MurphyA/hacker-news huggingface dataset:
by yorwba | 2025-05-12 17:50:20+00:00
> there are a lot of dimensions involved and with 50 dimensions to play with you can always find a projection that makes the 20 points fall exactly where you want them fall.

While it would certainly have been possible to choose a projection where the two groups of words are linearly separable, that isn't even the case for https://nlp.stanford.edu/projects/glove/images/man_woman.jpg : "woman" is inside the "nephew"-"man"-"earl" triangle, so there is no way to draw a line neatly dividing the masculine from the feminine words. But I think the graph wasn't intended to show individual words classified by gender, but rather to demonstrate that in pairs of related words, the difference between the feminine and masculine word vectors points in a consistent direction.

Of course that is hardly useful for anything (if you could compare unrelated words, at least you would've been able to use it to sort lists...) but I don't think the GloVe authors can be accused of having created unrealistic graphs when their graph actually very realistically shows a situation where the kind of simple linear classifier that people would've wanted doesn't exist.
by pfannkuchen | 2025-05-12 17:50:32+00:00
Insurance companies do not externally publish data aggregated by the relevant dimensions, and they do not publish raw data for us to aggregate ourselves.

Let’s for a moment take as a premise that what I’m saying is true. In that version of reality, with all else held constant from our current known reality, would we expect the data publishing to be any different from what we see? It is a politically sensitive topic, after all.

Which is to say, an absence of evidence is not evidence of absence. I won’t publish a book on this topic due to lack of sources. I think discussing it on an Internet forum is acceptable?

I maintain that the impulse to demand sources in such a case comes from moral offense which is then misattributed to epistemological structure offense.
by tptacek | 2025-05-12 17:50:33+00:00
I've spent my entire career doing this, have been personally "threatened" several times, and until relatively recently kept track of researchers dealing with legal threats. The concern is overblown. In cases that go beyond a nastygram from a lawyer, it is almost always the fact pattern that some aggravating factor is present: a consulting agreement that initiated the testing and forecloses disclosure, or the preservation and/or publication of the PII itself, or attempts to pivot and persist access after finding a vulnerability.

It's an especially superficial argument on this story, where the underlying vulnerability has essentially already been disclosed.
by genewitch | 2025-05-12 17:50:44+00:00
i have an idea, if you don't know anything about app security, don't make an app. "Whataboutism" not-withstanding, this actually made me feel a little ill, and your comment didn't help. I have younger friends that use dating sites and having their information exposed to whoever wants it is gross, and the people who made it should feel bad.

They should feel bad about not communicating with the "researcher" after the fact, too. If i had been blown off by a "company" after telling them everything was wide open to the world for the taking, the resulting "blog post" would not be so polite.

STOP. MAKING. APPS.
by Spooky23 | 2025-05-12 17:50:51+00:00
The breakdown in 2022 was:

- Impaired Drivers (60%)

- Passengers of Impaired Drivers (12%)

- Other Vehicle Occupants (16%)

- Non-Occupants of Vehicles (12%)

In the driver category, it's dominated by young males who tend to be poor in terms of compliance. The next cohort of are frequent fliers, any age, with chronic alcohol problems. That said, my understanding is that younger people are drinking less and shifting to cannabis.

Like any problem like this, it's complex. But I'd say that in general, PPE measures turn down the impact of incidents. But PPE for cyclists and others have pretty limited ability to reduce impact, as the physics of a collision at speed are in excess of the protection that can be offered.

Behavior and engineering are what eliminate incidents.
by alok-g | 2025-05-12 17:50:54+00:00
>> The king - man + woman ≈ queen anecdote ...

>> nit. This suggests that the model contains a direction with some notion of gender ...

In fact, it is likely even more restrictive ...

Even if the said vector arithmetic were to be (approximately) honored by the gender-specific words, it only means there's a specific vector (with a specific direction and magnitude) for such gender translation. 'Woman' + 'king - man' goes to 'queen, however, p * ('king - man') with p being significantly different from one may be a different relation altogether.

The meaning of the vector 'King' - 'man' may be further restricted in that the vector added to a 'Queen' need not land onto some still more royal version of a queen! The networks can learn non-linear behaviors, so the meaning of the vector could be dependent on something about the starting position too.

... unless shown otherwise via experimental data or some reasoning.
by bdelmas | 2025-05-12 17:51:25+00:00
Marketing Management by Philip Kotler is the reference.

For the rest it depends on what you need since they are very focused on one domain but for instance for accounting/finance: Cost Accounting by Charles Horngren, or Managerial Accounting for Managers by Eric Noreen is a must.

Strategor - English version by João Albino-Pimentel is amazing. A lot of tools to get started are there with very neat examples from the industry.

I have a few books that are great too. But if there is one to buy it could: The Personal MBA and then for each section get real education one way or another. From textbooks or anything.
by retrac | 2025-05-12 17:51:31+00:00
The government of Nova Scotia, Canada used to host its FOIA releases (similar to American freedom of information laws) on a website, with a URL along the lines of server.example.gov.ns.ca/foiadoc?=00031337

They are public and intended to be publicly accessed. A clever teenager [1] noticed -- hey, is that a sequential serial number? Well, yes it was. And so he downloaded all the FOIA documents. Well it turns out they aren't public. The government hosted all the FOIA documents that way, including self-disclosures (which include sensitive information and are only released to the person who the information is about). They never intended to publicly release a small subset of those URLs. (Even though they were transparently guessable.)

Unauthorized access of a computer system carries up to 10 years in prison. The charges were eventually dropped [2] and I don't think a conviction was ever likely. Poor fellow still went through the whole process of being dragged out of bed by armed police.

[1] https://www.cbc.ca/news/canada/nova-scotia/freedom-of-inform...

[2] https://www.techdirt.com/2018/05/08/police-drop-charges-file...
by harddrivereque | 2025-05-12 17:51:49+00:00
It should be obvious to everyone, not just about UK, but all sorts of war invoke this. I mean, we all know about torture in Guantanamo and even on European soil, and it wasn't even that long ago. What makes anyone think anything has changed? Why would it change? Is there an incentive? Sure, there are courts and theoretical conventions, but the system is not perfect, there is no enforcement and also no incentive to enforce it. For all I know there is lack of enforcement for all kinds of crime - just extrapolate the mess with simple street crime to warzones and it doesn't seem as surprising anymore, does it?
by Jensson | 2025-05-12 17:51:50+00:00
> But that only gave the impression of helping creative people: today, any new creative person has to compete with the entire reproducible cannon of all of humanity before them — can you write fantasy so well that new readers pick you up over Pratchett or Tolkien?

That is even worse without copyright, as then every previous work would be free and you would have to compete with better works that are also free for people.
by goda90 | 2025-05-12 17:52:15+00:00
Some argue that autonomous driving will enable even worse infrastructure choices if we don't plan ahead. The Youtuber Not Just Bikes, for example, did a video called "How Self-Driving Cars Will Destroy Cities (and what to do about it)"[0].

If we start focusing on making alternatives to cars the most attractive options now, they can still be the most attractive(and efficient and safe) options even with self-driving cars everywhere.

[0]https://www.youtube.com/watch?v=040ejWnFkj0
by shlomo_z | 2025-05-12 17:52:48+00:00
Laws get pushed off for all kinds of reasons.

It seems like this was pushed off to give businesses more time to comply.

Many kinds of businesses have subscriptions, each with a different situation. Some small businesses don't even have a programmer.

Requiring a phone call is not always (although often is) to make it difficult to cancel. Often it's because a company doesn't have the proper infrastructure for the frontend.

So I think it's reasonable that they are giving companies some time.

In the end, I hope that on July 14th this goes through, it will be a big win for consumers.

EDIT: My answer didn't fully address the question, so let me add: I don't think is the result of Trump trying to be friends with billionaires for their money. I understand why it seems that way - because he literally does that. But this doesn't seem special or extraordinary. Enforcement of laws gets pushed off all the time.
by luckydata | 2025-05-12 17:53:18+00:00
a small nit: while I understand this is an introductory article, I think it's a bit TOO introductory. You should at least give a preview of a "killer app" of embeddings to make me want to read the next installments, I read the entire article and I'm not sure I learned anything useful or insightful that I didn't know before. I feel you held back too much, but thanks for sharing that's appreciated.
by paddy_m | 2025-05-12 17:53:40+00:00
miles driven/person is also a choice that the US has made.

Even in sprawling suburbia, most trips a person takes are under 3 miles, eminently bikeable, but the bike infrastructure and built environment sucks for that. So people drive, from parking lot to parking lot.

The fact that the US is huge doesn't mean that the majority of miles driven are on long trips.
Show HN: Turn your football knowledge into a challenge game
by wyethdev | 2025-05-12 17:53:58+00:00
Hi HN I'm Wyeth, a software engineer who recently started teaching myself mobile development after work hours.

After 6 months of coding in my free time (mostly late nights and weekends), I just launched Who Is That Player | Football — a mobile app where you guess football (soccer) players based on their image and team badge.

From that core mechanic, I built different game modes (by league, by country, by club), daily challenges, a global ranking system, tasks and rewards, bonus systems, and more. It’s kind of like a casual trivia game but with competitive layers for football fans.

This was a 100% solo effort: design, code, assets, backend, testing. No budget, no team, just a passion project. I’d love your feedback — on UX, tech stack, monetization ideas, or just what you’d expect from a football fan app.

Here you have download links:

Android: https://goo.su/bDN0hbNiOS iOS: https://goo.su/dU6Qw

Happy to answer anything! Thanks for reading
by emaro | 2025-05-12 17:54:06+00:00
Basically, but it gets even better. If you allow directions of 'meaning' do wiggle a little bit (say, between 89 and 91 degrees to all other directions), you get a lot more degrees of freedom. In 3 dimensions, you still only get 3 meaningful directions with that wiggle-freedom. However in high-dimensional spaces, this small additional freedom allows you to fit a lot more almost orthogonal directions than the number of strictly orthogonal ones. That means in a 1000-dimensional space you can fit a huge number >> 1000 of binary concepts.
by foxglacier | 2025-05-12 17:54:30+00:00
OK, so a fellowship is the government pays you to learn. I didn't know about that system before but it sounds like financial aid with a fancy title. Furthermore, it's not science - the field is education. These fellows weren't part of a pipeline of experts. America isn't in danger of running out of the education part of developing experts, it has no shortage of degreed people.
by leeter | 2025-05-12 17:54:43+00:00
It's a complicated space. There are attacks on both maintained and unmaintained stacks. There are definitely attacks against windows 95/98 too because people have things like mills or other industrial automation that are powered by those OSes still connected to the internet. There is a lot of SCADA[1] too that fits that bill. It's easy to think "but why wasn't this replaced!" and the answer is almost always "cost or process certification". If the operator is lucky and has good networking folks all of this is in a very very well firewalled VLAN. But, never underestimate the amount of people that are not that savvy and just have it plugged into the internet.

For anyone saying these aren't targets, no they are probably already hacked. These are the things that keep the national security folks up at night knowing an adversary has them already backdoored and set up for take down. Moreover if they execute on that they would go for maximum damage first to either create chaos, or prevent the system from being repaired easily.

[1]https://en.wikipedia.org/wiki/SCADA#Security
by 12_throw_away | 2025-05-12 17:54:52+00:00
Hot take: just like real engineers, there should be a Software Engineer licensing exam that's legally required before you can handle PII ... because this is the alternative.

Before I was allowed to hand out juice cups at my kids' preschool, I had to do a 2 hour food safety course and was subject to periodic inspections. That is infinity% more oversight than I received when storing highly sensitive information for ~10^5 users.
by Projectiboga | 2025-05-12 17:54:52+00:00
There are multiple potential fusion reactions, duterium and tritium like in our home star The Sun is the most researched. There is also research into ones with Lithium and other left side elements. Finally the one I think has the best future is aneutronic fusion with Boron11 plus hydrogen, it gives off three alpha particles which can be converted directly to electricity. the leading model is Field Reversed Fusion. https://spectrum.ieee.org/aneutronic-fusion
Ask HN: Any recommendations for a portable music player
by laserstrahl | 2025-05-12 17:54:53+00:00
Hey HN,

Can you help me which portable DAP to buy? I used the rockbox derivates. But dunno which one I should use. The modern ones would be too pricey. Like the shanling etc. But maybe you can tell me how do you listen to FLAC music on the go? Is there anything I can buy?
by stocknear | 2025-05-12 17:54:54+00:00
Hey folks,

I’ve been preparing the dataset for my congressional database and one particular politician was standing out the most.

Rep. Rob Bresnahan’s (R-PA) recent stock activity is surpassing the +150 trades mark. That’s a lot of button-pushing for any investor, let alone someone in Congress.

A few things jumped out at me:

Trade Frenzy: Over 150 individual trades in just 31 days—that’s almost five trades a day, on average.

All Over the Map: He’s not sticking to one corner of the market. Huge tech names (NVIDIA, Alphabet, Texas Instruments), pharma heavyweights (Pfizer, Eli Lilly), even energy players (ConocoPhillips, Occidental Petroleum).

Mid-Sized Bets: Most of his buys and sells land in the $1K–$15K zone, but there are definitely some chunkier moves in the $15K–$50K range.

Buy & Sell Balance: It’s not just one-way traffic—he’s selling almost as much as he’s buying. Sounds like active day trader instead of a “buy-and-forget” play.

When lawmakers trade this much, it puts the spotlight on possible conflicts of interest. Are they making policy while secretly banking on the very industries they regulate? Current rules are supposed to keep things aboveboard, but clearly there’s room for debate on tightening up those ethics guidelines.

If you want to keep tabs on what our elected officials are doing in the markets, check out Stocknear
by mtlynch | 2025-05-12 17:56:33+00:00
This is a pretty confusing writeup.

>First things first, let’s log in. They only use OTP-based sign in (just text a code to your phone number), so I went to check the response from triggering the one-time password. BOOM – the OTP is directly in the response, meaning anyone’s account can be accessed with just their phone number.

They don't explain it, but I'm assuming that the API is something like api.cercadating.com/otp/<phone-number>, so you can guess phone numbers and get OTP codes even if you don't control the phone numbers.

>The script basically just counted how many valid users it saw; if after 1,000 consecutive IDs it found none, then it stopped. So there could be more out there (Cerca themselves claimed 10k users in the first week), but I was able to find 6,117 users, 207 who had put their ID information in, and 19 who claimed to be Yale students.

I don't know if the author realizes how risky this is, but this is basically what weev did to breach AT&T, and he went to prison for it.[0] Granted, that was a much bigger company and a larger breach, but I still wouldn't boast publicly about exploiting a security hole and accessing the data of thousands of users without authorization.

I'm not judging the morality, as I think there should be room for security researchers to raise alarms, but I don't know if the author realizes that the law is very much biased against security researchers.

[0] https://en.wikipedia.org/wiki/Goatse_Security#AT&T/iPad_emai...
by voytec | 2025-05-12 17:56:35+00:00
I've also hit this link trying to get any info on "Cerca". It's from April 2025 and praises app created two months earlier. It looks like a LLM-hallucinated garbage. OP's entry mentions contacting Cerca team in February. So either this entry is about a flaw detected at launch date or some weird scheme.

Nonetheless: "two months old vulnerability" and "two months old students-made app/service".
by int_19h | 2025-05-12 17:56:43+00:00
Funnily enough, the "ANSI" versions of Win32 functions are no longer considered a legacy thing, now that the OS offers UTF-8 as the supported encoding, and apps can explicitly request it (regardless of non-Unicode codepage setting) via manifest:

https://learn.microsoft.com/en-us/windows/apps/design/global...
by drogus | 2025-05-12 17:56:45+00:00
While I agree with the sentiment here, ie. that Ruby doesn't necessarily need namespaces, I think it's also not necessarily good to base Ruby usage on what Shopify is doing. They have so many expert Ruby devs, and whole teams that write extra tooling, that I'd argue they shouldn't be compared to pretty much most of the usage of Ruby/Rails out there
by MaxMJE | 2025-05-12 17:56:50+00:00
Full-Stack Developer (React/Node) – Help Build a Stealth E-Com Platform (Remote US, Equity+Cash)

We're building a new rich media platform that’s currently in stealth mode. Looking for a co-founder with a track record of building successful E-Com or Social platforms. You’re teaming up with world class talent, to deliver on a proven model that’s already created revenue.

Do you have an interest in culture, or storytelling? Do you cruise social for the next big thing? Do you have a die hard fan mentality? If so, you’re a perfect fit

What You’ll Do - Build and own features across both front-end and back-end - Knowledge of AI Integration is a plus - Architect the foundation of the digital product - Help design user flows. - Work closely with the team to ship and iterate fast - Contribute to both technical decisions and early product feedback What We’re Looking For - Strong full-stack engineering ability, you’ve shipped real products end-to-end with a focus on mobile - Experience with front-end frameworks (React, Vue, etc.) / back-end stacks (Node.js, Python, Go, etc.) - Familiar with GraphQL or REST APIs, and managing databases (Postgres, MongoDB, etc.) - Solid understanding of UI/UX principles and a good eye for product design - Independent builder mindset, self-driven, comfortable with ambiguity, and fast execution - Extra bonus: experience in the development of creator tools

Compensation - Hybrid role: equity + cash - Fully remote, timezone-flexible - Tons of ownership and creative freedom - Early builder status: You will help craft the vision, the product, the roadmap, and the company overall
by dns_snek | 2025-05-12 17:56:59+00:00
The problem with this kind of analysis is that it doesn't even try to address the reasons why copyright exists in the first place. This belief that training LLMs on content without permission should be allowed is incompatible with the belief that copyright is useful, you really have to pick a lane here.

Go back to the roots of copyright and the answers should be obvious. According to the US constitution, copyright exists "To promote the Progress of Science and useful Arts" and according to the EU, "Copyright ensures that authors, composers, artists, film makers and other creators receive recognition, payment and protection for their works. It rewards creativity and stimulates investment in the creative sector."

If I publish a book and tech companies are allowed to copy it, use it for "training", and later regurgitate the knowledge contained within to their customers then those people have no reason to buy my book. It is a market substitute even though it might not be considered such under our current copyright law. If that is allowed to happen then investment will stop and these books simply won't get written anymore.
by FirmwareBurner | 2025-05-12 17:57:28+00:00
>But only the whistleblower and one other were tried and convicted:

Of course, what did you expect? Murder is legal if it's for the government, and, exposing your government's secret dirty laundry is a crime against the law. Business as usual everywhere.

I'm not aware of any government that rewards you when you exposed it as fool/criminal in front of their voters and the world. Hence why whistleblowers get the book thrown at them, as there's one set of rules for the plebs and another for the super wealthy and powerful.

And do you know what's most ironic? We're rewarding our own soldiers for the same crimes we hanged the Nazi soldiers for. Another proof that the legality of right VS wrong, good VS evil, has less to do with morals and more to do with whether you're on the victorious side of history.
by raufakdemir | 2025-05-12 17:58:08+00:00
I assume you're talking about the data layer (not the control plane)? We are currently in PoC phase for mapping the role graphs from source systems (Asana, Google Drive) to our internal role model, but this is still in the works. The way developers work around this atm is by configuring a connection on a subset of the source info. Example: only make Airweave sync info from the `Shared Drive/Marketing/Branding` path
by hermitShell | 2025-05-12 17:58:21+00:00
Coming at it the other way, someone is intellectually and philosophically free if they choose to be that way, full stop. They bend their neck to the yoke of an organization in order to gain what they could not gain themselves without access to capital.

For a small few, they can access capital and work for equity while themselves being maintained as they work. But I think it's very common that smart people chafe at the restrictions of their organization, not being able to find a more favorable situation.
by secalex | 2025-05-12 17:58:29+00:00
IANAL and this is not legal advice, but you probably fine reverse engineering a mobile app and intercepting your own network traffic. He was doing ok until he started enumerating IDs in their database, at which point he started venturing into the territory that got weev 3.5 yrs.

https://www.wired.com/2013/03/att-hacker-gets-3-years/

I am not endorsing this interpretation of the CFAA, but this kid needs a lawyer.