MurphyA/hacker-news huggingface dataset:
by nixosbestos | 2025-06-08 08:55:34+00:00
Well, this is one of those HN comments that I will never forget. Someone wrote (and then removed after a buyer purchased it and required it's take down) a stylometry analyzer once for HN comments. A supposedly senior-y Google-r lambasted some Snowden slides commenting things were impossibly unimaginable inside Google (this was before it has done become widely accepted that internal services at such companies such of course be using some transport security). I got in some silly fight with someone ... 13+ years ago? These are specific things I remember. And now probably your comment.

I didn't trust stock Android before, and I felt the sinking-gut feeling as soon as I realized where "upload root signing key" was going, but spelling it out here puts a ... fine point on things.

Thanks for the comment.
by jameslk | 2025-06-08 08:55:55+00:00
They took away the <blink> tag from us, due to what can only be explained as the high costs to maintain such a complex feature in modern browsers, and late stage capitalism.

However, thanks to the brilliant hard work of the open source community, we have a widely supported browser polyfill: https://github.com/yocontra/blink-polyfill
by aucisson_masque | 2025-06-08 08:57:14+00:00
> if the company is respecting privacy It's very rare to see companies doing it, and moreover it is hard to trust them to even maintain a unique stance as years pass by.

Indeed, no one can predict the future but there are companies with bigger and stronger reputation than other. I pay for instance for iCloud because it’s e2e in my country and pricing is fair, it’s been like that for years and so I don’t have to set up baikal server for calendar, something for file archieving, something else for photo and so on.

I’d be surprised apple did willingly something damaging to user privacy, for the simple reason that they paid so much ads on privacy, they would instantly loose a lot of credibility.

And even stuff you self host, yes you can let it be, not update it for a year but I wouldn’t do that because of security issue. Somethings like navidrome (music player), it’s accessible from the web, no one want to launch a vpn each time you listen to music and so it got to be updated or you may get hacked. And no one can say that the navidrome maintainer will still be there in the coming years, could stop the project, be sick, die… it’s not a guarantee that others take back on the project and provide security update.
by psychoslave | 2025-06-08 08:57:28+00:00
As a parent, I do agree with taking responsibility on it. My older children is 8, so not much computer for her now. Just a bit of dactylography before she can play Gcompris, mostly chess lately, nothing online so far. They did have some initiation at school (for context this is public school in France).

That said, I do expect I won't be able to prevent them to reach inappropriate resources once they meet the point where they can browse online without me being there to inspect, so I'll rather invest time to explain them that can happen, make sure they are confident they can tell me if they faced something odd. Forbidding would be the best way to encourage, and any automatic system alone will have too shallow circumvention paths or too much burden of admin to follow for relevancy as a Parenthood tool.
by anthk | 2025-06-08 08:57:53+00:00
Forth it's easy, but Lisp the core implementation can be easy, yes, but you need to implement Lisp in Lisp, similar to Forth under itself.

Heck, I tested for...next from Eforth under PFE Forth with Forth words, not C. Forth may be the only good case for an easy syntax.

I mean, the Lisp syntax it's dumb easy too but you need to develop the rest of features. Is not just about lists, car and cdr. Altough if you get eval/apply the rest writes itself, such as map and proc.
by 5mv2 | 2025-06-08 08:58:39+00:00
Author here. I get this view, I just think it's worth underlining how biased it is to the SF Bay area dystopian situation.

I've actually gone out of my way to meet homeless in the Bay. You'd be surprised how much of a continuum homelessness is. Most are definitely living hell on earth, but many I personally met have both fallbacks and money. Could be they're too attached to their family's image of them. Or that they weirdly enough have a better life now - I met a guy who led a small community and made quite some money from crime, he could have afforded to live anywhere, but this would mean taking a menial job like he had in the past, and he didn't want that.

Of course, the disclaimer is that many homeless care a lot about their self-image and will create stories to justify their current situation so it's hard to judge. But the point still stands that, even in hell of earth for the homeless, you'll find it's a continuum. And the world is much broader than SF - I've met people at every point of the spectrum, the most extreme being a multi-millionaire who lived Swiss forests for fun!

To summarize, there is no "actual homelessness", it's not a boolean but a spectrum, and I fail to see how gatekeeping the use of the most adequate word in this situation helps anyone.

If the problem is that it using the word comes across as disrespectful to people who mainly know homelessness through the prism of the Bay Area, maybe another avenue could be to add a link at the end of the article to promote a relevant NGO, which I'm definitely open to adding if people suggest a good one.
by andrewl-hn | 2025-06-08 08:59:25+00:00
Very good point. There’s also a potential for future upgrades. They may invest into catenary lines at some point, get rid of batteries and increase capacity inside vehicles. Or, switch to hot-swap batteries and increase vehicle turnaround and frequency. Or, they can switch to traditional concrete reinforcement for rails for future lines if they decide that the rails-on-slabs approach doesn’t work out as well as they hoped for. Their vehicles while custom-built are running on top of standard tram lanes, so they will be able to use traditional tram tracks, too.

VLRT seems gimmicky at first but the more I look at it the more sense it makes.
by codethief | 2025-06-08 09:00:00+00:00
> > The absolute nightmare is about giving Google the root signing key of your application

> It seems plausible the US government could send a NSL (or similar) to Google and force them to distribute modified APKs for apps like Signal

Since when do you have to hand over your signing keys to Google? I seem to remember the Signal devs saying that they preferred publishing their app on Google Play as opposed to F-Droid because in the former case they control the signing keys. Has this changed?
by 0xbadc0de5 | 2025-06-08 09:02:47+00:00
I watched the video and support the effort. They seemed earnest and genuine in their desire to do right by the brand's legacy. However, I can't help but feel that releasing this information before the deal is in place is doing themselves a disservice. I can understand their excitement, but this could harm or derail any negotiation efforts. Business 101: don't count your chickens before they hatch.
by Teever | 2025-06-08 09:03:06+00:00
I have a NAS with many terabytes of data stored on ZFS too, but this isn't a solution to the problem because the problem isn't technical one, it's a social one.

We need regulations around this kind of stuff and governments that are willing to break up companies that monopolize industries.

Companies like Autodesk and Adobe for instance have far too much control over very critical markets and the revenue that they extract from them allows them to lock down software in very onerous ways.

No amount of spinning rust and ZFS is going to make running offline versions of Fusion360 or Photoshop easy for the common person.

It's going to take legislation.
by kennethh | 2025-06-08 09:03:26+00:00
I remember being on a session with the pragmatic programmers (ie the people from the book) and they recommended making a compile error on purpose as the last thing one did before leaving work. The next day you compiled the code and get an error, fix this and they continue working. You are already doing work. This sets your mind on the right track from they day before. I gave used this a bit and it works pretty well.
by aucisson_masque | 2025-06-08 09:03:29+00:00
I run Debian on my machine, so package are not really up to date and I would be stuck, not being able to update my self hosted software because some dependencies were too old.

And then, some software would require older one and break when you update the dependencies for another package.

Docker is a godsend when you are hosting multiple tools.

For the limited stuff I host, navidrome, firefly, nginx, .. I have yet to see single binary package. It doesn’t seem very common in my experience.
by freeify | 2025-06-08 09:04:29+00:00
AI may improve how you work. Imagine creating a co-worker to assist you in remembering what you forget. It’s social but necessary, because no one knows everything. We often ask other co-workers for their knowledge, and they often know how something functions if they have done it before. Knowledge is shared socially; therefore, this type of technology can enhance your problem-solving skills.
by yocoda | 2025-06-08 09:05:05+00:00
> Car broke down in the middle of nowhere? -> AC stopped working in peak summer? -> Need a maid or cook urgently and don’t know who to call

If this is instant help-it must be trustless help; you either know this person or...deal with liability. Your mentioning of Car tells me you don't assume a majority of people have roadside assistance. I assume you're searching for a problem to solve?

You focus heavily on speed can you enlighten me and let me understand why?
by paavohtl | 2025-06-08 09:05:48+00:00
Interesting detail, thanks for letting me now. I had a look at the AI packages of all three visitors (Gelephor, Gellius Terentius, Trenus Duronius) and at least in the base game (without UOP) none of them carry skooma nor are scripted to find it. So even though the game implies they are skooma addicts via dialogue & environmental storytelling, from a purely technical POV they are not addicts. Getting stuck outside the shack checks out, though I don't think faction membership is the reason for that — they simply don't have the key to the door.
by tomhow | 2025-06-08 09:06:44+00:00
Indeed, and since the author has clarified what they meant by "40%", I've put the post back on the front page. Another relevant factor is they seem not to speak English as a primary language, and I think we can make allowances for such people to use LLMs to polish their writing.

Regarding your other suggestion: it's been the case ever since HN started 18 years ago that moderators/modcomments don't have any special designation. This is due to our preference for simple design and an aversion to seeming separate from the community. We trust that people will work it out and that has always worked well here.
by chgs | 2025-06-08 09:07:53+00:00
I just applied for an evisa for India. It was horrendous. Pages wouldn’t continue without telling you what was wrong (too many or not enough commas in the address/phone field was one). When returning to the form the pre filled data had quotes in, which then wasn’t valid. Missing labels on fields. Then the hilarious “what countries in the last ten years, list all or get deported” combined with “you have too many countries”. They only allow 20.

I don’t know if it’s the state of development in the country as a whole or just the lowest bidder for a government service problem.
by elmerfud | 2025-06-08 09:10:14+00:00
I look at those outlets daily, show me one article, just one, that mentions detainees are being shuffled from detention center to detention center to avoid allowing them to have their day in court. The burden of proof is on you because you said it was extensive. I acknowledge there is some coverage but it is not extensive and it is not talking about the specific abuses that I am mentioning.

All of those news outlets that you cite are treating the issue as if it is the exception because they are still saying Trump is deporting illegals. My assertion is that these are legal and documented people that are being denied their habeas corpus rights. So go ahead show me one article that has thousands upon thousands of detainees being shuffled from detention center to detention center only days away from having there court hearing.

You seem to be another one of these deniers as to the egregious rights violations that are going on.
by reify | 2025-06-08 09:10:46+00:00
I dont understand all the faffing about keeping private personal stuff, private and secure.

I bought £75 in bitcoin in 2016 for my VPN, when we in the UK were still able to buy bitcoin from Bitcoin ATM's. I now have about £800 in bitcoin. I'm not bothered aout the the bitcoin

Until the government banned them. Its not funny when a government takes your freedoms away.

Anyway, back on topic.

all my bitcoin keys and other personal stuff, the stuff that my family will need when I die, is saved on encrypted USB drives. the password and instructions are kept with my will at the solicitors.

I encrypt my drives using openssl like this:

openssl passwd -6 -salt "salt password" "main password"

openssl passwd -6 -salt iloveHN iloveeveryoneinmyfamily

-6 = SHA512

$6$iloveHN$bbyV6w4JfwmXT6EJsKyd2NOT6mV4xTRU6rzHJplkofBOy3BapBB6gIGmyfniTReBnl30JjGi5nBPrpyoq7jWv.

not my password by the way;

I use that password to encrypt my drives with veracrypt.

I have a few of those kept at family members homes. if one gets lost there are others.

it is always a matter of trust for me. I simple do not trust other people to keep my private stuff safe.
by ithkuil | 2025-06-08 09:11:10+00:00
I phrased it poorly:

Being an adult child has moral and ethical consequences.

Behaviours and emotions that are totally legit and tolerated in a child are no longer so in an adult.

An adult that has all the privileges and freedoms of adulthood over childhood, like the ability to vote, drink, drive and hold an office, also has to abide by the moral obligations of being an adult.
by InsideOutSanta | 2025-06-08 09:11:15+00:00
I find marquee extremely useful, for one reason: HTML injection.

I find it helpful to test for HTML injection vulnerabilities because marquee moves, and it's a tag that (almost) nobody intentionally uses, making it easy to identify when an attack works.

I also find it helpful to show non-technical people the effects of HTML injection, because, again, it moves. "This moves and it really shouldn't move" is something people understand better than "this text is bold and it really shouldn't be bold."
Show HN: Visual Source, local design token manager
by joelhowse | 2025-06-08 09:13:50+00:00
Hi HN,

I have just finished the first version of Visual Source. It's a local GUI you can spin up in your projects which allows you to manage your design tokens (e.g. color palettes, variables).

As you make changes in Visual Source we generate a CSS file you can import which contains all of your defined tokens. When using a development server like vite you will see the changes in your app immediately.

I've been using this for a bunch of my own projects for a while now and am interested to see what others take is on this approach! I've found it a lot more ergonomic than writing my CSS variables by hand. Any feedback or questions welcome.
by motorest | 2025-06-08 09:14:48+00:00
> That is the key. The RPi works for idling, but anything else gets throttled pretty bad.

I don't have a dog in this race, but I recall that RPi's throttling issues when subjected to high loads were actually thermal throttling. Meaning, you picked up a naked board and started blasting benchmarks until it overheated.

You cannot make sweeping statements about RPi's throttling while leaving out the root cause.
by no_op | 2025-06-08 09:15:49+00:00
The material finding of this paper is that reasoning models are better than non-reasoning models at solving puzzles of intermediate complexity (where that's defined, essentially, by how many steps are required), but that performance collapses past a certain threshold. This threshold differs for different puzzle types. It occurs even if a model is explicitly supplied with an algorithm it can use to solve the puzzle, and it's not a consequence of limited context window size.

The authors speculate that this pattern is a consequence of reasoning models actually solving these puzzles by way of pattern-matching to training data, which covers some puzzles at greater depth than others.

Great. That's one possible explanation. How might you support it?

- You could systematically examine the training data, to see if less representation of a puzzle type there reliably correlates with worse LLM performance.

- You could test how successfully LLMs can play novel games that have no representation in the training data, given instructions.

- Ultimately, using mechanistic interpretability techniques, you could look at what's actually going on inside a reasoning model.

This paper, however, doesn't attempt any of these. People are getting way out ahead of the evidence in accepting its speculation as fact.
by elmerfud | 2025-06-08 09:16:38+00:00
There is a bit of a difference between someone who is denied entry at the border, and someone who is allowed entry, fully documented, given work permits, and have been in the country for several years.

Being denied entry at the border, isn't something that I would risk if I was planning a holiday or even an extended visit. That's just a good way to ruin everyone's plans and waste a bunch of money. I can totally understand why people wouldn't come here and risk that denial even when they have a visa in hand.
by magicalhippo | 2025-06-08 09:17:14+00:00
I started using Boost's approach, that is keep those things public but in their own clearly-named internal namespace (be it an actual namespace or otherwise).

This way users can get to them if they really need to, say for a crucial bug fix, but they're also clearly an implementation detail so you're free to change it without users getting surprised when things break etc.
by pjmlp | 2025-06-08 09:18:50+00:00
NDK is bad, feels like a 20% project, and I think if it wasn't for game devs, the userspace would be Java/Kotlin only, just like ChromeOS is V8 only, for all practical purposes.

However a good way to minimise headaches with NDK is to stay by the Google rules, it is a complement to Java/Kotlin, with a specific set of APIs, and not a way to pretend Android is GNU/Linux.
by mr_mitm | 2025-06-08 09:19:05+00:00
And if you're security conscious like me and want to do things the "right way" just because you can (or should be able to), you now have to think about firewall rules, certificate authorities, DNS names, notifications, backup strategies, automating it in Ansible, managing configs with git, using that newfangled IPv6, ... the complexity piles up quickly.

Coincidentally, I just decided to tackle this issue again on my Sunday afternoon: https://github.com/geerlingguy/ansible-role-firewall/pull/11...

Sometimes it's not fun anymore.
by jimmySixDOF | 2025-06-08 09:19:42+00:00
I have been geeking out recently on Blaise Agüera y Arcas talks about his BFF interpreter most recently at the Santa Fe Institute and how it can produce information stability out of noise using simple primitives in Brainfuck. I am looking forward to his two books on the subject and recommend checking his talks if you are in the small category of people interested in BF interpreters.

https://www.youtube.com/live/75PAyV83YqE?si=tQNO3IFS-y7cQeR2
by neepi | 2025-06-08 09:20:10+00:00
As an owner of 30+ year old CDs, that isn't necessarily the case. Some of them don't work particularly well these days. I went through a streaming thing for about 10 years but am moving back to physical media now. When I went to re-rip my CDs to FLAC I found some serious issues with a number of CDs which were chock full of errors around the edges.

Anyway after this I decided, fuck it, screw reliable storage or buying things on media. I'll buy it in a digital form and keep moving it around in less reliable media (mostly SSDs) until I'm dead.

I don't care about ownership. I care about not having to buy things twice and care about things I've bought being taken away. That's slightly different.
by motorest | 2025-06-08 09:20:11+00:00
> You have to be fair though, politicians always blame someone else and its usually the last person that was in charge.

I don't think this is a reasonable or informed take. It's quite obvious that the tarrif lunacy is single handedly causing an economic downturn. Trump himself has downplayed the relevance of this downturn with inane comments over how tarrifs would also be painful to the US economy. If you see a politician like Trump claiming both that tarrifs will be painful to the US and that the economic pain caused by Trump's tarrifs is blamed on whoever was there before him, you need to be massively disingenuous or naive to claim that "politicians always blame both sides". There is nothing normal about Trump's actions.
by roenxi | 2025-06-08 09:21:51+00:00
You're reading a lot into two words there. And someone probably has said "um, what?" to you in the real world; but you wouldn't notice because it is a common pattern of speech.

The internet will be a remarkably combative place if that is the standard you set for when someone calls you stupid - it'd be a lot better to only read that into a statement if it actually gets explicitly said.
by skissane | 2025-06-08 09:22:03+00:00
> For retrofit purposes, it's probably attainable to use solid state (no moving parts) floppy disk emulators that use USB thumb drives or CF/SD cards instead of error-prone, real floppy disks.

Yes, but if it is just a PC running Windows 95, likely simpler to get the software working under newer Windows, or if worst comes to worst, keep Windows 95 and stick it in a VM. I doubt there is any specialised hardware on the Windows 95 machines, the specialised hardware is likely connected to something else.

The use case where physical floppy emulators really shine is with much more exotic legacy systems. Some years ago there was a furore that the US nuclear arsenal was still being managed using 8-inch floppy disks (used in IBM Series/1s, 16-bit minicomputers from the 1970s). USAF was proud to publicly announce they’d successfully transitioned the US nuclear arsenal to be floppy-free. I don’t know if they said publicly exactly how they did it, but I suspect they kept the Series/1 minicomputers and just replaced the 8-inch floppy drives with hardware emulators (which probably each cost an utter fortune when you add up the premiums anyone will charge for it being the military, being highly classified, and above all being related to glowing things that go boom)
by immibis | 2025-06-08 09:23:46+00:00
The debt collector would run through the list of proofs when buying the debt without the proof. Automatically. The spreadsheet would, as well as name and address or whatever it already has, list a smart contract ID and a signature proving ownership of the private key currently registered to it. Transfer of debt could even be an atomic blockchain transaction, moving the debt and the money in the same transaction.

Some would probably buy proofless unpaid debt, but it would be almost worthless.

> How much harder would it be for the debtor to prove that they don't actually owe the money in question?

I refer you to the aforementioned dystopia. Even today, if your credit card is used in a transaction involving the physical card and your PIN, it's presumed you agreed to pay.
by Gareth321 | 2025-06-08 09:24:11+00:00
They have a financial incentive to bypass our LLM ad-blockers but visual recognition is a fairly milquetoast function for LLMs even today. They will attempt to present ads in an unusual way to fool the models; the models will get updated; they will change their tactics again. It's the same cat and mouse game we play today but fought with LLM models instead. I'm confident we win such a fight.