MurphyA/hacker-news huggingface dataset:
by ilamont | 2025-06-24 22:33:00+00:00
> I prefer to fly less since the experience has consistently deteriorated over decades.

I never liked flying, but was able to put up with it better when I was younger.

Nowadays, I get some satisfaction by leveraging credit card points through my business to get "free" tickets. I mentally steel myself to the unpleasantness of the airport, boarding, and flying, and try to get as much work done on my laptop as possible when I am sitting down so at least I can feel that I accomplished something by the time I reach my destination.
by nzach | 2025-06-24 22:33:05+00:00
> What explains the slowdown in IANA timezone database updates?

My guess is that with the increasing dependency on digital systems for our lives the edge-cases where these rules aren't properly updated cause increased amounts of pain "for no good reason".

In Brazil we recently changed our DST rules, it was around 2017/2018. It caused a lot of confusion. I was working with a system where these changes were really important, so I was aware of this change ahead of time. But there are a lot of systems running without too much human intervention, and they are mostly forgotten until someone notices a problem.
by HenryBemis | 2025-06-24 22:33:07+00:00
Today some auditor (like me) would fail your ITGCs because of the undocumented partition/file/change/etc (take your pick) and force you to submit a deviation to the SOC team, ask you to "review and update the Secure Design Document to reflect to the change", ask you to create a Jira and/or ServiceNow ticket, etc. etc. etc.

Oh, and you would get a red mark on your "HR P&D record" for the 'Secure Software Policy' violation.

(Shit.. I hated myself writing the above, but it's true)

In 2001 though, we would all laugh if we would have 'caught' the devs doing something cool like this!
by drob518 | 2025-06-24 22:33:17+00:00
Yep. Fortunately, a lot of apps can get by with just local civil time and an OS-set timezone. It’s much less common that they need to worry about leap seconds, etc. And many also don’t care about millisecond granularity, etc. If your app does care about all that, however, things become a mess quite quickly.
by gardnr | 2025-06-24 22:33:19+00:00
Looks like NARA are underfunded [1] and trying to grapple with how to prioritize digital transformation while still meeting KTLO demands. They closed three facilities last year. [2] The goal was/is to digitize everything to increase access to the archives for everyone.

The current administration reduced NARA funding and, in February, dismissed Shogan as "Archivist of the United States" but it appears a plan for a strategic shift was underway before those changes.

1: https://nsarchive.gwu.edu/foia-audit/foia/2024-03-15/us-nati...

2: https://www.archives.gov/press/press-releases/2024/nr24-37
by cmiles74 | 2025-06-24 22:33:31+00:00
This strikes me as a weak example, I think it's clear that it's way too cumbersome to read an entire novel by asking an LLM to dictate it.

IMHO, a better example would be the AI generated summaries provided by Google. Often these summaries have sufficient information and detail that people do not read the source article. The authors aren't getting paid (perhaps through on-page ads, which are not viewed) and then go out of business.

This strikes me as a good fit for the tax-on-cassette metaphor.
by exiguus | 2025-06-24 22:34:37+00:00
I don't see that eastern germany is not a place to visit. Yes, there are areas and cities or villages with a lot of neo-na*is and there are areas where the AfD has 50% in eastern germany. But this are a few areas. And i am not saying that AfD voters are per se facists. On the other hand, you will find fascist all over the place in germany. Also in Bavaria and BW or NRW. For example: The AfD meetup to remigrate germans was in NRW and was organised by NRW AfD members and followers. Or the Waldorf / alternative medicine fascist people are mostly located in BW.
by GuinansEyebrows | 2025-06-24 22:34:52+00:00
> but there is still responsibility for people choosing to listen to it

yes, sure, this is easy to say, but hundreds of billions of dollars and uncountable person-hours go into this manipulation machine, and many peoples' lives and livelihoods depend on maintaining it. it's a lot to ask of every individual to be solely responsible for the negative impacts of advertising when we all have lives we want to live.

i'm not saying personal responsibility doesn't play a part, but we shouldn't atomize - we should be organized and wield regulation more effectively against the profit motive.
by IvyMike | 2025-06-24 22:35:00+00:00
From the site:

> All researchers must apply and present a researcher card, which may be obtained in Room 1000. This ensures that proper identification is on file for all individuals accessing the building to establish a legitimate business purpose. Abuse of any researcher registration to circumvent access by the general public may result in a trespass situation and a permanent ban from access to all NARA facilities.

What the hell does "legitimate business purpose" mean? What "business" need is there for JFK Assassination records (which I think are at this site), for example? If I'm getting a PHD or writing a book, is that a "business" need? I suspect not.

Also, "Abuse of any researcher registration to circumvent access by the general public may result in a trespass situation and a permanent ban from access to all NARA facilities" seems like a very poorly constructed sentence.
by remram | 2025-06-24 22:35:37+00:00
> The parent's description isn't what happens with the original code

Yes, it is: both gchamonlive and myself pointed out that if your lock file exists and is out of date, your (previous) script would silently update it before installing. This would happen because `uv lock --check` would return false, triggering the call to `uv lock`.

Your new version no longer does that, because you removed `! uv lock --check` from the condition.
by vram22 | 2025-06-24 22:35:39+00:00
Nice one :)

I too can sling a bit of Latin. ;)

Here is one phrase, in which one word, malus, is like an off-by-one error from your manus word, so to speak :) :

nemo malus nisi probetur

https://www.google.com/search?q=nemo+malus+nisi+probetur

From the AI overview (need to at least try that out a few times after all the talk about Google enshittification like by Cory Doctorow in this year's PyCon US keynote:

>Nemo malus nisi probetur" is a Latin legal maxim that translates to "No one is evil unless proven." It signifies that a person is presumed innocent until proven guilty in a court of law. This principle is fundamental to legal systems that value fairness and due process, ensuring that accusations are substantiated before a person is considered culpable. Here's a breakdown of the phrase:

Nemo: No one malus: Evil, bad, wicked nisi: Unless probetur: Is proven, is shown, is demonstrated

The maxim essentially means that one should not be treated as inherently bad or guilty without sufficient evidence. This principle is closely related to the concept of "presumption of innocence" and is crucial for upholding justice and protecting individual rights.
by monster_truck | 2025-06-24 22:36:10+00:00
Walt Disney's program covers substantially more surface area, there's 6? publicly traded companies listed there. In addition to covering far fewer domains & apps, AT&T's conditions and exclusions disqualify a lot more.

The market for bounties is a circus, breadcrumbs for free work from people trying to 'make it'. It can safely be analogized to the classic trope of those wanting to work in games getting paid fractional market rates for absurd amounts of QA effort. The number of CVSS vulns with a score above 8 that have floated across the front page of HN in the past year without anyone getting paid tells you that much.
by treetalker | 2025-06-24 22:36:24+00:00
Taking your points in reverse order:

> I could more see this as being just random action without any real purpose, or aimed at petty revenge on someone, or something.

This was essentially my first point, and I think we are in agreement.

> I dunno. I'm very much not a Trump fan, but I don't see how restricting access to "national information" would help him. And if it would, how does restricting access to one of them help him?

I did not intend to claim that the closure necessarily helps Trump himself. My point was that reducing access to public information (either wholesale, or by placing additional hurdles) hurts democracy and favors autocracy.
by lancekrogers | 2025-06-24 22:36:33+00:00
Why COCOMO?

I wanted a repeatable way to quantify the productivity jump I’m getting from Claude Code (and to compare it with other AI tools I’m testing). The line-counter scc prints COCOMO “organic” estimates by default; at first the dollar figures looked crazy, so I benchmarked them against a few past codebases where I know the head-count, timeline, and budget. They were surprisingly close, so I’m using COCOMO here as a rough yard-stick—not as a claim that LOC directly equals business value.

If nothing else, it gives engineers a concrete number to show when asking a boss to cover an AI subscription, or founders a way to justify “impossible” timelines to investors.

TLDR: Claude Code let me ship 219k high quality LOC in 7 weeks across eight projects, while juggling multiple distinct projects in parallel.
by kube-system | 2025-06-24 22:36:34+00:00
Where? 'cause I'm not seeing it.

I'm guessing you're taking issue with the price? Meh, that's just what it costs to make a decent product. You can (or at least used to be able to) get hot garbage manufactured abroad for less, but it doesn't meet the standards of what anyone would reasonably get, and they don't compare favorably to even a bad used car.

You might find this interesting:

https://www.youtube.com/watch?v=yRG0Wai4sR0

I remember when you could get a $10k new car... but if you adjust for inflation, we still have those cars today (now they're $20k), and they're actually better than the $10k cars back then.
by mooreds | 2025-06-24 22:37:17+00:00
For pure OpenAPI APIs, why wouldn't you just update your API docstrings? Or maybe add a new attribute to the OpenAPI spec for LLM prompts?

I definitely see the value if you have a non standard API or undocumented API you wanted to expose.

And I see value in the resources and prompts parts of MCP, since they can offer clients more functionality that would be hard to put into an API spec.
by dcminter | 2025-06-24 22:37:20+00:00
Ah yes, I call this "brandfucking."

IBM used to be a repeat offender. I recall trying to buy the WebSphere (Java) application server for a client and then finding out that IBM had slapped "WebSphere" on all their products including things like¹ MQ Series (a queue) and DB/2 (a database). It took me an hour to figure out the right item and it was an online purchase!

¹I might be misremembering the exact products but it was similarly absurd.
by mrtksn | 2025-06-24 22:37:37+00:00
You're right that the IAEA has indeed pointed to Iran's past undeclared nuclear material and activities, leading to NPT safeguard violations for the 2009-2018 period. However, it's also important to distinguish between those historical undeclared issues and the specific JCPOA compliance. For the duration it was active and before the US withdrawal, the IAEA consistently verified that Iran was adhering to its JCPOA commitments regarding its declared program. The argument is often that while those past issues were concerning, the JCPOA still provided a robust framework for monitoring Iran's active program, which was then dismantled
by TheAlchemist | 2025-06-24 22:37:50+00:00
The article cites "Capacité de conduite entirément autonome" - I didn't know Tesla used this wording in French. It sounds even worse than FSD - given the name, there is no reasonable doubt that it should be fully autonomous, no strings attached.

Quite mind blowing that they were actually allowed to sell that in France (given it's not really available in Europe)...
by ashwinsundar | 2025-06-24 22:38:22+00:00
I would invite everyone to participate constructively in improving it.

How do you recommend that I participate? I've written a few MCP servers (based on FastMCP - great work!), and contributed one to Anthropic's list. How do I actually participate in maintaining or improving the core MCP spec? I was under the impression that it was being driven by Anthropic.
by cranky908canuck | 2025-06-24 22:38:22+00:00
I suppose I didn't start the debate properly, in the direction I was attempting.

I was looking for discussion not of "ok, don't call in sick three days a week during notice", but how to deal with the second level effects that often work out to "take sick days when you get them, and if you actually get sick for two weeks, deal with that if and when". I'm trying to form an opinion on this, leaning toward:

- sick days are special, and don't impact your vacation day allowance (you can have 5 weeks of sick time and still accumulate vacation (PTO [unified vacation/sick/whatever] does not allow this) time up to (say) four weeks to take at once.

- however, sick days don't just evaporate if you leave / get laid off / go over the limit, so there's no incentive to be sick of nine-to-five on Friday.
by lapcat | 2025-06-24 22:38:31+00:00
> I'm confident that all professors are aware of the revenue streams of their universities and are incentivized to maximize those revenue streams, even if only implicitly.

I'm confident that they aren't.

Furthermore, professors have to work personally with their grad students. Teach them, advise them, employ them, publish with them, recommend them for jobs. It's ridiculous to suggest that they're choosing their students based on in-state vs. out-state tuition. That's the very last thing they give a damn about. Do you have any first-hand knowledge of graduate school?
by philipkglass | 2025-06-24 22:38:39+00:00
There have been a couple of Hacker News stories about Hans Jonatan that made the front page:

"The DNA of Iceland's First Known Black Man, Recreated from Living Descendants"

https://news.ycombinator.com/item?id=16188715

"A Trail Gone Cold"

https://news.ycombinator.com/item?id=41716963
by zesterer | 2025-06-24 22:38:46+00:00
This is the point, yes! Toy software is not production-worthy. It might not even be sufficient for your own personal use. It's about building proof of concepts and rapidly scouting out the terrain of a field you don't know much about, and getting a souvenir to remember the experience with.

Oftentimes I find that I enjoy one of the projects so much that I take it further than 'toy', but that usually ups the time estimate by an order of magnitude.
by viccis | 2025-06-24 22:39:16+00:00
>The one thing they've consistently nailed has been tip-of-my-tongue style "reverse search" where I can describe a concept in sufficient detail that they can tell me the search term to look it up with.

This is basically the only thing I use it for. It's great at it, especially given that Google is so terrible these days that a search describing what you're trying to recall gets nothing. Especially if it involves a phrase heavily associated with other things.

For example "What episode of <X show> did <Y thing> happen?" In the past, Google would usually pull it up (often from reddit discussion), but now it just shows me tons of generic results about the show.
by xyst | 2025-06-24 22:39:43+00:00
So many false positives can happen here.

Most ISPs are already a pain in the ass to deal with. (Fuck you Charter/Spectrum). I don’t trust them to do their due diligence and implement this correctly. Or worse, abuse it.

“hey you pay for 1000/300 package. We detected abnormal traffic. Now you get throttled to 100/100. But still pay 1000/30”. Then they will drag on the resolution process until you give up.
by gregorym | 2025-06-24 22:40:01+00:00
Today almost every public MCP server targets B2B workflows like GitHub, Jira, Linear, Slack, and similar developer or workplace tools.

In a recent talk, Andrej Karpathy argued that “LLMs are the new operating system.” If that analogy holds, the only “apps” we've built so far live in the enterprise quadrant of that OS.

I expect consumer facing MCP experiences to follow soon. I’m not yet sure what they’ll look like, perhaps games or other interactive content but the infrastructure is falling into place: OpenAI has said ChatGPT will support custom MCP connectors, ElevenLabs’ 11AI already ships with MCP integration, and Claude has added remote MCP support. As those channels reach mainstream users, everyday LLM users will start asking for richer experience and MCP is how developers will deliver them.
by dkjaudyeqooe | 2025-06-24 22:40:01+00:00
> All of the fat in the industry has been squeezed out

I don't know where you live but in the US this is patently not true.

Airlines are an abusive oligopoly there, with landing slots and the like cementing control of certain markets for certain airlines.

Ticket prices are much higher than they used to be and are much higher than Europe (for instance).
by sho_hn | 2025-06-24 22:40:07+00:00
The end-user UIs don't ask you to calculate anything. Typically they have a slider from 100% to, say, 400% and let you set this to something like 145%.

This may take some getting used to if you're familiar with DPI and already know the value you like, but for non-technical users it's more approachable. Not everyone knows DPI or how many dots they want to their inches.

That the 145% is 1.45 under the hood is really an implementation detail.
by hinterlands | 2025-06-24 22:40:27+00:00
Vulnerability researchers? For public projects, there's a strong preference for prestige stuff: ecosystem-wide vulnerabilities, new attack techniques, attacking cool new tech (e.g., self-driving cars).

To pay bills: often working for tier A tech companies on intellectually-stimulating projects, such as novel mitigations, proprietary automation, etc. Or doing lucrative consulting / freelance work. Generally not triaging Nessus results 9-to-5.
by quantified | 2025-06-24 22:40:32+00:00
Absent an ok standard of living, an ever-growing population with extremely wealthy living on top becomes an angry, resentful rabble. Fundamentally, people need to occupy their time. If there ever was "abundance", people could be busy with soma or with shit-work. They'll be less trouble with soma, and that means UBI. Aka credits or scrip. But when it's recognized by its original name of "welfare", it won't happen at all.

That said, I bet $1000 (2025 dollars, adjust for inflation at the time of payout) that in the next 15 years no meaningful "abundance" of a human need will appear (meaning both plentiful and inexpensive or free). AI requires that it be paid for, its profit will be first and foremost. Making memes is not a human need, and making some resource abundant for a few by depriving it for the many is also not abundance.
by buildbot | 2025-06-24 22:41:46+00:00
The math is really that hard? I have no idea what the soil or rock is, what happens when the first bomb hits it, the second, and then the third? Does the timing matter? Does the timing matter if it's 5 minutes between? 1 hour between? Seconds between? Does the type of soil or rock compact or loosen when bombed? What's the variation in explosive yield? Does the ground transfer force from a shockwave well or poorly? Does that change after the first one?

I really doubt this is very linear.
by weinzierl | 2025-06-24 22:42:20+00:00
Very nice. For a long time I wondered who would use hotpatching but working with large Java applications made me appreciate the possibility even if it is not 100% reliable (as it is in Java).

From the docs Subsecond looks almost perfect. The only downside I found is that (if I understood correctly) you have to modify the function call in the source code of every function you want to hotpatch.

It is a bit mitigated in that the change does not cost anything in release builds, but it still is a big thing. Do I want sprinkle my code with call for every function I might potentially have to patch in a debugging session?
by AlotOfReading | 2025-06-24 22:42:40+00:00
Yes and no. There's a very significant shift underway to move a lot of functionality to Linux. It's very likely that you have at least one kernel somewhere in your car if it was made in the last 5 years. It's essentially guaranteed if your car has ADAS functionality.

Traditional RTOS' are for the most basic, safety critical functionality because the cost of certified (and even QM) code is so high and the tools available are so primitive.
by exiguus | 2025-06-24 22:42:42+00:00
In my understanding it is fully open source and it's source code is available on OpenCode [1]. OpenDesk use nextcloud, Open-Xchange, Element and so on. And it actively contribute to this software. In my understanding, the enterprise edition, is the non-self-hosted version of [1].

What is the not-open source software used in OpenDesk? Because your example: cryptepad[2] is GNU Affero General Public License. And diagrams.net might look similar, but also LibreOffice looks similar to MS office.

[1] https://gitlab.opencode.de/bmi/opendesk

[2] https://cryptpad.org/
by protocolture | 2025-06-24 22:42:42+00:00
Copilot is brainrot and its killing microsoft.

Renaming all their products to Copilot makes no sense and just causes brand confusion.

Copilot getting access to your entire 365/azure tenant is just a security nightmare waiting to happen (in fact theres already that one published and presumably patched vuln)

It has so many shackles on that its functionally useless. Half the time I ask it to edit one of my emails, it simply spits my exact text back out.

Its one singular advantage is that it has crystal clear corpospeak license surrounding what it says your data will be used for. Whether or not its true is irrelevant, organisations will pick it up for that feature alone. No one ever got fired for choosing ibm etc.
by alephnerd | 2025-06-24 22:43:28+00:00
The former.

Meanwhile, a lot of the higher value work such as in Engines tends to pay pretty high - for example, Epic Games pays SWEs and PMs in the $200-400K TC range, but this is overwhelmingly in the US. Similar story with Unity despite originally being European, but shifting to the US in the 2000s.
by fb03 | 2025-06-24 22:43:38+00:00
Start by starting! Pick a DAW, if you can't pick one, pick one of the most famous. Ableton Live maybe?

Just put some notes down and hit the play button. That's the whole feedback loop. Everything else is just honing your skill and repeating this feedback loop 80 thousand times until you start getting stuff out that you semi-like :)
by padjo | 2025-06-24 22:44:55+00:00
Volkswagen absolutely sucks at software. For example, it took me over an hour of infuriating guesswork to add a second user on my car. Then once a new user was added basically nothing actually takes account of who is logged in. I was hoping it would at least remember some settings but nope, it literally just changes the name displayed on the infotainment system when you start the car.
by sho_hn | 2025-06-24 22:46:17+00:00
Oh, ok. Yeah, this I agree with, and I think plenty of people do - having integer-only scaling in the core protocol at the start was definitely a regretable oversight and is a wart on things.

> When you say you supported this for quite some years was there a custom protocol in KWin to allow clients to render directly to the fractionally scaled resolution?

Qt had a bunch of different mechanisms for how you could tell it to use a fractional scale factor, from setting an env var to doing it inside a "platform plugin" each Qt process loads at runtime (Plasma provides one), etc. We also had a custom-protocol-based mechanism (zwp_scaler_dev iirc) that basically had a set_scale with a 'fixed' instead of an 'int'. Ultimately this was all pretty Qt-specific though in practice. To get adoption outside of just our stack a standard was of course needed, I guess what we can claim though is that we were always pretty firm we wanted proper fractional and to put in the work.