MurphyA/hacker-news huggingface dataset:
by blueflow | 2025-06-12 20:33:39+00:00
> The wording "executes the given command" would generally not imply "I'll just throw it at $SHELL and see what happens".

"command" means exactly that. Evaluation by shell. With that in mind, the manual page should read less ambiguous to you.

I actually don't have a good source for that, but you can check the execve(2) manpage. If command would refer to the execution of an argument vector, it would have been mentioned in there.

The other meaning of "command" refers to specific programs like those in /bin.
by dakr | 2025-06-12 20:34:05+00:00
You've probably heard it before, but research and progress go hand in hand, and science is not synonymous with unpractical. For example, data from NASA missions that track water over the globe are used by climate scientists, yes, but also farmers, local water management agencies, and the military. These projects that account for less than half a penny of each dollar spent by the US govt. have a wide range of audiences and uses.
by dhruvrajvanshi | 2025-06-12 20:35:30+00:00
With all due respect, have you read it regularly?

In my experience, WSJ just reports what happened and who said what in a very dry way.

My impression is that their news section provides a very anti Republican party view. Note that this is my impression, not the paper's stance. They don't really take any, apart from the opinion section, which I ignore. The opinion section has a massive pro republican bent.

> Lying by omission

I'll admit, I might have a blind spot here because I'm only reading 2 newspapers. That being said, I'm not sure of any stories reported by the other news outlets which were ignored/downplayed by WSJ.

> apologies and retractions

Happen when they happen. I remember a few per month. But since they're so dry, there's very little scope for major corrections. If they say, "this guy said that", there's very little to correct there. Occasionally, they mis-paraphrase someone and have to correct their report. Most sound like honest mistakes to me.

EDIT:

> You aren't getting any sort of counterpoint you are getting whatever supports his world view.

Fair enough, but you mostly don't get any points to counter in the first place. Only plain dry facts. I go to the Economist for opinions and counter opinions. (*side note, the Economist should publish more counter opinions IMO)
by thaumasiotes | 2025-06-12 20:36:02+00:00
Session cookies are cookies that identify a session. They last however long you specify. A bank forces quick session expiry. Amazon doesn't.

Compare https://docs.djangoproject.com/en/5.2/topics/http/sessions/ .

> To use cookies-based sessions, set the SESSION_ENGINE setting to "django.contrib.sessions.backends.signed_cookies".

> When using the cookies backend the session data can be read by the client.

> A MAC (Message Authentication Code) is used to protect the data against changes by the client, so that the session data will be invalidated when being tampered with. The same invalidation happens if the client storing the cookie (e.g. your user’s browser) can’t store all of the session cookie and drops data.
by cosmic_cheese | 2025-06-12 20:36:27+00:00
The problem with Android is that it’s something of a bad compromise. That one can’t just drop whichver ROM on whatever device undermines the whole thing, and unfortunately nobody in the industry with any kind of power is doing anything to try to fix that situation. I’m not even really sure that it can be fixed so long as smartphones are based around custom ARM boards. Attempts at truly open ARM-based smartphones all have a laundry list of problems mostly thanks to compenent vendors that won’t play nice with drivers and documentation (or if they do, it’s with SoCs so old as to not be remotely competitive).

Following that, I may as well benefit from an overall smoother user experience, better app selection, etc on iOS. It’s not open and doesn’t pretend to be.

I’m keeping my eyes open for a smart device analogue of x86 desktop PCs, though. It might be powered by an open RISC SoC design or maybe someone finally figures out how to make x86 work well in handhelds, I dunno, but the current situation isn’t it.
by NL807 | 2025-06-12 20:36:50+00:00
So she is an arsehole for exposing bullshit? I don't see the problem. I think people take issue with her because of her confrontational persona.

>while she can identify the problem she's not part of the solution

Does she have to be, in principle?

> Her divorce from academia means she has little power to affect change for the better given how the incentives are currently aligned.

Wouldn't be so sure about that. She is getting more public exposure than most academic would in their lifetime. More importantly, exposure to audience _outside_ of academia. Voters. Her effort in creating public awareness has certainly stirred the nest in some academic circles.
by pkkkzip | 2025-06-12 20:37:37+00:00
I do wonder with all the criticisms and faults EU and West points out in other parts of the world, this one country gets a complete pass that overrides and contradicts every single value that they supposedly stand for at the risk of appearing like they have no value or morals.

The rest of the world is getting tired of this double standard. It's justified when we do it and it's a crime if others do it. It's no wonder the youth and global opinions have turned sour.
by NoMoreNicksLeft | 2025-06-12 20:38:08+00:00
They've got the google mail here at work set to make me change the password once per month. The 100-character, unguessable, un-shoulder-surfable password that isn't reused anywhere. In addition to the 2fa I have to use with it. And it will now ask for reauth once per week, which just happens to somehow be 2 minutes before the important weekly meeting I'm supposed to attend which kicks me out of calendar for the link to the Google video meeting.

But at least it makes me reauth.
by al_borland | 2025-06-12 20:38:47+00:00
I see some evidence that yubikeys are used somewhere in the organization, but not sure where or how.

The only information we were sent to get this all setup was specifically for a phone. The portal that exists to add devices only appears to support phones.

I have a co-worker who simply tried to use Authy instead of MS Authenticator and it didn’t work. There is a lot of bureaucracy that typically makes it not worth the fight.
by janalsncm | 2025-06-12 20:39:07+00:00
If I have to give it the algorithm as well as the problem, we’re no longer even pretending to be in the AGI world. If it falls down interpreting an algorithm it is worse than even a python interpreter.

Towers of Hanoi is a well-known toy problem. The algorithm is definitely in any LLM’s training data. So it doesn’t even need to come up with a new algorithm.

There may be some technical reason it’s failing but the more fundamental reason is that an autoregressive statistical token generator isn’t suited to solving problems with symbolic solutions.
by pornel | 2025-06-12 20:39:08+00:00
It's a "unit" in the sense of calling `rustc` once, but it's not a minimal unit of work. It's not directly comparable to what C does.

Rust has incremental compilation within a crate. It also splits optimization work into many parallel codegen units. The compiler front-end is also becoming parallel within crates.

The advantage is that there can be common shared state (equivalent of parsing C headers) in RAM, used for the entire crate. Otherwise it would need to be collected, written out to disk, and reloaded/reparsed by different compiler invocations much more often.
by mindslight | 2025-06-12 20:39:08+00:00
Yes, I did. We are coming from places that are mostly in agreement - I'm not trying to thump some slightly-different no-true-Scotsman version of conservatism here. I am a libertarian, and I was unaligned and came to see the wisdom and failings of both tribes.

My first point is that the people calling themselves conservatives are nowhere close to those values - the people who remain truer to conservatism get called "RINOs" and pushed out of the party (part of the large trend of othering).

My main point is that this distinction is important because calling this movement "conservatism" ends up supporting it - it gives them cover as if they are merely advocating for some measured stick-with-traditions cautious reform and reverting recent developments, while they are actually actively lighting the better part of a century's American institutions on fire and dancing around the blazes - NASA, universities, scientific research, relationships with our allies, foreign outreach, USD as a reserve currency, etc. Never mind their rejection of much older American freedoms like freedom of assembly, right to keep and bear arms, etc.
by aidenn0 | 2025-06-12 20:39:44+00:00
It would be interesting to benchmark this against consumer USB DACs that are marketed for sound. You can get 32-bit 192kHz bandwidth (384kHz sampling rate) DACs now for under $200. Obviously this is much lower bandwidth than the R&S, but I'd be interested to see the dynamic range of a modern DAC when approaching Nyquist; I don't have a strong belief one way or the other over which would win, given that 14-bits of dynamic range is about where the integrity of your analog path starts to matter a whole lot.

[edit]

Sound Blaster claims "up to" 130dB of dynamic range on theirs. Putting aside how much work the "up to" id doing, this would make the last 9 or 10 bits completely useless, even for undithered signals, but I was thinking of something cheaper, by one of those fly-by-night companies with names made of random letters.
by WorldMaker | 2025-06-12 20:39:46+00:00
Yeah, Six Flags basically bankrupted Kentucky Kingdom before they left, sold off a lot of rides and left many in states of disrepair that were hard to come back from. (It didn't help that the bidding process to buy the park out of that bankruptcy involved the Hoosier owners of a rival regional park that eventually gave the impression they may have intentionally been sandbagging the process to stretch out the time the park was left non-operational and without active maintenance.)

It's hard not to worry about the Cedar Fair parks under that sort of management having seen it at its worst first hand once already. Kings Island has a big place in my heart and I saw the Six Flags takeover with some grimacing from the viewpoint of a tiny, tiny shareholder in Cedar Fair.

But also yeah, trying to come back from the CapEx problems Kentucky Kingdom was saddled with by Six Flags is a part of where I have a lot of respect for what Herschend has been doing at the park. It's slow, but steady improvement so far, with a CapEx plan that doesn't seem that aggressive, but also takes into account how much was needed and most importantly seems to be planning for the long term again (versus Six Flags' short-term mentality).
by tonymet | 2025-06-12 20:40:02+00:00
It's a good point on password usability. Signal app periodically prompts you for the encryption PIN to make sure you don't forget it.

I think this should be handled out of band of the login process. Similar to "is xxx still your phone number?" -- companies could do periodic password hygiene and freshness checks.

Context matters. Companies forget that people are trying to get something important done, and blocking them for other attention is a huge frustration.
by twodave | 2025-06-12 20:40:49+00:00
The people who need to read these articles are the auditors. Until they change their expectations, the many businesses who have to pass audits are still going to be stuck doing a lot of things that are industry-standard but also very stupid. This is the case even for small businesses in certain fields where security audits are valued. We have at least half a dozen measures in place that we know aren't actually helpful but we also know auditors won't budge on right now.
by ggregoire | 2025-06-12 20:40:50+00:00
If you don't need server rendering, I'd just recommend React without framework, and Vite [1] to run the app in dev and build the app in prod, then host the build (basically a HTML page with a JS file) on AWS S3 or similar static hosting platforms. That's the solution I've been using for 10+ years without any problem.

For the backend you can use whatever you are comfortable with. I mostly use PostgREST [2] nowadays. I recommend to use react-query [3] to call your APIs on the client side.

[1] https://vite.dev

[2] https://docs.postgrest.org

[3] https://tanstack.com/query/latest/docs/framework/react/overv...
by sgjohnson | 2025-06-12 20:40:59+00:00
> Meanwhile this site disappears a 1500 comment thread about the Marines being used to crush incredibly peaceful resistance to the unconstitutional regime's White Supremacy. US citizens are being violently kidnapped, and for what?

That topic is not intellectually interesting. I don’t really come here for politics, and I’d like to believe that neither do most HN readers.
by sircastor | 2025-06-12 20:41:20+00:00
I have a very old iPad that my kid uses. It’s stuck to iOS 10.3. Also, it can’t use my password manager. The browser is so old that the website won’t load (32-bit app). And the PW manager app isn’t made for this old a device.

So Apple wants me to type in my 50+ character password every time I use the App Store app. It’s such a pain.
by hollerith | 2025-06-12 20:41:21+00:00
The Python code Kragen gave is more characters to type, but fewer footguns.

Shell scripts are much higher in footguns per character than most programming languages.

It is possible for a coder to understand bash so well that he never shoots his own foot off, but it requires more learning hours than the same feat in another language requires, and unless I've also put in the (many) learning hours, I have no way of knowing whether a shell script written by someone I don't know contains security vulnerabilities or fragility when dealing with unusual inputs that will surface in unpredictable circumstances.

The traditional Unix shell might be the most overrated tool on HN.
by lossolo | 2025-06-12 20:41:29+00:00
You're missing a key point about how modern authoritarian regimes operate. Just because a country holds elections doesn’t mean it’s a democracy. Authoritarian systems like those under Orban or Erdogan often maintain the appearance of democracy free elections, parliaments, courts but in reality, these institutions are hollowed out or heavily controlled.

Orban and Erdogan do win elections, but the playing field is far from level.

In both Hungary and Turkey, the judiciary has been systematically brought under the control of the ruling party. Independent courts are a cornerstone of democracy because they ensure that laws are applied fairly and check the power of the executive. When this independence disappears, so does accountability. Free press is another essential pillar. In these regimes, the government or its allies own or dominate most media outlets. Critical voices are marginalized, harassed etc. As a result, voters are often exposed to only one narrative, the government’s making truly informed choice nearly impossible. NGOs, academic institutions, and opposition are often harassed, defunded, or labeled as enemies of the state. This further reduces checks on power and narrows the public discourse. Gerrymandering, changing election laws, and limiting opposition access to media or funding are common tactics. Even if voting itself is not rigged, the entire process leading up to it is skewed.

So when you say "in any free election, Orban or Erdogan have no chance" you're implying the elections are genuinely free and competitive. They are not. These leaders win not because they represent the will of a fully informed and free electorate, but because they control the information environment, the rules, and institutions that should hold them in check. That’s not democracy, it’s authoritarianism dressed in democratic clothing.
by maxdamantus | 2025-06-12 20:42:02+00:00
Microsoft Intune is officially available for Linux. This mechanism doesn't involve making a Linux system pretend it's Windows. It's just about making non-Edge browsers able to authenticate as Edge does.

Microsoft is aware that the authentication is coming from a Linux system, so presumably there are different policies involved.

I don't know how these things are administrated, but the Linux Intune software has a notion of "Compliance" that might involve periodically running some program decided by the company. If Intune decides the system is non-compliant, authentication still works, but Microsoft login knows the compliance status, so it might prevent you from accessing certain applications, depending on what the company has configured.

Also in my experience ability to sign in from Linux can be limited to certain groups, so regular Windows users can't just run Linux without some company approval.
by andrelaszlo | 2025-06-12 20:43:20+00:00
How would Cloudflare's outage cause a GCP outage?

I'm sure it's not entirely impossible, but sounds backwards to me. Sure - a lot of the internet relies on Cloudflare, but I'd be very surprised if GCP had a direct dependency on Cloudflare, for a lot of reasons. Maybe I misunderstood your comment?
by counters | 2025-06-12 20:43:22+00:00
It's not - it actually the core mechanism through which the "Weather Enterprise" works. Over 20 years, an important report from the National Academies [1] laid out how an enterprise comprised of public, private, and academic sector interests could work cooperatively to bolster the public good that is weather and climate information and services. It has always been the domain of the federal government to provide core, foundational data products (including forecasts and raw weather observations of many modalities) for both bolstering academic research as well as private sector innovation. The government's mission in the enterprise leaves plenty of room for private sector players to extend, complement, and supplement the foundational services provided by the public sector.

Sorcerer fits perfectly into the existing framework of the weather, water, and climate enterprise (WWCE). They produce complementary data and ensure that the government has access to it - even if the government must procure it (which they're happy to do - no one expects that these companies should give away all their data, gratis). But they could potentially greatly extend the core global synoptic observation system that powers conventional numerical weather prediction, especially for organizations which are more flexible and can work with broader data sources.

This is the WWCE working well. The real concern is on ensuring continuity - making sure innovative companies like Sorcerer can persist, in perpetuity if necessary (or at least the data products they collect and produce).

[1]: https://nap.nationalacademies.org/catalog/10610/fair-weather...
by amdivia | 2025-06-12 20:43:33+00:00
Your numbers ignore the distinction between combatants and civilians killed. It also does not include those who are killed as a by product of the war. The number you mentioned is how many Israel directly killed. This ignores:

* People who died out of starvation (especially kids and newborns) due to Israel's blockade

* People who died due to lack of medicine due to Israel's blockade

* People who died to the worsening hygienic environment

The estimate we have from research in Lancet go just shy of 200,000 people dead [1]. Note that this was their estimate almost a year ago. Since then many more deaths took place.

And in short, whether you want to admit it's a genocide or not, no one can deny it's a one of the greatest tragedies of the century, and that Israel must be held accountable. Enough is enough.

[1]: https://www.thelancet.com/journals/lancet/article/PIIS0140-6...
by thway15269037 | 2025-06-12 20:43:41+00:00
I hate how prevalent it has become and it's getting even worse. One company that is buying our product has enforced SSO in theirs installation, making access_token lifetime of 15 seconds and refresh_token 4 minutes. For those unaware of OIDC/OAuth/SSO terminology, basically it means "if you lost access to internet for 4 minutes, invalidate your session, invalidate everything, make user go to auth, pick up 2fa, input everything...".

It causes incredible amount of stress in end users, who keep spamming us with tickets how our product logs out them every minute, like when they closed laptop for a minute, went from one building to another or when their VPN simply lost connection while they were on a lunch. It's like hundreds tickets per day when normally it's 3-4 per week.

And you can't really do anything about it, because "muh security standards", "we need to pass audit" and whatever.

I actually want to sit down and calculate how much working hours of everyone involved are wasted every single day, day after day, it's completely bonkers.
by archagon | 2025-06-12 20:43:41+00:00
What blew my mind recently was that I could store an APFS sparsebundle on a NAS drive, then mount it over NFS and use it as a plain old APFS volume. Despite the filesystem layering, it works pretty much like a local volume, albeit with a bit of performance degradation. Seems preferable to something like iSCSI for using APFS with network storage.

Perhaps this new format would work even better?
by piker | 2025-06-12 20:43:44+00:00
That's very kind -- let's hope the legal profession feels the same way. It's certainly inspired by VS code. It's using egui (https://github.com/emilk/egui) under the hood. Big hats off to Emil Ernerfeldt and the team at rerun (https://app.rerun.io/) for the incredible work on a great immediate mode GUI library.
by edanm | 2025-06-12 20:44:13+00:00
> Israel is doing settler colonialism to people that had nothing to do with WW2 and the holocaust. If you have a problem with the Germans, take it up with Germany.

> [...] it is a common understanding that they are being subjected to a Nazi extermination campaign by people (Christian and Jewish Zionists) claiming the Holocaust made them do it

That is not what Israel is doing. Israel is attacking a semi-state that invaded and slaughtered its people. That is the original and majority motivation for the current actions in Gaza.

Some Israelis, who are not representative of the majority but do have outsized political power, also want to resettle Gaza and take the land. I hope they are soon removed from office and from holding any power.

> (meanwhile, the Zionists stole reparations money from Holocaust survivors and considered the survivors weak).

Many of the original citizens of Israel were the Holocaust survivors, and the majority were the Jews ethnically cleansed from Arab lands.

So I'm not sure where you're getting this "The Zionists stole reparations" idea.
by msgodel | 2025-06-12 20:44:20+00:00
Is it practical? The little I've messed with it it seemed borderline useless. All it can do is QUBO and encoding the problem into the machine topology itself is another QUBO problem that has to be done on a classical computer.

People also keep talking about using it for AI but all you can train with it are Boltzmann machines because those are all that map into QUBO problems.
by Uehreka | 2025-06-12 20:45:01+00:00
Is that even knowable? Like, I know they called it “The Astonishing, Unfailing, Bell System” but if they had an outage somewhere did they actually have an infrastructure of “canary phones” and such to tell in real time? (As in, they’d know even if service was restored in an hour)

Not trying to snark, I legit got nerdsniped by this comment.
by Gormo | 2025-06-12 20:45:16+00:00
I have this little one-liner mapped to a hotkey combo:

`bash -c 'xfce4-screenshooter -r -o zbarimg | gxmessage -title "Decoded Data" -fn "Consolas 12" -wrap -geometry 640x480 -file -'`

Works great if you have xfce4-screenshooter, gxmessage, and zbarimg installed. It allows you to draw a box around a screen region, screenshots it, decodes it via zbarimg, and pipes the output into a dialog box with copyable text.