MurphyA/hacker-news huggingface dataset:
by lelanthran | 2025-06-02 04:51:27+00:00
Varies from vendor to vendor; signed-binaries-only is part of the certification process but the exact mechanism itself is not (or maybe that has changed, not sure).

The way it worked in 2003 (when I first wrote EMV applications) was, when we have a binary that we are ready to deploy, we ship that binary to the manufacturer (Schlumbeger(sp?), at that time), if it passes cert-testing, they sign it and ship it back and that's what we would program the terminals with.

The way it works now is pretty much the same - we build an APK bundle, send it to the manufacturer (Verifone, Pax, etc) and after signing they make it available on their appstore which their terminal can access.
by bravesoul2 | 2025-06-02 04:52:09+00:00
I am guessing it minimises irreversible operations (information deletion), I.e.:

2 + 2 + 2

<=> reversable

2 + 2 + 2, 2 + 4

<=> reversable

2 + 2 + 2, 2 + 4, 6

=> irreversible

6
by Aurornis | 2025-06-02 04:52:27+00:00
There is an offline feature, it just didn’t work properly.

Having offline access to documents is a solved problem in cloud-backed apps, including Figma. All of the comments about the cloud component must be from people who have never used Figma. It’s not an inherently broken thing, it was just broken in Slides.

Figma’s other tools are generally good. That’s why it’s so confusing that they released Slides in such a broken state.
by Fezzik | 2025-06-02 04:54:03+00:00
I don’t know how this would work for CS, but in law school I had one professor that did final oral examinations as follows: there were about 15-20 cornerstone topics from the class that were possible exam questions and were announced a few weeks before finals. Then, during finals week(s), each student had a 30 minute block during which they would randomly select 3 of the 10 topics by pulling note cards and engaging in a conversation about the topic with the professor. If you knew the basics of the topic you were almost guaranteed a B or B+; if you demonstrated novel or expansive knowledge you got a higher grade… and you really had to not study to get a C+ or lower.

There are flaws in every method of measuring competency but I thought this was one of the better ones, and it is very difficult to cheat on. His exams were by far the least grumbled about and I don’t recall a single student that thought the method was unfair. And even though this required more upfront work from the professor he said it was ultimately less time consuming than grading written exams, and far more enjoyable.
by emidln | 2025-06-02 04:55:43+00:00
If you take a look at the binary that decides whether to boot the secure firmware or the tamper screen, it's probably trivial to patch to get the secure firmware running for more inspection. If the point of the linux system is networking and updates, that implies a method for updating the firmware of the secure portion which isn't ideal. If their check for whether it's tampered or not is in the linux userland, I'd be awfully suspect of their firmware update.
by ryao | 2025-06-02 04:55:56+00:00
I hope your business works out for you and I am willing to believe that AMD has improved somewhat, but I do not believe AMD has improved enough to be worth people’s time when Nvidia is an option. I have heard too many nightmares and it is going to take many people, including people who reported those nightmares, reporting improvements for me to think otherwise. It is not just George Hotz who reported issues. Eric Hartford has been quiet lately, but one of the last comments he made on his blog was not very inspiring:

> Know that you are in for rough waters. And even when you arrive - There are lots of optimizations tailored for nVidia GPUs so, even though the hardware may be just as strong spec-wise, in my experience so far, it still may take 2-3 times as long to train on equivalient AMD hardware. (though if you are a super hacker maybe you can fix it!)

https://erichartford.com/from-zero-to-fineturning-with-axolo...

There has been no follow-up “it works great now”.

That said, as for saying you have a conflict of interest, let us consider what a conflict of interest is:

https://en.wikipedia.org/wiki/Conflict_of_interest

> A conflict of interest (COI) is a situation in which a person or organization is involved in multiple interests, financial or otherwise, and serving one interest could involve working against another.

You run a company whose business is dependent entirely on leasing AMD GPUs. Here, you want to say that AMD’s hardware is useful for that purpose and no longer has the deluge of problems others reported last year. If it has not improved, saying such could materially negatively impact your business. This by definition is a conflict of interest.

That is quite a large conflict of interest, given that it involves your livelihood. You are incentivized to make things look better than they are, which affects your credibility when you say that things are fine after there has been ample evidence in the recent past that they have not been. In AMD’s case, poor driver quality is something that they inherited from ATI and the issues goes back decades. While it is believable that AMD has improved their drivers, I find it difficult to believe that they have improved them enough that things are fine now, given history. Viewing your words as being less credible because of these things might be unfair, but there have been plenty of people whose livelihoods depended on things working before you that outright lied about the fitness of products. They even lied when people’s lives were at risk:

https://hackaday.com/2015/10/26/killed-by-a-machine-the-ther...

You could be correct in everything you say, but I have good reason to be skeptical until there has been information from others corroborating it. Blame all of the people who were in similar positions to yours that lied in the past for my skepticism. That said, I will keep my ears open for good news from others who use AMD hardware in this space, but I have low expectations given history.
by bravesoul2 | 2025-06-02 04:56:26+00:00
Isn't it all reversable if you keep the original data?

Let f: V -> V

g: V -> V x V is reversable form of f, where g(v) = (v, f(v))

g'((v, w)) = v

g' can be "fooled" with a fake w, but that is of no concern here. We trust our own chip!
by tpetry | 2025-06-02 04:57:37+00:00
I would love for Tailscale to work on a "paranoid mode". At the moment, you can be sure that Tailscale can't add machines to your network with Tailnet Lock where you have to authorize a new machine from a trusted node and not from the UI (which Tailscale could also do without me clicking it). That's great feature compared to their competitors which basically have a backdoor into your network.

But changing ACLs and many other changes can be done from the WebUI without needed authorization from a host. So I have to authorize the change in the UI - but Tailscale could really also do it without my consent. Would be great to have a mode that _ANY_ change to the Tailscale network must be authorized from a trusted node with a detailled changeset. So I could be sure that Tailscale can't tamper with my network.

Sure, I could run Headscale and completely work without the Tailscale servers. But I prefer to pay them the small monthly fee to not have to manage this central service of my fleet.
by americanratings | 2025-06-02 04:59:49+00:00
American Ratings Inc. is a global business identity certification agency dedicated to enhancing the credibility, visibility, and branding of entrepreneurs, enterprises, and professionals worldwide. As an official facilitator of the American Business A-I-R-S Number, issued through the recognized portal www.abn.us.com, we help individuals and companies establish a prestigious and internationally respected business profile.

The A-I-R-S Number (American International Registry System) is a premium, private sector certification designed to symbolize global recognition, trust, and status in business. It is ideal for CXOs, founders, consultants, business owners, and independent professionals who want to stand out in a competitive marketplace, especially in international trade, partnerships, and high-value branding.

With a mission to empower business leaders across borders, American Ratings Inc. serves clients in the United States, the Middle East, Asia, and Africa. Whether you’re a startup founder in Riyadh, a real estate developer in Dubai, a consultant in Mumbai, or an e-commerce entrepreneur in New York, the A-I-R-S Number helps you present your business with American-standard professionalism and prestige.

Certified businesses receive a unique A-I-R-S Number, an official certificate, digital badge, and access to ongoing promotional and branding tools that help establish trust across B2B and B2C environments. Our clients often use their A-I-R-S credentials in pitch decks, LinkedIn profiles, websites, and email signatures to boost confidence in deals and elevate their professional image. American Ratings Inc. is not affiliated with any government entity. The A-I-R-S certification is a voluntary, non-regulatory recognition meant for business positioning and reputation building.

Join thousands of respected professionals who have secured their American Business A-I-R-S Number and elevated their business status worldwide.
by mdaniel | 2025-06-02 05:01:16+00:00
Well, I did say that I'd enjoy learning more, because I'll join in any good rant about autovacuum being some "oh gawd"

But, let's be real talk here: what kind of RDBMS ships with a flag named "strict sql mode" that's available to be set to something? Its reputation wasn't born from uncharitable twitter take downs, it was the kind of thing I had to try in order to know if it still did crazypants things like `CREATE TABLE foo (d DATE); INSERT INTO foo VALUES ('lololo')`. So, sure, I hear you about "it hasn't been stupid for 10 years" but don't lose track of the first part of that qualifier

I hear rumors that Mongo isn't insaney pants anymore, either, but I for damn sure ain't running that shit and will quit places that do
by o11c | 2025-06-02 05:01:20+00:00
`pom(6)` from `bsdgames` might already be installed on your system to do this. Source comments indicate it was originally based on prior versions of the same book but updated to the Third Edition in 1998.

For "implement simple task in many languages" you should probably think of Rosetta Code, now at https://rosettacode.miraheze.org/wiki/Rosetta_Code
by MangoToupe | 2025-06-02 05:01:23+00:00
TikTok caps video length. Indeed, the #1 issue with youtube is the videos are way too long. (Also the ads, and comments, recommendations, search, etc,) but video length is certainly why I haven't bothered to watch anything on youtube for a long time (edit: logged in. I still watch clips people send me ofc in the group chat ofc). I'd delete my account if it weren't tied to my email for some inexplicable reason.
by bluefirebrand | 2025-06-02 05:02:56+00:00
> End up quitting jobs at the two year mark due to friction

This resonates strongly with me.

I find past the two year mark at a company I wind up starting to burn out and causing friction with my management and teammates

Unfortunately I don't have the savings to retire or anything, and job hopping so frequently is a big challenge for me. I'd really like to find a way off of the treadmill and into less stressful day to day operating
by bravesoul2 | 2025-06-02 05:02:59+00:00
Ones that studied CS and got a good grade.

Formal systems may be easier than React to understand (assuming decent effort put into both) as there is more of a disciplined teaching culture around it. useEffect is a feature of a framework React made by a tech company, with coders taking the mantle of teaching it to others.

I'm not joking.
by bilbo0s | 2025-06-02 05:04:10+00:00
But you do that in OGL in any case. Most software dealing with that large an asset base does so using the old fashioned shared context style threading.

It’s all gonna come down to how fast is your IO and how fast is your memory. 6 secs to load all that data, be it via vulkan style threaded submissions or OGL style threading via shared context and syncing, is not likely to happen on most laptops. Even workstations may struggle to read in and generate the necessary data. Most of the reading and generation stage is usually happening entirely outside of the gpu. All of the reading. And most of the generation. Both are going into main memory first.

Again, generation will be way faster than read in assets, but most of the assets would be getting read in. That’s IO before you even make a single vulkan or OGL call. No way around it.
by lucasb001 | 2025-06-02 05:04:49+00:00
Hello guys! The purpose of the article is to go beyond the CRUD and basic database transactions we deal with on a daily basis. It applies essential concepts for those looking to reach a higher level of seniority. Here I tried to be didactic in deepening when to use optimistic locking and isolation levels beyond the default provided by many frameworks, in the case of the article, Spring.

Any suggestions, feel free to comment below :)
by anonym29 | 2025-06-02 05:05:00+00:00
Lol... Implying I'm worse than the company that voluntarily complied with the illegal conspiracy by NSA employees to spy on the whole country via corporations as a loophole around the fourth amendment, to lie about it to the general public, and to lie about it to congress.

I'm worse than them for the grave, unforgivable sin of... viewing videos that other people put on the internet (without compensation) for the sole purpose of enabling other people to view the video... while I had the "wrong" browser extension installed?

Am I getting all this correctly?
by MangoToupe | 2025-06-02 05:05:29+00:00
Interesting. I would have thought that a reversible computation would produce a new algorithm with the domain and range swapped. Naming truly is the final boss of computation. But now I see it's one-step backtracking in a way that allows saving energy, supposedly. Very much still reversible, but definitely nothing remotely comparable to time travel. "uncomputation" was the much, much better name.

Edit: i see now. Well, this is much less exciting than I thought. Still, I'm excited for all the other people excited.
by npalli | 2025-06-02 05:08:10+00:00
People will do anything to avoid reading and maintaining someone else's code. If that means rewriting in native and someone (usually VC's) is paying for it so be it. If you think working in existing TS/JS code is hard, wait until someone hands you their 100k+ line Rust code and asks you to make changes. In five years, another big shift to rewrite and change everything.
by sriram_malhar | 2025-06-02 05:10:51+00:00
I think Scratch is fantastic. You get concurrency, timers, reactive programming, multi-media, design elements, and no syntactic rules to learn. So many concepts.

As a next step, I'd suggest GoboScript, that was on HN a few days back. https://news.ycombinator.com/item?id=44026799

This is Scratch with a textual interface, with a few lovely and much needed extras.
by duskwuff | 2025-06-02 05:11:14+00:00
Or wildly misinterpreting a source. A few months ago, I saw an especially egregious example where, when asked for the maximum current capacity of a 22 AWG copper wire, Google's AI responded confidently with "551 amps".

The correct answer is two orders of magnitude lower, around 5-7 A. 551 A is the fusing current of that wire - i.e. the current required to make it instantly melt.
by crq-yml | 2025-06-02 05:13:02+00:00
The thing that really drove the PC era was that the commodity desktop spec was rapidly gaining capability, compilers for them were getting good enough to depend on high-level languages, and the most affordable way to meet the market where it was, was not to build custom(as had been the case in the 80's when looking at stuff like video editing systems, CGI, digital audio, etc.) but to use Microsoft as a go-between. All the heralded architectures of the 80's were doing things more custom, but it amounted to a few years of advantage before that convergence machinery came along and stripped away both customers and developers.

Apple did survive in that era, though not unassisted, and the differentiation they landed on(particularly after Jobs came back) was to market a premium experience as an entry point. I think that is probably going to be the exit from today's slop.

In this era, spec is not a barrier - and you can make <$100 integrated boards that are competent small computers, albeit light on I/O - and that means that there's a lot more leeway to return to the kinds of specialty, task-specific boxes that the PC had converged. There's demand for them, at least at a hobbyist level.

For example, instead of an ST and outboard synths for music, you could now get an open-source device like the Shorepine Tulip - an ESP32 touchscreen board set up with Micropython and some polished DSP code for synths and effects. It's not powerful enough to compete with a DAW for recording, but as an instrument for live use, it smashes the PC and its nefarious complexities.
by ysosirius | 2025-06-02 05:13:45+00:00
I've always wondered this as well, and never seem to get an answer. Why would someone want to do this when they can get a better result either renting in the cloud, or just using a subscription?

Obviously I see the value in having something local from a control and privacy perspective, but it's surely always a net loss in terms of quality and capability of output, right?
by exmadscientist | 2025-06-02 05:13:46+00:00
There are some radioactive species that occur only as fission fragments -- no irradiation of naturally occurring isotopes will reasonably produce them -- and so from there you can get back to the original isotopic composition of the fissioning materials. There are enough tell-tale signs of each of the major isotopes that it is easier to separate them out than you might think. It is very, very possible, for example, to use a neutrino detector to tell exactly what is going on inside a nuclear reactor's core, which is not something you might realize is possible until you've seen it done! (But neutrino detectors are very large, must be placed very close in, and are very, ah, obvious things to have around.)

This analysis is quite difficult, and I don't know that it has ever been done on an actual detonation (at least, no one admits to doing it; not that there have been terribly many opportunities to practice this), but there is no reason it can't be done.

(You're probably right that Clancy took some authorial license, though.)

For an example of what is possible, see the ruthenium mess in Europe from a few years back: https://cen.acs.org/safety/industrial-safety/caused-plume-ra... or https://www.nature.com/articles/s41467-020-16316-3 among others.
by anonym29 | 2025-06-02 05:13:56+00:00
Goods in Walgreens are fundamentally dissimilar to YouTube videos.

When you steal something from Walgreens, a legal person has had private property unjustly taken from them that prevents the rightful owner from using or obtaining benefit from the scarce physical good (in Walgreens' case, sale of that good).

Conversely, even full-blown piracy of copyrighted content does NOT deprive the owner of private property, there is no prevention of the rightful owner to watch the video, nor is the rightful owner prevented from obtaining benefit, because there was no scarce physical good lost.

Courts might say you can "own" an idea. I disagree, it's plainly and obviously ridiculous to compare a speaker or some snacks to a infinitely reproducible digital file, to say nothing of a single stream of an infinitely reproducible digital file that was intentionally uploaded to a platform that makes content available to non-paying users.
by anonzzzies | 2025-06-02 05:13:57+00:00
This might be your echo chamber of only working with phds? I have been doing fm for almost 40 years and, while it became easier, I can count people who actually understand what they are doing when programming on one hand, including seniors. Interns definitely don't understand and cannot learn to do formal methods generally. We see many companies inside as we do troubleshooting for large (fortune 500) companies to mid sized ones and these projects are short and urgent: we see a lot of code and, contrary to what you are saying or what seems to be the norm on HN, most people are really really bad at all they do; most we see cannot explain how the code actually works and indeed, often it's just beaten and trialed and errored until it has a facsimile of what it is supposed to do. There are no peer reviews often no version control and these systems run in massive hospitals, manage insurance, taxes or pensions for millions of people and so on. You are grossly overestimating the norm. If people did enjoy a uni degree, they generally look disgusted when you mention something like haskell as 'that useless stuff we had to to'. When I taught prolog in uni in NL, the students asked all the time why and why not c++ or java which would get them a job and make games. No one knows what formal methods even are.
by creata | 2025-06-02 05:13:59+00:00
In my uninformed opinion, the difficulty with code extraction (or going the other way, extracting a theorem prover representation from a program) is shared, mutable data. All the solutions I've seen (e.g., separation logic) feel clunky as heck.

> the fact that you have agree with the abstract model, the fact that the abstract model has to be a good abstract model of your system

Regarding seL4 in particular, they've plugged many of those sorts of holes.

https://trustworthy.systems/publications/nicta_full_text/737...
by mchenier | 2025-06-02 05:14:06+00:00
One way to avoid this problem and considerably reduce the attack surface is to: 1- Create a dummy Onedrive account. 2- Share a folder on your main Onedrive to the dummy account. 3- In the dummy account, maps the shared link to a folder for easier access as if it was a normal folder. (May not be required for some apps). 4- Only lets third party apps access the dummy Onedrive account with its single folder.

This doesn’t give access to your main Onedrive account to any apps, just the files and folders under the shared folder you have shared with the dummy account.
.gov websites appear to be hosting nudes/movies
by justbeingbored | 2025-06-02 05:17:06+00:00
Check for yourself using variations of this search query: "hot milf" site:.gov "123movies" site:.gov

Every time I change the query I seem to get more results from a bunch of US government websites.

Look at this one site in particular hosting a bunch of links to nudes: https://testla.doa.louisiana.gov/

I thought .gov websites were about hosting government related business and not nudes.
by ben30 | 2025-06-02 05:17:23+00:00
This echoes my experience with Claude Code. The bottleneck isn't the code generation itself—it's two critical judgment tasks:

1. Problem decomposition: Taking a vague idea and breaking it down into well-defined, context-bounded issues that I can effectively communicate to the AI

2. Code review: Carefully evaluating the generated code to ensure it meets quality standards and integrates properly

Both of these require deep understanding of the domain, the codebase, and good software engineering principles. Ironically, while I can use AI to help with these tasks too, they remain fundamentally human judgment problems that sit squarely on the critical path to quality software.

The technical skill of writing code has been largely commoditized, but the judgment to know what to build and how to validate it remains as important as ever.
by brador | 2025-06-02 05:19:30+00:00
This is already big in Mexico. Being pushed with large commissions ($1000+) by the same cosmetics shops that offer fillers and cosmetic surgeries.

Blonde hair blue eyes is the big seller but skin issues and birth marks on the newborn are common side effects. They promise to fix it with laser and surgeries post birth but the fix doesn’t work well.