MurphyA/hacker-news huggingface dataset:
by throwaway290 | 2025-06-08 17:40:29+00:00
> Should password managers just store all of your passwords in cleartext instead of encrypting them, since you should be using FDE?

Better analogy, should every random app bundle own custom crypto and encrypt all files and ask user for password just in case some user does not set login password?

An app should do what it does, if secure storage is not its task then it probably should leave it to the os and if it's not DNS resolving then it shouldn't DNS resolve. Is very annoying
by jlaporte | 2025-06-08 17:40:49+00:00
> it moves the responsibility for name resolution from the operating system to each application

Browsers only took on DoH implementation directly because they were solving the cold-start problem for a new protocol. Nothing to do with the spec.

There is support for DoH in all major OSs today, but none have made it a simple box to click AFAIK (we could speculate why).

For macOS, iOS, either via Private Relay (paid) or a configuration profile. Premade profiles: * https://github.com/paulmillr/encrypted-dns

For Windows > In the Registry Editor window open: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters > Right-click within the “Parameters” folder and create a new Dword (32-bit) Value. Name this new file “EnableAutoDOH” and set its value to “2.” * https://superuser.com/posts/1764668/revisions

Linux: * https://dev.to/mfat/how-to-enable-system-wide-dns-over-https...
by wat10000 | 2025-06-08 17:40:59+00:00
Determinism is predicated on what you consider to be the relevant inputs.

Many compilers are not deterministic when only considering the source files or even the current time. For example, any output produced by iterating over a hash table with pointer keys is likely to depend on ASLR and thus be nondetermistic unless you consider the ASLR randomization to be one of the inputs. Any output that depends on directory iteration order is likely to be consistent on a single computer but vary across computers.

LLMs aren’t magic. They’re software running on inputs like anything else, which means they’re deterministic if you constrain all the inputs.
by Lukas_Skywalker | 2025-06-08 17:41:03+00:00
I don’t know if two minutes are possible, but in Berne, Switzerland, the bus line 10 runs every three minutes. Parts of the loop have dedicated bus lanes, but it‘s probably less than a third of the distance.

PDF: https://www.bernmobil.ch/sites/default/files/2025-02/ah_0201...
by OptionOfT | 2025-06-08 17:41:53+00:00
I'd say key-on-cartridge games are a compromise between game-on-cartridge and key on paper / email / virtual entitlement.

I can sell/lend out a game-on-cartridge and I can do the same with the key-on-cartridge ones.

A key on paper / email / virtual entitlement is tied to your account. It cannot be lent out, it cannot be sold.

In fact, except for certain conditions it cannot be inherited. https://arstechnica.com/gaming/2024/05/after-you-die-your-st...

At least key-on-cartridge represent an entitlement tied to a physical good, and not an online identity.
by hn_throwaway_99 | 2025-06-08 17:42:07+00:00
Yeah, I would say "acquisition of and wielding power" is the signature feature of Trumpism, and why he appeals to so many.

Whether true or not (and FWIW, I think it is, at least to some degree), the left largely took the mantra of "tsk tsking" for a long time - you should feel bad about using a plastic straw, bad about driving your car, bad about the US' treatment of Native Americans, etc. etc. So Trump's complete shamelessness is appealing to many

I read a good post recently that explained that Trump and the Republican's rank hypocrisy is a feature, not a bug. It shows that Trump and his team are unbound by the constraints they want to apply to others.
by simonw | 2025-06-08 17:42:51+00:00
Depends on if I'm using them or not!

You can tell which ones I'm maintaining by looking at the commits listed for each one - some of them get tweaked once or twice a month, others are one-and-done abandoned.

I promoted one of them to a separate project: https://www.llm-prices.com started out in my tools collection and now has its own domain and repo: https://github.com/simonw/llm-prices
by whynotminot | 2025-06-08 17:44:07+00:00
I consider myself an engineer more than a “coder” - I solve problems. I don’t really care as much how. I do not enjoy code for its own sake, I enjoy a problem well-solved.

Software engineering turns out to be a way to solve problems and get paid very well.

I’d just as soon do some kind of other problem solving if it was interesting and paid as well.

If performance tuning a SQL query is your idea of a good time, don’t let me yuck your yum. I just need the data to solve whatever problem is in front of me that day.
by zinekeller | 2025-06-08 17:44:25+00:00
> ATC is a safety-critical function that has what amounts to a 100% uptime requirement. Whatever system they're running currently either works or has known flaws that they know how to work around, and air traffic controllers have been trained on these systems for more than a generation now.

The problem is that Eurocontrol (for example) has modernized their systems without much fuss, and UK NATS even has remote tower ATC now (https://www.youtube.com/video/Ii_Gz1WbBGA). It seems that FAA is stuck in the past, not just using old systems because it's reliable.

> Upgrading merely for the sake of being up to date would have been foolish no matter how much funding Congress would have given them.

I would agree if the system is still fit and proper, but even in 2005 the ATC systems in the US is not really fit and proper that there has been multiple plans to rehaul the system. It is really miraculous that the only system failure happened in 2023 (NOTAM offline), but that's due to tireless dedication that's certainly burning unneded manpower.

Unlike in Europe where civil servants have the sway to just do it, it seems that the US is an expert in political bickering on things that aren't really political.
by anonymousiam | 2025-06-08 17:45:03+00:00
Circumventing the role of the operating system in the name of improved efficiency and duplicating a once-centralized function in (some) applications doesn't seem like a well thought out course of action. Why have an operating system at all? Why not just boot your computer to each application you want to run, as was done on the early PCs of the 1980's?

Perhaps we shouldn't use computers to run our applications anymore. Everything could run on a gaming console. That would certainly be more efficient for the applications.
by jackedinkhkt | 2025-06-08 17:45:04+00:00
It's surprising how common 1% event is. Local supermarket has parking lot that only sees 1/4th of it's capacity used daily, but events have it filled up to the brim at least a few times a year. A jitter happening "only" 1% of the time in a game can mean several hitches a _second_, on a webserver you can have several hundred bad customer experiences a second
by dzdt | 2025-06-08 17:45:05+00:00
There is some market for a 2nd vehicle in a family which has more limitations. But the biggest market is for a do-everything vehicle. The question isn't what is the mean or median commute, its what is the 99.9th percentile journey. Sure it can get you to work and back, but can it get you to grandmother's house for Thanksgiving dinner?

I think targetting the 99.9th percentile trip is maybe even a bit low. A commuting American has at least two car trips per typical day, probably more like 5. So 1 trip in a thousand means something that comes up more than annually.
by hn_throw2025 | 2025-06-08 17:45:11+00:00
Very true... I used to be with Sky here in the UK, and at the time they were running a transparent proxy on port 53. Changing DNS providers made no difference to the dnsleaktest results. Don't know if they still do that now.

I'm now with a different ISP, and anyway have PiHole handling DNS queries on most devices in our house. It forwards DNS requests to dnscrypt-proxy running on the same Pi, which uses Quad9 over DoH.
by pas | 2025-06-08 17:46:13+00:00
It seems that these populist ideologies are built on the shared values of chauvinism, revanchism, and various maladaptive psychological copings to the usual problems and hardships of (modern) life.

And it seems that the ends of the spectrum exhibit different manifestations, as in the current "left" uses ideology for purity testing and the "right" uses it for loyalty testing. (I wanted to link to some details on this, but I can't find it now. :/)
by crazygringo | 2025-06-08 17:46:15+00:00
That's stretching the definition of "rich" beyond any possible meaning.

But yes, if you want to talk about the middle-class, which is what you seem to actually be referring to, let's.

In most cities, they've already dropped out of buses. They take their own cars. A more expensive bus service like Uber's probably isn't going to taking much ridership away from public buses, but rather give middle-class people more options, so maybe they don't need a second car.

And again, bus systems are remarkably scalable. Unlike things like subways and light rail. Routes and capacity are extremely flexible. Just because there are more transportation options, doesn't mean there's going to be a demise of city buses.
by AnthonyMouse | 2025-06-08 17:46:33+00:00
> At that point you might as well use DoH.

What benefit is the additional complexity and overhead of HTTP buying you there?

> the DNS operator community (or a big chunk of it) favors DoT and opposes DoH because they want to make it easier to block encrypted DNS; they frame this in terms of "control over their own networks".

This is one of the main issues here: When then DNS operator is you, i.e. your local network at home or your corporate network within your own company, you should be able to control DNS on your own network, which you can't if a bunch of adversarial devices are bypassing your DNS servers.

When the DNS operator is your ISP, letting them block encrypted DNS is bad.

So what we need is some way to distinguish between these situations so that the local network administrator's preferences are heeded but Comcast can go pound sand. But browsers are too late in the stack for that because they have no way to tell if the system DNS server is the one the user wants or the one they got by default from their ISP and never knew to change.
by gf000 | 2025-06-08 17:46:38+00:00
Does preventing data races (which is not particularly hard if you are willing to give up certain properties, e.g. just immutability alone solves it) that much of a win?

You just made a bunch of concurrent algorithms un-implementable that would give much better performance for the benefit of.. having all the other unsolvable issues with concurrency? Like, all the same issues are trivially reproducible at a higher level, with loops within actors' communication that only appear under certain, very dynamic conditions, or a bunch of message passing ending up in an inconsistent state, just not on an "object" level, but on a "group of object" level.
by leakycap | 2025-06-08 17:46:47+00:00
Knowledge is as much about familiarity as anything else

I started my personal knowledge base in the days of Mac OS 8 and still use it. Classic Mac OS with it's spacial finder and 1-to-1 file and window mapping works so well for my brain I still use it today for things I want to save and refer to.

I use & subscribe to AIs, but my personal knowledge is kept in the system I can use like the back of my hand, which happened to be the Macintosh Finder for me.
Show HN: Built a 9MB GPU kernel achieving 43M ops/SEC with deterministic replay
by TacosInMyPocket | 2025-06-08 17:46:54+00:00
I've developed a custom GPU kernel that handles 40+ million parallel agent operations per second while maintaining apparently deterministic results across runs - something typically considered impossible with GPU parallel processing.

Performance demo: https://youtu.be/Y3Jg8RCZ65c Determinism proof: https://youtu.be/fk7NMNGcfSY

The entire runtime is under 10MB. Open to discussing potential applications!

autoscriptlabs@gmail.com
by gsich | 2025-06-08 17:47:00+00:00
>The only difference between DoT and DoH is that DoT is easier to block and force fallback to totally insecure DNS. There's no reason to ever use DoT if you can use DoH. (And I don't get why the author likes it better: whoever runs the DoT server gets the exact same data that they'd get with a DoH server instead.)

Don't use shitty networks then. This is not an issue for all residential (and mobile) connections. Only corporate and other shtity configured networks are affected by this.
by switknee | 2025-06-08 17:48:51+00:00
Buses have slightly lower capex but much higher opex from the perspective of the community. City street gets ripped up by buses, cyclists get caught under the bus and dragged for miles, children get asthma from the tire dust. It being easier to give trams priority at traffic lights and easier to make the tram autonomous are just added bonuses.

Lower flexibility is actually a feature when it comes to mass transit: People will build density along rail lines because they assume the town won't rip them up, making the rail line more valuable over time. A bus route can be cancelled the day after a disruptive mayor is voted into office.

I also don't see why you can't scale up the tram with additional cars, as long as you keep the lbs/sqft the same. 3 car trams are fine, 3 car busses are... not
by vhanda | 2025-06-08 17:48:57+00:00
From the article -

> this paper was not a retrospective study of electronic health records, it was a randomized clinical trial, which is the gold standard. This means that we’ll be forced to immediately throw away our list of other obvious complaints against this paper. Yes, healthier patients may come in the morning more often, but randomization fixes that. Yes, patients with better support systems may come in the morning more often, but randomization fixes that. Yes, maybe morning nurses are fresher and more alert, but, again, randomization fixes that.
by spease | 2025-06-08 17:49:44+00:00
> While Nixpkgs is an amazing resource, Nix != Nixpkgs. Nixpkgs is highly unideal for cases where you want to be able to pull arbitrary versions of toolchains, but it is not the only way to go. For example, there is amazingly good Nix tooling for pulling an arbitrary version of Rust. Other Nix-based developer tools have shown how you can do this well.

It’s so exhausting that every single time a basic use issue comes up with nix, the response is “but there’s a way to work around it (that you need tribal knowledge for and will require writing dozens to hundreds of lines of code to fix in a language that doesn’t work like any of the mainstreams with bad error messages and poorly documented standard libraries)”.

People’s problems with nix are not that it isn’t turing-complete, it’s that it often creates more problems than it solves by refusing to provide a simple first-class API that interoperates with idiomatic projects in that ecosystem that just works.

If every project you try to use nix for devolves into centering around trying to fix issues with nix that you have to write your own modules for, why even bother using nix instead of mainstream tools with good documentation? Exactly what happened in this case. In most cases people are probably just deciding to use docker instead.

Nix’s refusal to address practical developer experience issues for a developer-facing product on a non-geologic timescale in favor of ideological pure flakes is rather frustrating.

Yes, people are contributing their own time, but it’s so damn frustrating to see so much technical effort going into something that’s rendered practically unusable because of bad UX.
by AshamedCaptain | 2025-06-08 17:49:58+00:00
Well, I appreciate the correction: I meant second level (or whatever is most distinguishing for that TLD). However, even if what you say is true, you really cannot disprove my claim with one nitpick, you need to talk majorities. (And, in case it needs to be said: i really don't think the issue here is distinguishing activity to github.io vs github.com)
by RadEng00 | 2025-06-08 17:50:19+00:00
We have to ditch language processing. And we will with online energy based models that machines boot from.

Maxwell could not get the theory of electromagnetism to work until he ditched pulleys and levers he’d included to describe the mechanics.

We won’t get AGI until we realize “there is no spoon” and language has nothing to do with our intelligence, just with out social tribalism: https://www.scientificamerican.com/article/you-dont-need-wor...

Take language out of the equation and drawing a circle, triangles, letters is just statistical physics. We can capture in energy models stored in an online state, statistical physics relative to the machine; its electromagnetic geometry: https://iopscience.iop.org/article/10.1088/1742-6596/2987/1/...

Our language doesn’t exist without humans. It’s not an immutable property of physics. It’s obfuscation and mind viruses. It’s story mode.

The computer acting as a web server or an LLM has an inherent energy model to it. New models of those patterns will be refined to a statefulness that strips away unnecessary language constructs in the system; like a lot of software most don’t use just developers.

I look forward to continuing my work in the hardware world to further compress and reduce the useless state of past systems of though we copy paste around to serve developers, to reduce context to sort through, and improve model quality: https://arxiv.org/abs/2309.10668

Single function factory hardware with embedded “prompt” that will boot from a model and the machines state will scaffold itself from there are coming: https://creativestrategies.com/jensen-were-with-you-but-were...
by AnthonyMouse | 2025-06-08 17:51:02+00:00
> Your ISP knows your real-world identity, whereas Cloudflare just knows your IP address.

Your ISP also just knows your IP address. They may have some information linking that IP address to a person, but so does Cloudflare, which does a MITM on half the internet and thereby knows not just your identity but the things inside the TLS connections you make.

> That'd only be true if the system defaults prevented fallback to insecure DNS, and so far, the few systems that support any form of secure DNS all will automatically do insecure fallback.

So change the system defaults instead of having the browsers disrespect the system settings that may well have been purposely set by the user.
by redwall_hp | 2025-06-08 17:51:51+00:00
Flash was basically a remote shell with some animation tools on top. The Windows malware hell of the early 2000s, with random websites (even a banner ad on the New York Times once) doing drive-by-installs of early ransomware. (Thankfully, cryptolocker ones hadn't started yet...) And if you were a Windows escapee, the Flash experience was absolute trash on OS X and Linux.

It also became clear that the source code was borderline unmaintainable and/or Adobe lost everyone who knew or cared about it after they bought Macromedia.
by brudgers | 2025-06-08 17:52:35+00:00
Making videos is the only way to get started.

You need a phone and a Youtube account.

And to give yourself permission to make crap videos because beginners make crap videos and the only way to not make crap is to learn by doing. [1]

And maybe after years of making videos, you might have a popular Youtube channel. But probably not. So you need to decide what success means on your own terms.

how do I set up for good content material and make my videos interesting and where can I find royalty free music and clips

1. Audio matters much more than video, and so microphones are better upgrades than cameras.

2. Make videos that are interesting to you. Youtube reaches a worldwide audience and whatever interests you also interests thousands of other people. But they cannot find your videos if you don't make them.

3. Google.

Thinking about making is a waste of time. Making is what matters. Good luck.

[1] Alternatively, pay professionals professional rates to make videos for you.
by acidburnNSA | 2025-06-08 17:53:07+00:00
Ahh, good times. I ran a "college dorm floor" website off my computer for a while and included a 997-word marquee on it, just rambling and talking about girls, depression, and philosophy. At the very end there was an exclamation point that was a href to a hidden page. Of course, someone hit view source to read the stupidly long message and found the page anyway.
by hinkley | 2025-06-08 17:53:35+00:00
What I’m saying is that the gate count problem that is profitable is in m³ not n³. And as long as m < n^2/3 then you are n² despite applying a cubic time solution to m.

I would argue that this is essentially part of why Intel is flagging now. They had a model of ever increasing design costs that was offset by a steady inflation of sales quarter after quarter offsetting those costs. They introduced the “tick tock” model of biting off a major design every second cycle and small refinements in between, to keep the slope of the cost line below the slope of the sales line. Then they stumbled on that and now it’s tick tick tock and clearly TSM, AMD and possibly Apple (with TSM’s help) can now produce a better product for a lower cost per gate.

Doesn’t TSM’s library of existing circuit layouts constitute a substantial decrease in the complexity of laying out an entire chip? As grows you introduce more precalculated components that are dropped in, bringing the slope of the line down.

Meanwhile NVIDIA has an even better model where they spam gpu units like mad. What’s the doubling interval for gpu units?
by haberman | 2025-06-08 17:53:46+00:00
I would be satisfied if the language supported this use case by offering a “void my warranty” annotation that let a given source file access the privates of a given import.

Companies with monorepos could easily just ban the annotation. OSS projects could easily close any user complaint if the repro requires the annotation.

This seems like a great compromise to me. It would let you unambiguously mark which parts of the api are private, in a machine checkable way, which is undoubtedly better than putting it into comments. But it would offer an escape hatch for people who don’t mind voiding their warranty.
Show HN: Unified.nvim – A Neovim plugin for inline Git diffs
by axkdev | 2025-06-08 17:53:57+00:00
Hi HN,

I was looking for a way to view diff in a unified/github style in neovim and didn't find any satisfying solution. There are a couple of plugins that partially address like vgit.nvim, but all of them lacked some of the things I need, so I built unified.nvim.

The functionality is very basic. You just call :Unified command with a commit reference as first argument (for ex. HEAD). A tree window opens on the left listing all of the changed files and navigating the tree opens that file automatically in a buffer. It's just a normal buffer with highlights + virtual lines. You can modify it and the diff will update accordingly, also your normal LSP go to definition etc. will work, similarly to diffview. In fact I took a lot of inspiration (but no code) from diffview and it's UI. The reason why this woulld not work as a feature in diffview, is because diffview relies on build in neovim diffing.
by majormajor | 2025-06-08 17:54:39+00:00
> This is sold as a major efficiency of US capitalism, but in fact it's a major inefficiency because it's a severe physical and cultural constraint on opportunity.

I don't think social relationships and their geography are a particular characteristic of capitalism - let alone US-specific capitalism.

They - and the resulting hub/centralization effects - predate it by millennia. There is no shortage of historical cities or state that became major hubs for certain industries or research. How much of the effort in those places is "wasted" seems hard to quantify in an objective way, but again, the pattern of low-hanging fruit being more available to the first wave and then a lot of smart, hard-working people in the future generations working more around the edges is not capitalism-exclusive.