and supports enabling/disabling rules on-demand for tailored security. - *Cache Configurations*: Manages memory for event storage. Users set cache sizes via config files to handle large event volumes, preventing performance degradation in high-load environments. - *Cadence Configurations*: Controls timing of operations, like event polling or cache updates. Adjusts frequency to balance responsiveness and resource usage, ensuring efficient monitoring in real-time. - *Network Policies*: Enables blocking of network connections based on domains or IP CIDRs. Provides a complete view of remote peers per process, linking detections to corresponding peers with full DNS resolution paths. Groups all processes communicating with the same remote node and flags detections for each entry. - *High Event Load Handling*: Processes hundreds of thousands of events per second with minimal performance impact, leveraging eBPF’s efficiency and a so called 3rd-generation EDR architecture.

## More information

https://jibril.garnet.ai/ https://jibril.garnet.ai/jibril/installation/systemd-service https://jibril.garnet.ai/jibril/installation/command-line https://jibril.garnet.ai/jibril/installation/docker-containe... https://jibril.garnet.ai/jibril/installation/kubernetes
by bitwize | 2025-05-26 01:56:03+00:00
I love how if you accelerate backwards long enough (in the BLJ of auto racing games), you will eventually be at a point in the coordinate system where the distance between adjacent floating-point numbers is large enough to be visible, leading to your truck's geometry beginning to "shimmer", and then warp and change shape in bizarre twisted ways.

Truly only a masterpiece could gift us with an experience like that.
by f30e3dfed1c9 | 2025-05-26 01:56:18+00:00
I think that misses the point entirely. Even if you constructed some system the output of which could not be distinguished from human-produced language but that either (1) clearly operated according to principles other than those that govern human language or (2) operated according to principles that its creators could not adequately explain, it would not be of that much interest to him.

He wants to understand how human language works. If I get him right — and I'm absolutely sure that I don't in important ways — then LLMs are not that interesting because both (1) and (2) above are true of them.
by canucker2016 | 2025-05-26 01:56:26+00:00
Always love optimization posts.

A few things caused some confusion while reading the post.

For the first 50,000 cells flame graph, the post identifies two methods as the main time sinks, com.itextpdf.layout.renderer.TableBorderUtil#createAndFillBorderList and com.itextpdf.layout.renderer.CollapsedTableBorders#getCollapsedList.

I looked for those two methods in the flame graph and couldn't find them.

Only when I realized that the flamegraph had truncated the full method names to show just the method name, did the graph make sense.

I think circling in red (or whatever high contrast colour you want) the method names in the flame graph would've made drawing attention to them much quicker.

The second problem is a display problem.

The third table, displaying the results of post-optimization for collapsed table borders only displays three columns on Firefox (hiding the fourth column, containing the post-optimization runtimes). If the user moves the mouse over the table, then the horizontal scrollbar for the table appears, hinting that there's more data hidden off the right end of the table.

The third quibble I have with the post is the display of large numbers in the tables. Actually the last table fixed the problem, using '_' as a thousands digit separator. If that change could be applied to the other tables in the post, that'd make discerning the differences in runtimes easier.

Thanks
by nssnsjsjsjs | 2025-05-26 01:56:34+00:00
He doesn't explore the inverse: choosing common tooling for similar reasons. Choosing Python because it feels like pseudocode, Ruby so you can feel like you are DHH every morning or Docker so you are a real devops person.

And then the other quadrants of the mainstream thing/obscure thing vs. pluses/minuses map: Emacs and VIM are really fast and you can use the same editor and familiar tooling to open a 10Gb file as your source code. And VSCode often crashes or needs restarts to get things working again.

OTOH, great writing! I learned a few words. Can't believe I didn't know Gnostic.
by billy99k | 2025-05-26 01:57:06+00:00
"If the mRNA-based covid shots produced by Moderna and Pfizer-BioNTech represented the cutting edge of vaccine technology, applying ultra-sophisticated approaches never before seen in an inoculation, the approach by Taubenberger and Memoli represents a blast from the past."

mRNA still hasn't fully been tested long-term and is known to cause blood clots and heart-related issues. It most likely killed people as a result of this lack of testing and the government worked with the major social media companies to censor anyone that talked about vaccine-related injuries.

I would rather have research done on decades old technology that works than what we saw during Covid. There were credible people in the scientific community during this time that told people to not listen to their doctors and just take the vaccine. Science is supposed to be about finding the truth and it was just accepted to censor and ban anyone that talked about differing ideas when it came to things like the mRNA vaccines.

The exact opposite of science.
by zrobotics | 2025-05-26 01:59:06+00:00
I was about to write an incredulous comment accusing you of licking receipts, but I thought I'd look into it first. It does appear that just handling thermal paper can expose you to BPA [0].

Such a shame, thermal printers are the only printing device I don't suspect of being a plot by Satan to tempt us into wrathful thinking. Thermal printers are insanely reliable, I've worked IT for several businesses with shipping departments and thermal label printers are less troublesome than even keyboards, I struggle to think of a class of equipment that generated less issues. I guess I should have suspected there was something devious about them, they are printers after all and all other printers I've had to support have always just been constant sources of annoying issues.

[0] https://www.pca.state.mn.us/business-with-us/bpa-and-bps-in-...
by dboreham | 2025-05-26 01:59:43+00:00
Because politics. Americans like to delude themselves that their taxes are low by splitting them up into various buckets (Social security, Medicare, Federal Income tax, State income tax, even city income tax some places, property tax, sales tax, and now tariffs). Like selling a computer then charging for the keyboard and the power supply separately. Makes people feel like they're paying less.
by nyarlathotep_ | 2025-05-26 02:00:00+00:00
> Since I started in the 90s, SW dev has become more and more tightly controlled and feels more like an assembly line. When I started, you could work for weeks and months without much interruption. You had plenty of time for experimentation and creativity. Now everything is ticked based and you constantly have to report status and justify what you are doing

Yeah the consistent "reporting" of "status" on "stand-ups" where you say some filler to get someone incapable of understanding what it is that you're doing off your back for 24 more hours has consistently been one of the most useless and unpleasant parts of the job.
by jamesdhutton | 2025-05-26 02:01:04+00:00
An app for parents to motivate their kids by awarding them points for good deeds. There are existing apps out there, but I tried them and didn't like them, so I'm building my own. This is a side project for me and I only get to spend a few hours a week on it. Currently in beta testing and I hope to launch around July.

https://whirl.digital
by beeflet | 2025-05-26 02:01:36+00:00
The obvious answer is to kidnap lightning channel maintainers instead. They will always have their funds living on a "live" computer, which you can extract secrets from using whatever side-channel you like.

This way, you don't even have to torture them. You just have to kidnap them and keep them from transmitting closing transactions.

If you open a channel with them beforehand, you don't even need to extract the keys from their hardware. You get to can steal the funds in their channel unless they use another mechanism like a DMS to transmit a revocation transaction.
by akoboldfrying | 2025-05-26 02:01:54+00:00
I third "dependency parameters". It concisely describes what the actual thing is, and isn't intimidating.

And yes, even though some languages/frameworks allow deps to be "passed in" via mechanisms that aren't technically parameters (like member variables that are just somehow magically initialised due to annotations), doing that only obfuscates control flow and should be avoided IMHO.
by analog31 | 2025-05-26 02:02:10+00:00
This is a complex topic, as alluded by others here as well. My dad's employer sent him to take an economics course at Hillsdale in the 1980s. I attended college at a Christian liberal arts school around the same time. Reaganomics and the Moral Majority were in their ascendance. As a freshman, I took Econ 101, and it was taught from what the professor called a "Christian economics" perspective, which was essentially Reaganomics. We even learned the Laffer Curve. I learned a pro tip, which is that professors with a strong ideological bias tend to be easy graders, because they want to be liked. The course was fluff.

"Fundamentalism" was getting a lot of buzz during that time, and I remember my fellow freshmen debating whether their sect was "fundamentalist" or not. On the other hand, the biology department taught straight-up evolution with no religious disclaimers, and no objections from the college administration. If there were any objections, it was from a handful of students.

What it suggests to me is that the actual character of an officially Christian college can defy expectations, conflict with the technicalities of official doctrine, and change over time. My own rule, which I think is fair to everybody, is to avoid speculating about anybody's religious beliefs unless they actually say what they are, and then, it's whatever they want.
by andrewflnr | 2025-05-26 02:02:14+00:00
I'm not generally a Fahrenheit defender, but I think it's silly to deny the user-friendliness of having more integer values in the day-to-day temperature range, without going too far out of the two-digit measurement range. It lets you have a little more precision without being much effort to do casual math on. Milli-kelvin are far too small, a single kelvin is too big a perceptual range, and decimals are too annoying when we just want to talk about the weather.
by hbartab | 2025-05-26 02:02:18+00:00
A bank is more than an app. You are responsible for people's hard-earned cash, so there is, understandably, a lot of regulation and it differs from country to country.

Speaking as a customer of a bank that thinks it knows me but clearly doesn't, I would not bet on personalization. It sounds great in boardrooms but I would prefer it if my bank app just got out of my face and didn't try so hard to be a lifestyle brand I could not care less about. I also would not trust any automated investment algorithm made by some intern.
by komali2 | 2025-05-26 02:02:22+00:00
Your perspective makes sense from a sort of common sense angle, but I can't reconcile it with sociological studies.

For example, the 2022 Halloween Crushing incident in Seoul. https://en.wikipedia.org/wiki/Seoul_Halloween_crowd_crush?wp...

Whose "fault" was it? If we had a quantum supercomputer and video from every angle I bet we could calculate the first person to panic and start running. Have we successfully de-obfuscated the situation and found our culprit? I'm not sure, after all, two people away was a person about to panic as well, in fact they would have in exactly 2 seconds after the first person if the first person hadn't... In fact everyone on the crowd was on edge and on the verge of panic, hence why the crush was able to happen at all. So in that sense it's not really obfuscation to do a systems analysis on crowd dynamics to figure out why the crush happened.

And now hold on, whether we want to blame the individual that kicked off the panic or everyone in the crowd for not keeping their cool, is it fair, reasonable, or accurate to assign blame? These people hopped on a train and went to a Halloween party - surely it's reasonable to expect that on such a day, crowd control measures would be in place to keep them safe. After all, society keeps them safe from other things they don't really need to worry about - separating cars and pedestrians, keeping the water clean, flushing away their poo. Isn't it reasonable for them to assume that roads would be designed wide enough to accommodate a lot of people? That there'd be multiple exits? If so, then it's the fault of the bar for not communicating the tight pedestrian situation, or doing crowd limiting. Er, well, not just one bar, but the 20 that are in that area. Also the chief of police for not setting up proper crowd control, and the traffic commissioner for not instructing the chief to do so. Or mayor. Actually maybe the city planner for allowing such narrow areas to develop into popular bar areas at all. No not the city planner in 2022, the one in 1985 when they were rebuilding that area after the war.

I think especially in the western world there's a habit, maybe borne of western hyper individualism, to always try to find the individualist angle. "Well maybe people should take more personal responsibility for their safety!" And if people want to live that way I think they should be allowed to. Far away. Remotely, on farms or something lol. For those of us that prefer living more dense lifestyles in societies, I think it makes a lot more sense to take a systems analysis approach to these kinds of problems with reasonable good faith baked in.

Often it's not obfuscation, often situations simply are complicated to where it's impossible to blame the individual without contorting into strange value systems.
by l72 | 2025-05-26 02:02:54+00:00
I buy a lot of music on Bandcamp and often a label will have their whole catalog on sale, so I’ll just buy that. But I haven’t been good exploring the new 50+ albums I just bought, so this is helping.

I also finally took my wife’s collection, properly tagged it, and added it to my collection. That has been fun to explore.
by hardwaregeek | 2025-05-26 02:03:57+00:00
People underestimate how much of software engineering is subjective touchy feely decisions. But really it's just a nature of being in a field with so many possible options and so few hard constraints. You can write your web app/cli in Java, Go, Rust, JavaScript, Ruby, Python, etc, each of them with reasonable justifications. You can deploy to AWS, Vercel, GCP, Azure, Cloudflare, etc. You can use Postgres, Mongo, SQLite, MySQL, etc. Is there any actual evidence that one stack is better than another? No, not really. It's ultimately up to what your brain decides it likes, and then it fills in the arguments post-facto.

It's just that software engineers like to pretend they're fully rational beings and don't go off of subjective reasons like the rest of society.
by K0balt | 2025-05-26 02:06:35+00:00
Doing so sticks billions of transistors between A and B, all of which have to work perfectly billions of times a second. If you just run fiber, you need to put an amplifier in every 50km or so, other than that it’s all just buried glass.

The fiber is already there, and it gives you guaranteed capacity, even during a major power outage. And it guarantees no one is changing out a switch or a router at a bad time, etc.

It’s just a lot less to control and to go wrong.
Seeking calling before entering tech?
by bsuki | 2025-05-26 02:06:52+00:00
A year ago, I started reading seriously for the first time. It changed my view of life. I went from seeing only two paths—college → job or small business—to realizing how wide the range of possibilities is. I was inspired by legends in tech: Benjamin Franklion, Steve Jobs, Elon Musk.

After my first year of college, I came to Japan to seek what they all seemed to have: a calling. I imagined the trip would open something up. But now, a week in—after covering most of Kyoto—I feel off. Tourist sites are interesting, but they haven’t helped me make sense of what I’m looking for. Something felt wrong the moment I walked into Ginkakuji.

I’m wondering if the issue is:

I'm facing an existential crisis and need to explore, or

I need to stop seeking and start building—because work precedes calling.

While I’m here (until June 10), I want to lean into exploration. I’ve found some experiences more powerful than others—temples like Ryoanji, palm reading by chance, some garden moments. Others feel empty, even when they're supposed to be profound.

I’m curious: has anyone else chased purpose or calling this way?

For those who have been to Japan: what have you found that was meaningful?
by Nathanba | 2025-05-26 02:07:06+00:00
I mostly agree and I think this is the reason why languages like Python or Ruby succeeded so much. People simply want to use a beautiful, easy to type, easy to read language. They don't care that it's slow and actually quite terrible at runtime and hard to test and so on. They want it anyway because it looks good and feels good. This is also why I've said from the start that I don't believe in ziglang despite all its features. It simply looks too ugly and you can't make that go away. One counter point could possibly be that golang code is also a bit ugly and it succeeded on its technical merits. But it's not quite as bad and the ugliness is voided by a lot of language simplicity.
by sky2224 | 2025-05-26 02:07:10+00:00
Just curious: as a SWE, what are the prospects like in this field? What kind of background would be necessary to step in and what does the demand look like?

I've always been fascinated by nuclear and it seems like a field that's never going to be not needed, but I kind of suck at physics and chemistry.

Very cool stuff to see on your end, nonetheless!
by gerdesj | 2025-05-26 02:07:11+00:00
A JWT can include claims - that's the difference: JWTs are a bit more complicated data structure out of the box. You can do authN and authZ in one go.

You can do it all via individual browser cookies but it will be complicated. However you can dump session cookies to a database and then you can do claims locally on the server and use that cookie to tie it all together.

So I think you can do it either way.

JWTs are mutually authenticated (shared secret) but cookies are not.