MurphyA/hacker-news huggingface dataset:
by notepad0x90 | 2025-05-11 09:52:30+00:00
The Linux foundation should handle kernel module validation and sign-off, by default only certified signers should be allow to load modules just like every other modern OS. users/devs can always override that.

Distros should do the same thing but for user space.

Your attitude on the last paragraph is a big pet-peeve of mine. All problems while someone uses a distro are the distro's problem. period. If I have to install third-party software, the distro is allowing me to do that, it is not "my" problem. It is the distros problem in that they should facilitate secure third-party software package installation and management. They already do that by allowing management of third party repos and package signing keys. Saner distros like ubuntu have a whole third party app market place.

It isn't "random stuff" as you put it, it is software like any other that people want to run. The distro's role is to make that happen best they can. Not every package will be in their repo or managed in a repo. things will never be perfect but this attitude of passing the buck to users instead of at least acknowledging the problem is endemic.
by throwup238 | 2025-05-11 09:54:07+00:00
7-8-9 is the “standard” for calculator keypads but Bell Labs (supposedly) did some research and found 1-2-3 was more intuitive for users when designing the touch tone telephone keypads. When ATMs were being designed, manufacturers in the US/Canada/Europe emulated the telephone keypad while manufacturers in Asia emulated the calculator keypad.
by jasonlotito | 2025-05-11 09:55:51+00:00
I don’t know why you would watch videos where people are goofing around. That seems like a you problem. Instead of picking random reviewers, stick to a few that like the games you like.

And honestly, one of the best reviewers I know does video reviews and puts the recommendation in the title. I still like to listen to the reviews because I can do it while doing other things, unlike reading.
by koliber | 2025-05-11 09:56:50+00:00
I think we'll disagree on that.

Painting is not just capturing the pixels of light on canvas. This is what children consider painting. Great painters capture emotion and energy on canvas -- that's part of the essence that I am alluding to. That's what separates an artist who can realistically capture a scene from a master. Emotionally mature people who experienced life can recognize that emotion and energy in great paintings.

It's kind of like math. Some proofs and formulas are considered elegant or even beautiful. To the untrained eye they look like letters, symbols, and numbers.

Take Euler's identity: e^(i*π) - 1 = 0. My kids see gibberish, since they are in grade school. I see something surprising and neat but don't fully understand it. I've spoken to people who have a deeper understanding of math who can talk wonder about this simple-looking equation and use words of feeling to describe it.
by tgv | 2025-05-11 09:58:21+00:00
If anyone ever check this thread: it works well. Use the json output, and it'll show the call path for each "capability" it detects (network, arbitrary code execution, ...). I use this on the output to organize it into a spreadsheet and scan quickly:

jq -r '.capabilityInfo[] | [.capability, .depPath | split(" ") | reverse | join(" ")] | @tsv'
by IlikeKitties | 2025-05-11 10:00:38+00:00
Overall, I share your reasoning and would concur mostly but there are some rather important caviats, especially regarding this one:

> The only valid argument would be that the victims might not be reading the news about your disclosure on a holiday. But since you are again arguing about software used by a lot of companies (as opposed to private users), I don't see a problem there.

Let's say MegacorpA is a big Software Vendor that makes some kind of Software other Companies use to manage some really sensitive user data. Even if MegacorpA fixes their stuff on the 25th 2 hours after they got an e-mail from you, all their clients might not react that fast and thus a public disclosure could cause massive harm to end users, even if MegacorpA did everything right.

Ultimately, I guess my argument is that there's not a one size fits all solution. But "responsible disclosure" should be reserved for companies acting responsibly.
by balamatom | 2025-05-11 10:00:54+00:00
Modern materialistic thinking is causally downstream from the erasure from language of the distinction between the 2 types of causes -- as exemplified by the following buffonade:

Arlecchino: does something stupid

Pierrot: smacks Arlecchino across the back of the head

Arlecchino: Ow! What for?

Pierrot: Not "what for", but "why", dumbass.

(Been a bacterium btw. Strong emotions all around, as there's nothing to temper them with. Do not recommend. An opamp is nicer - as long as they make sure to keep you within operating parameters, and not put you in a configuration experiencing infinite positive feedback, lmao)
by graemep | 2025-05-11 10:01:33+00:00
I think discussion on HN is far too focused on "AI". It gets a mention, but I think it is a mistake to think it is the entire concern of "another industrial revolution". There is a lot more technological change happening, or that has recently happened than just LLMs, and we have a lot of economic change on top of it.

I think the most interesting thing is that he has specially mentioned Rerum Novarum as a reason for choosing the name Leo.

A few interesting excerpts from Rerum Novarum in the context of current society.

"3. In any case we clearly see, and on this there is general agreement, that some opportune remedy must be found quickly for the misery and wretchedness pressing so unjustly on the majority of the working class: for the ancient workingmen's guilds were abolished in the last century, and no other protective organization took their place. Public institutions and the laws set aside the ancient religion. Hence, by degrees it has come to pass that working men have been surrendered, isolated and helpless, to the hardheartedness of employers and the greed of unchecked competition. The mischief has been increased by rapacious usury, which, although more than once condemned by the Church, is nevertheless, under a different guise, but with like injustice, still practiced by covetous and grasping men. To this must be added that the hiring of labor and the conduct of trade are concentrated in the hands of comparatively few; so that a small number of very rich men have been able to lay upon the teeming masses of the laboring poor a yoke little better than that of slavery itself. "

"42. If we turn not to things external and material, the first thing of all to secure is to save unfortunate working people from the cruelty of men of greed, who use human beings as mere instruments for money-making. "

"If through necessity or fear of a worse evil the workman accept harder conditions because an employer or contractor will afford him no better, he is made the victim of force and injustice."

" 45. Let the working man and the employer make free agreements, and in particular let them agree freely as to the wages; nevertheless, there underlies a dictate of natural justice more imperious and ancient than any bargain between man and man, namely, that wages ought not to be insufficient to support a frugal and well-behaved wage-earner. "
by chii | 2025-05-11 10:02:02+00:00
what if the vulnerability cannot be easily fixed within the week, even if the company stops all work and focus completely on the problem?

If the reason for responsible disclosure is to ensure that no members of the public is harmed as a result of said disclosure, should it not be a conversation between the security researcher and the company?

The security researcher should have an approx. idea of how or what to do to fix, and give a reasonable amount of time for a fix. If the fix ought to have been easy, then a short time should suffice, and vice versa.
by b112 | 2025-05-11 10:02:13+00:00
Many types of vulnerabilities cannot be resolved in one hour. Some require complex thought to resolved.

One hour is absurd for another reason, what timezone are you in? And they? What country, and therefore, is it a holiday?

You may say "but vulnerability", and yes. 100% no heel dragging.

But all companies are not staffed with 100k devs, and a few days, a week is a balance between letting every script kiddie know, and the potenital that it may be exploited in the wild currently.

If one is going to counter unreasonable stupidity, use reasonable sensibility. One hour is the same as no warning.
by ukoki | 2025-05-11 10:02:34+00:00
Two additions:

* Teams wanting to be a viewer for all kinds of filetypes. Why the hell would I want to view a Powerpoint presentation in Teams? What if I want to chat about the presentation, while viewing the presentation?

* Clipboard injection attacks. Who in the history of the humanity ever thought prefixing "[2:10 PM] Kimble, Richard:" into the URL/API key/thing-you-want-to-copy a colleague just sent you was a good idea? Yes I know you can manually highlight the text and copy, but you're forcing me to do intricate mouse movements that take time, dozens of times a day. I just want to triple-click, cmd+c, alt+tab, cmd+p
by dr_dshiv | 2025-05-11 10:04:49+00:00
They are united together in Pythagoreanism. Which Newton, Copernicus and Galileo claimed to be…

For a Pythagorean, the world is made of math: “All is Number.” The math exists in immaterial reality — and harmonies in math manifested as harmonies in the material world (ie “harmony of the spheres”).

Plato merely critiqued that a focus on empirical mathematical modeling distracted from how geometry and other pure mathematics revealed basic truths about reality. I can provide source texts as well.
by delusional | 2025-05-11 10:05:36+00:00
> "Responsible" disclosure is paradoxically named because actually it is completely irresponsible.

It's only paradoxical if you've never considered the inherent conflicts present in everything before.

The "responsible" in "responsible disclosure" relates to the researchers responsibility to the producer, not the companies responsibility to their customers. The philosophical implication is that the product does what it was designed to do, now you (the security researcher) is making it do something you don't think it should do, and so you should be responsible for how you get that out there. Otherwise you are damaging me, the corporation, and that's just irresponsible.

As software guys we probably consider security issues a design problem. The software has a defect, and it should be fixed. A breakdown in the responsibility of the corporation to their customer. "Responsible disclosure" considers it external to the software. My customers are perfectly happy, you have decided to tell them that they shouldn't be. You've made a product that destroys my product, you need to make sure you don't destroy my product before you release it.

The security researcher is not primarily responsible to the public, they are responsible to the corporation.

It's not a paradox, it's just a simple inversion of responsibility.
by stavros | 2025-05-11 10:06:41+00:00
If the vulnerability can't be fixed within the week, maybe the company should be SOL. This will incentivize companies to build their software better, as they'll know that any vulnerability that is hard to fix will mean consequences.

Maybe the mitigation is for the company to take its service down while it works on the problem. Again, a good incentive to avoid that in the first place. Also an incentive to not waste any time after a report comes in, to see and act on it immediately, etc.

At some point, we have to balance customer risk from disclosing immediately with companies sitting on vulnerabilities for months, vulnerabilities that may be actively exploited.
by Rochus | 2025-05-11 10:07:35+00:00
For people interested in a bit more experimental music, here is a piece my friend Beat and I improvised in 2004 (xylophone and grand piano): http://rochus-keller.ch/Songs/Xylophonie-Track01.mp3

and here are three variations generated by Suno which I find totally amazing:

- Bulgarian brass band: http://rochus-keller.ch/suno_2025/Xylophonie-Track01_suno_ba...

- Cuban orchestra: http://rochus-keller.ch/suno_2025/Xylophonie-Track01_suno_cu...

- Jazz rock band: http://rochus-keller.ch/suno_2025/Xylophonie-Track01_suno_ja...
by cedricgle | 2025-05-11 10:08:08+00:00
Looking at the hardware behind the post [1]:

1. Do you have any experience with this kind of processors versus a traditional cluster of raspberry PIs ?: is it less/more stable, or a nightmare in term of executable compilation / compatibility ? 2. Any recommendations for an EU based alternative ?

[1] https://system76.com/desktops/thelio-astra-a1.1-n1/configure
Ask HN: Anyone using Chrome ext with AI for daily copywriting/social media?
by refinedea | 2025-05-11 10:08:32+00:00
I've been exploring the idea of AI-powered Chrome extensions that go beyond simple text generation. Imagine extensions for LinkedIn, X, and Reddit where you can configure tabs with your desired tone, style, and specific AI prompts. This would allow for tailored content generation for posts, comments, and engagement across these platforms.

I'm curious to know:

-How many people in the HN community are currently using Chrome extensions with this level of AI configuration for their daily social media and professional networking? -What are your experiences (positive or negative) with such tools? -Would you be interested in using extensions that offer this level of customization for generating content on platforms like LinkedIn, X, and Reddit? What features would be most valuable to you?

Any insights or recommendations would be greatly appreciated!
by Retric | 2025-05-11 10:09:08+00:00
I’m not disagreeing based on how Plato viewed math but rather physics.

Edit: He didn’t take the real world as a 1:1 mapping with Forms. So, deeper truths flowed from his abstract ideals, but they didn’t directly describe the physical world. We think of physics as descriptive an electron with respond this way to an electrical field, but that wasn’t how he thought of physics. Which is why he would argue studying the world isn’t a path to truth.
by delusional | 2025-05-11 10:12:17+00:00
The security researcher should have an approx. idea of how or what to do to fix.

How is that in any way the responsibility of independent randos on the internet?

If you truly believe these issues should be fixed, the right answer would be to hold companies accountable for timely security patches, overseen and managed by a government department.

I'm not sure thats a good idea, but expecting random security researchers to somehow hold massive billion dollar Enterprises accountable is silly.
by spapas82 | 2025-05-11 10:13:33+00:00
I remember some years ago that I was able to make this less than 1mb. It needed a little tweaking like upx but nothing very complex.

Lazarus should have been the golden standard for creating desktop apps. Every other solution I've tried is subpar either in licensing or costs in general, executable size and resource usage, non native components, extra dependencies etc
by athrowaway3z | 2025-05-11 10:13:58+00:00
If we must do science then why must it be about the validity of her observations?

I'd be more interesting to know which unproven-social-deductions are commonly made by the general population.

Its frankly ridiculous to critique a post not just on its lack of rigor, but on its merit in regards to a hypothesis you've pulled out of thin air.
by metalman | 2025-05-11 10:14:35+00:00
@750 meters, there is no light, and anything that grows down there ,does it very slowly but your right about anybody thinking this will not be a problem at smaller scales closer to the surface Similar technology is bieng used to pump air into abandoned mines and caverns, Also gravity batteries, where an electric train is run up hill and the used as a generator on the downhill run, also used in abandoned mine shafts. And somewhere there is a mine useing giant electric trucks that produce a surplus of electricity through regenerative braking, as the trucks are filled with rock, high on a mountain, and brake the whole way down, but climb back up empty, which uses less energy than what was generated, not significant, other than as highlight of what is possible.
by stareatgoats | 2025-05-11 10:14:40+00:00
Looks like just the thing I have been looking for! Just three minor issues so far. Firstly, when creating an event it seems I can choose dates in the past? As my usecase is for a group of extremely non-technincal people, this could create issues, Secondly: I can't delete an event I created? Or perhaps that could simply create problems (as in: "Sorry, I happened to delete our event - again!"). Thirdly. I'm assuming there is no privacy-related dataharvesting going on, but it would probably serve you well to have an explicit privacy policy which states just that.
by rdm_blackhole | 2025-05-11 10:14:49+00:00
> The church was initially fine with heliocentrism

According to Wikipedia:

> Galileo was given permission to write about the Copernican theory, as long as he treated it as a hypothesis

When the evidence became overwhelming, instead of acknowledging that Galileo was correct...

> Responding to mounting controversy over theology, astronomy and philosophy, the Roman Inquisition tried Galileo in 1633, found him "vehemently suspect of heresy", and sentenced him to house arrest where he remained until his death in 1642. At that point, heliocentric books were banned and Galileo was ordered to abstain from holding, teaching or defending heliocentric ideas after the trial.

I think it is safe to say that the Church was definitely not fine with the heliocentric ideas.

> Also incorrect. The church never had an objection to evolution. Many influential people in the church (such as cardinal Newman) welcomed it. https://inters.org/Newman-Scarborough-Darwin-Evolution

This is a bit disingenuous. Once again according to Wikipedia:

> Pope Pius XII confirmed that there is no intrinsic conflict between Christianity and the theory of evolution, provided that Christians believe that God created all things and that the individual soul is a direct creation by God and not the product of purely material forces.

Basically, the Church has no problem with evolution as long as everyone agrees that evolution happens after God created everything on the planet/in the universe.

To go as far as saying it has no objection to evolution is taking it a bit too far as clearly this acceptance of the theory of evolution is constrained within a very tight framework in which God remains the sole creator of life.
by throwup238 | 2025-05-11 10:14:54+00:00
Yes and no. There is some statistical evidence that American Spirits are “healthier” than Marlboros and Camels and whatnot, because they don’t do the same level of industrial processing. That applies to their loose tobacco too.

Thing is, cigarette filters absorb such large amounts of tar and other nasties that it’s not entirely clear that hand rolled cigarettes can ever be healthier than industrial ones, unless you’re careful to use proper filters every time.
by qwertox | 2025-05-11 10:14:56+00:00
Has there been found a way to properly explain consciousness at all?

You frame it as if there's a wrong way and a correct way. We're still watching the effects of the colors of the oil paint smeared on our hands while we just have an idea of the painting, but we don't even know if using a brush would be better than using a painting knife.

If you explain it the other way around, you'll also face some serious issues. Do we live in a shared reality, independent of us, which allows us to "come in" and interact with other beings, with pre-set rules of how this reality shares ours and other's interactions among all of us, or is this an all-encompassing reality which is the result of the imagination of a single being, possibly even one seeing itself through multiple simultaneous interaction points we call conscient beings in this place we call reality, which this thing has invented all by itself, from the ant walking over a grain of sand to you reading this message on a screen, a screen "we" first had to invent? If not even that is clear, how can anything be easy about any of this?
by drumhead | 2025-05-11 10:15:24+00:00
I dont know how popular Giant Bomb is as a site, but in general video game journalism online is pretty much in the doldrums. Most of the big players from the last 20 years seem to have either disappered or are cutting staff back to the bare minimum. They seem to have become click baity and but dont even get much interaction from viewers.Looking at the Titan of the industry, IGN, they barely get more that 20k views for videos they put out on Youtube, even though they have 19million subscribers. Their audience seems to have moved on from them to individual Youtubers or twitch.

As a business proposition, video gaming sites seem like a money pit with no guarentee of a return. They may have a chance at survival by serving a niche audience that wants a specific type of content, limiting their scope and ambitions. But at the moment I just dont see a comeback for them.
by ffsm8 | 2025-05-11 10:16:03+00:00
mklepaczewski was probably talking about end-to-end. I.e. the number you see in the network tab for request duration - whereas the pricing will only care about the time that the application is actually doing something.

That basically means it starts after the connection was established by the proxy (cloudflare) and terminates before the response is delivered to the client.

Doing the whole round trip within 65ms is actually pretty challenging, even if you are requesting over the wire. It would mean you have maybe 10-20 Ms to query data from the database and process them to html or json. Any kind of delay while querying the database is going to ruin that.

If you had a 65ms in the application, you would probably get a round trip average of something above 90, likely closer to 150 then 90.
by jgerrish | 2025-05-11 10:16:04+00:00
Sure. That's how it could have happened.

If you think the Catholic Church isn't a sharp institution with a pulse on humanity around the globe.

Sometimes institutions know that they are simple shells. That what is truly important is the people that they represent and how they can serve those people.

There are both theological and political implications to that view above.

Maybe serving those people can best be accomplished through humility and throwing a US pope, and their current papacy, under the bus.

That's an incredibly cynical view of Church politics. But then again my first bank account was a Catholic Credit Union and I still remember my days in Sunday School.

That's not an indictment of my upbringing. Nobody gets blamed for funkyness with tying finances to religion or lost accounts or any of that.

That's me saying regardless of what happens with the current pope, whether my views are too cynical or not cynical enough:

There will be no blame or anger for how I was raised and treated. I met beautiful family and friends through the church, and my parents found community.
by fullstackchris | 2025-05-11 10:17:20+00:00
Here's a custom MCP tool I use to run commands and parse stdout / stderr all the time:

try { const execPromise = promisify(exec); const { stdout, stderr } = await execPromise(command); if (stderr) { return { content: [{ type: "text", text: `Error: ${stderr}` }], isError: true }; } return { content: [{ type: "text", text: stdout }], isError: false }; } catch (error: any) { return { content: [{ type: "text", text: `Error executing command: ${error.message}` }], isError: true }; }

Yeah, if you want to be super technical, it's Node that does the actual command running, but in my opinion, that's as good as saying the MCP client is...