MurphyA/hacker-news huggingface dataset:
by bux93 | 2025-06-13 06:22:52+00:00
Yikes, whoever wrote that should be ashamed of themselves. On the bright side, it doesn't specify how long the predefined interval should be, and says entities are to 'ensure the strength of authentication is appropriate to the classification of the asset to be accessed' - so, in order to ensure the appropriate strenght the interval should be 100 years is totally defensible IMHO. The whole paragraph doesn't take MFA in account anyway, and FIDO2 does provide for key rotation (even if it's not widely implemented, maybe something to consider if you're covered by NIS2 - or manually rotate keys once every year).
by fasbiner | 2025-06-13 06:24:29+00:00
Yeah well, I don't disagree with you overall, but this is what getting old feels like. The boundary is so messy because it's based on feelings and desires and reduced neuroplasticity rather than a logical principle. There's not even a coherent explanation of how this personal preference could possibly be realized at the level of policy given the state of play. I'm sensitive to this feeling, but it's a luxury belief of people who can afford to ignore the job market.

The collective disapproval of online booking sites by travel agents was far more concentrated and economically existential than AI is to artists, and it made no difference. Travel agents who tried to moralize about soulless technology and inferior experiences while costing 10,000% more money for services that their customers felt were similar enough were not saved by moral disapproval cross-pollinated with self-interested hostility to change.

All the technology that existed when we were young was either a normal part of life or something exciting and new. And then past a certain point, technology becomes suspicious, or unnecessary, or economically threatening, and eventually it gets elevated to a source of danger to the human experience itself. And right or wrong, the next generation has never cared.
by heenrik | 2025-06-13 06:25:28+00:00
I don't know any books or course about the subject. I can only share my personal approach. This is something I've learned in the context of breaking down potential client projects into early plans and estimatable chunks.

What I do for projects in early stages and personal goals is the following.

1. Take a big piece of paper (A2/A3)

2. Write the goal on the right-hand side of the paper

3. Try to visualize what the goal looks like

4. Then I try to visualize the step right before the goal would look like

5. Write that down and draw a line to the parent goal

6. Move leftward and repeat

In my experience, the further you move to the left side of the paper, the more concrete and actionable the goals are. This will lead to a lot of sub goals and tasks that can be prioritized, revisited and continuously refined. Within the context of software projects, I find it important to work on the definition of done for the goals. I redraw the breakdown many times during the early stages of projects, until it can be put into a project management tool or similar. For personal stuff, I always just stick to the paper method and keep the latest iteration.

It is harder with more abstract goals (become an tech lead for my team; become a trusted advisor for management; be able to read and comprehend new ML research on arXiv etc.). If you are in software, breaking down semi-large projects is a good exercise. For other areas, I recommend starting with a goal that is abstract, but also attainable within months.
by jorkingit | 2025-06-13 06:26:29+00:00
Great work! Just an FYI, you might want to limit the dynamic allocation size in the bencode decoder: since it's untrusted input (either from torrent or announce), a malicious input could DoS the client by requesting extremely large allocations during string parsing. A good upper bound could be the remaining length of the input, as a well formed torrent can't contain a string longer than the rest of the file.
by uncircle | 2025-06-13 06:28:11+00:00
Sweeteners don’t solve the obesity epidemic, they make it worse. Bodies are complex systems with feedback, you cannot focus only on the amount of calories. If one is overweight, and keep reinforcing their dietary patterns by eating sweet food, caloric or not, they’re never gonna adapt to healthy eating which is barely sweet if at all. I’m speaking from an holistic point of view; the American idea of healthy food is twisted by commercial interests and only calories seem to count.

Also, you forget that sweeteners still cause an insulin release and some research shows that their effect on metabolism might be even worse than sugar itself because, being zero calories, they do not contribute to the sense of “caloric satiety,” so for the same volume of food your body has released more insulin.

It’s convenient for companies to claim sweeteners are safe and sugar is the devil, but consumers should take such a claim with a grain of salt. There is no silver bullet, and dietary sciences is a field of bad science and enormous commercial incentives to lie. A good rule of thumb is whatever we have consumed for thousands of years is likely not that bad. Sugar in quantities should be avoided, but elsewhere you have claimed that it is bad for you and I have to disagree with such hyperbole, compared to something we’ve eaten for less than 50 years created by food lobbies.
by ta20240528 | 2025-06-13 06:28:49+00:00
As I speaker of five languages, all but one fluently: why does my understanding of the world magically increase when I learn a new noun so say "sparrow" in the fifth that I'm learning?

Is it linear (25% more understanding for the fifth) or asymptotically? Does it increase across all domains equally (geology, poetry, ethics) or asymmetrically?

Seriously, explain it to me?
by neoden | 2025-06-13 06:33:40+00:00
I had a similar experience when I decided to use a pencil and paper, along with a few simple rules, to manage my to-do lists. This method worked so well for me that I started thinking about the reason for its success. These are my conclusions:

- It was MY method

- It was simple enough to fit entirely within one piece of thought

- It provided a clean feedback loop when I could strikeout the completed task

- I like handwriting

So it relied on things that my brain finds pleasurable
by WithinReason | 2025-06-13 06:35:00+00:00
Triangles are the wrong choice, but otherwise you make a good point. This guy uses an atlas because he renders fonts by super sampling bezier curves using up to 512 samples per pixel, which is very expensive. However, you could e.g. compute the integral of the intersection of the bezier curve area with the subpixel area much faster, which I think could run in real time without a need for an atlas and would be more accurate than supersampling.
by bicepjai | 2025-06-13 06:35:33+00:00
I think anthropomorphization of machines is an evolving concept. If some asked me to do an impression of a robot, i would say “bee bop, i am a robot”; but if I ask that same question to my son in 20 years, he’s gonna remember them as human companion or helper or pair programmer or the list goes on. At that point that generation is going to look at them differently
by WD-42 | 2025-06-13 06:37:42+00:00
I agree with most of your argument but I do think security is somewhat special.

You can vibe code an entire mess and it'll still "work". We've seen this already. As good as LLMs are they still write overly verbose, sloppy and often inefficient code. But if it works, most people won't care - and won't notice the security flaws that are going to be rife in such large, and frankly mostly unread, codebases.

Honestly I think the security world is primed for it's most productive years.
by tonitagolaymp77 | 2025-06-13 06:38:09+00:00
We've built StopX, an AI-powered content blocker that achieves 99.7% accuracy in real-time explicit content detection. Unlike traditional blockers that rely on static blacklists, our WebShield technology combines computer vision, contextual URL analysis, and behavioral patterns to identify unwanted content across all devices. Technical Approach: Our system uses three detection layers: Deep learning models for real-time image analysis Pattern recognition for URL structure and metadata evaluation Behavioral algorithms that adapt to individual usage patterns The challenge was building something that works across Chrome, Firefox, Android, iOS, Windows, and Mac with synchronized protection. We solved cross-platform consistency through a centralized API that manages filtering rules while maintaining local processing for privacy. Performance Metrics: After 18 months of development, we've hit some interesting milestones: 250K+ active users with 92% reporting productivity improvements within 30 days Processing thousands of URLs and images daily with minimal system impact False positive rate below 0.3% through continuous model refinement Privacy-First Architecture: We designed the system to process content locally where possible, using encrypted data transmission and minimal data collection. The stealth mode operation runs transparently without performance degradation. What's Next: We're exploring enterprise applications and considering open-sourcing parts of the filtering engine. The behavioral psychology integration has been particularly interesting - users report not just blocked content but actual habit change. Would love feedback from the HN community on the technical approach and potential applications beyond content filtering.
by raxxorraxor | 2025-06-13 06:39:59+00:00
You parent is wrong but so are you and you make the same mistakes.

The effects you describe have higher order effects as well that can indeed have negative effects. Not saying republicans would give a crap about them, but they are undeniable. For wages developments and housing prices, topics that fundamentally influence basic needs very much in contrast to GDP growths, even if there are positive side effects as well.

I think compared to the EU these immigrants can only be a net positive because people are forced to ultimately care for themselves.
by f_bit | 2025-06-13 06:44:12+00:00
Anecdotal but I have experienced body ache from drinking diet soda with aspartame. I drank regular soda when younger but switched over to watch my weight as I aged. A year on during a more sleep deprived week I went heavy on the caffeinated diet soda and ended up with all muscles feeling like I had done some major exercising. Thinking back, I had been experiencing regular aches. I stopped for a week, felt better. Tested again by going heavy for a week and the aches returned. Tried regular soda and no aches. I just stopped soda all together at that point. I check labels now and avoid anything with aspartame in it.
by Nursie | 2025-06-13 06:44:32+00:00
> No artificial sweetener seems to be safe

Are we at that point yet?

AFAICT aspartame seems to be pretty safe and well-researched, and the IARC listing it as "possibly carcinogenic" itself seems to be controversial. In that category it is listed along side such things as Aloe Vera, Carpentry, Low-frequency magnetic fields, Traditional asian pickled vegetables, Radiofrequency electromagnetic fields and Gingko Biloba extract...
by raxxorraxor | 2025-06-13 06:46:03+00:00
Governments that were not considered authoritarian have broken laws as well. This didn't start with Trump, I would say Trump is a result of laws being ignored.

For the fight against terrorism or any other shit de jours that caused the current outrage.

So now any reference to laws sound hollow. It doesn't mean anything. What mattered is what governments used their power for.
by chubot | 2025-06-13 06:47:32+00:00
Oh cool, I'd be interested to read about the issues you had expressing Rust syntax in Vim!

And yes, there are a whole bunch of limitations:

- C function definitions - harder than JavaScript because there's no "function". It's still syntactic, but probably requires parsing, not just lexing.

- C variable definitions - I'd call this "coarse semantic analysis", not coarse parsing! Because of the "lexer hack"

- Indentation as you mention - there was a thread where someone was complaining that treesitter had 2 composed parsers for Markdown -- block and inline -- although I'm not sure if this causes a problem in practice? (feedback appreciated)

---

But I did intend for YSH to be easier to parse than shell, and that actually worked, because it fits quite well in Vim!

I noted here that OSH/bash has 10 lexer modes -- I just looked and it's up to ~16 now

https://www.oilshell.org/blog/2019/02/07.html#2019-updates

Whereas YSH has 3 mutually recursive modes, and maybe 6 modes total.

---

On the "coarse semantic analysis", another motivation is that I found Github's semantic source browser a bit underwhelming. Not sure if others had that same experience. I think it can't really be accurate because it doesn't have a lot of build time info. So I think they could have embraced "coarseness" more, to make it faster

Although maybe I am confusing the UI speed with the analysis speed. (One reason that this was originally a Codeberg link is that Codeberg/Forejo's UI is faster, without all the nav stuff)

There are some related links here, like How To Build Static Analyzers in Orders of Magnitude Less Code:

https://github.com/oils-for-unix/oils/wiki/Polyglot-Language...
by shrx | 2025-06-13 06:48:08+00:00
Fiber optic strands are glass rods (solid interior) instead of tubes (hollow cylinder). The two shapes have different strength properties per unit mass [1, 2].

[1] https://physics.stackexchange.com/questions/12913/hollow-tub...

[2] https://www.mtbiker.sk/forum/download/file.php?id=207637
by b0a04gl | 2025-06-13 06:48:32+00:00
vim’s syntax engine doesn’t track context. it matches tokens, not structure. in langs like ysh where command and expression modes mix mid-line, this breaks. no memory of nesting, no awareness of why you’re in a mode. one bad match and sync collapses. it’s not about regex power or file size. the engine just isn’t built to follow structure. stop layering hacks. generate semantic tokens outside, let vim just render them.
by kiliankoe | 2025-06-13 06:49:29+00:00
It's come up every time something related to thermal printing has been mentioned on HN lately, but this is honestly great stuff if you're in Germany: https://www.oekobon.de/

These non-poisonous blue receipts have the added benefit of being able to be marked with a fingernail, which is nifty if you're using them to print your shopping list, crossing things off is very satisfying.
by lan321 | 2025-06-13 06:50:40+00:00
> Just admit it and then it becomes possible to find a solution that doesn’t require murdering tens of thousands of Palestinian children to ethnically cleanse Palestinians that won’t give up their right to return.

Out of curiosity, what would that be? From what I've seen, you'd either have to build a wall/externally enforced border, hoping they get over it after forced peace for X years, or force migrate one of them.
by zozbot234 | 2025-06-13 06:51:12+00:00
It looks like the DisplayID standard (the modern successor to EDID) is at least intended to allow for this, per https://en.wikipedia.org/wiki/DisplayID#0x0C_Display_device_... . Do display manufacturers not implement this? Either way, it's information that could be easily derived and stored in a hardware-info database, at least for the most common display models.
by ivape | 2025-06-13 06:52:26+00:00
Stay out of what? The Trump admin’s foreign policy is to allow Netanyahu to operate autonomously. The same they offer ICE.

In terms of American foreign policy interest it’s basically making us more vulnerable.

In so many words, Netanyahu might get us all killed. Trump will not decry anything Netanyahu does, so it’s 4 years of war and you better believe it. Putin also has no incentive to give Trump a peace deal. Provide enough war zone cover and Taiwan will just happen, all of a sudden. Negotiate all three peace deals, please, I’d love to see it.

Trump is out of his element here, he’ll be leaving a world at war. When you a let a pot of boiling water keep boiling on the lowest heat, you may not see all the boiling bubbles, but I assure you it’s boiling. It’s a boiling world, and without certain advents like AI, we’d literally have no positive news (think that through for a second). Without the miracle of AI, all we’d have is the most depressing world situation you could imagine.
by zevon | 2025-06-13 06:52:27+00:00
Live collaboration is not an MS Office native functionality either (needs OneDrive / SharePoint as a backend). If your org uses traditional file shares or some cloud storage/sync tool that is not MS, you're out of luck.

There are tools like Collabora (built on LibreOffice) that work very similar to what you would get from MS. Collabora, for example, can also be integraded with Nextcloud and Owncloud.
by jrapdx3 | 2025-06-13 06:52:49+00:00
While I'm most familiar with evaluating pharmaceuticals, the same principles apply to food additives. The issue arises that certain adverse effects occur infrequently or only after an extended interval from the time of exposure. Safety of drugs, food additives, et.al., are evaluated in relatively small premarketing samples. For uncommon (or delayed) effects to become evident it requires a much larger population to be exposed to the drug or additive.

"Years of experience" means an increasingly larger population has been subject to use of the compound. It may take 10's of millions of exposures for the problems to become clear enough to elicit action.

A surprising number of drugs (and food additives) have been used for decades before their adverse effects were recognized and the offenders removed from the market.

We should regard initial or early claims of safety as preliminary statements. Indeed skepticism is warranted. Ongoing monitoring/reevaluation is necessary. Certainly utmost caution is needed before allowing products to be widely used.
by NitpickLawyer | 2025-06-13 06:53:22+00:00
> most people won't care - and won't notice the security flaws that are going to be rife in such large, and frankly mostly unread, codebases.

I agree. But what I'm trying to say is that we'll soon have automated agents that look for vulnerabilities, in agentic flows, ready to be plugged into ci/cd pipelines.

> Honestly I think the security world is primed for it's most productive years.

In the short term, I agree. In the long run I think a lot of it will be automated. Smart fuzzers, agentic vuln scanning, etc. My intuition is that we'll soon see "GAN"-like pipelines with red vs. blue agents trained in parallel.
by adrian_b | 2025-06-13 06:55:35+00:00
In principle, it seems impossible for any artificial sweetener to be completely safe, unless it is consumed only sporadically, not regularly.

Unfortunately, the receptors for sweetness do not exist for the sole purpose of giving pleasure to the brain.

They are also used to signal to various organs to prepare for an influx of carbohydrates. When the signal is frequently present, but then the expected carbohydrates do not come, then this is likely to perturb some control functions of the body, like in the fable about the boy who cried wolf.
by chubot | 2025-06-13 06:55:55+00:00
no memory of nesting

It absolutely nests! Vim's model has recursion, and it works perfectly. Some details here:

https://github.com/oils-for-unix/oils.vim/blob/main/doc/stag...

This highlighter is extremely accurate, and I would call it correct. I list about 3 known issues here, and they are all fixable/expressible in Vim's model:

https://github.com/oils-for-unix/oils.vim/blob/main/doc/algo...

Please install it, and file bugs with any inaccuracies. If YSH code is valid, it should not be mis-highlighted. There is test data in false-postive.ysh and false-negative.ysh.

Try to break it!

---

There are lots of Vim/Textmate plugins that are buggy, but it doesn't mean that all such plugins are.

generate semantic tokens outside

I'd also say that this doesn't really help, since I believe Tree-sitter is the most common way of doing that. I show at the top of the doc that Tree-sitter has issues in practice expressing shell (although admittedly it's not a fair comparison to YSH in Vim. Shell in Vim will have more problems, although in practice I find it pretty good)
by bayarearefugee | 2025-06-13 06:55:58+00:00
Same.

I find LLMs to be useful, but my day to day usage of them doesn't fit the narrative of people who suggest they are creating massive complex projects with ease.

And if they are, where's the actual output proof? Why don't we see obvious evidence of some massive AI-powered renaissance, and instead just see a never ending stream of anecdotes that read like astroturf marketing of AI companies?
Ask HN: Develop more intentional computer usage via physical unlocking device?
by uvNozAWQCUchtX | 2025-06-13 06:56:25+00:00
I get sucked into my laptop very easily. Games, news, online chores, even work.

As soon as I tear my attention away from the abstract computer world -- getting up to pee, answering the door, running out of battery -- I'm back in my body, looking around at todos, noticing the time. I'm suddenly better equipped to be intentional about what I want to do.

Maybe I don't make perfect decisions every time, but if I were regularly interrupted from the virtual mindspace, and forced to get up and, say, tap my computer to a physical device on the wall downstairs, at least I would have a fighting chance to consider what I actually want to be doing. I could grow that muscle over time.

I've tried lots of apps and life hacks, but they're all too easily overridden by my pleasure-seeking lost-in-the-computer brain.

SO I ASK HN: DOES SOMETHING LIKE THE FOLLOWING EXIST?

I want my computer to effectively lock up after X minutes of usage until I unlock it with a physical device (that I would secure next to the downstairs door)?

It would almost be enough to simply lock my machine for 5 minutes, since that would likely force me to move out of boredom -- BUT sometimes I need to be able to continue without a long interruption (maybe I'm in a meeting!), so a shorter pause is necessary, as though the internet blinked or I had to let the cat out.

Some extra context:

0. I don't mind hacking existing building blocks together, but I'm looking for a reliable solution: something that is as simple and testable as possible to reduce the risk of actually bricking my machine.

1. I need locking to turn on automatically based on a schedule and/or minutes of usage because otherwise I will simply not turn it on.

2. The locking cannot be circumvented except by the physical unlocking device... ideally it's clone, so there's an immediate backup and/or there's an emergency password that I don't know but could "phone a friend" for.

3. Once locked, it has to (a) be possible to unlock and use my computer, but (b) doing so has to "break the computer spell" (as in require looking away from the screen and physically getting up) so I can be intentional about what I do next.

That is, I shouldn't be able to click an "unlock" button with my mouse (too easy). Nor can the unlocking adhere to a rigid schedule, because sometimes I really do need to, say, keep using the computer late at night for work or life stuff (this might be addiction brain talking, but if I can develop an intention muscle instead that would be great).

Thanks for sharing your thoughts and ideas.
by adityapatadia | 2025-06-13 06:56:38+00:00
Jason, here is a story about how much your work impacts us. We run a decently sized company that processes hundreds of millions of images/videos per day. When we first started about 5 years ago, we spent countless hours debugging issues related to memory fragmentation.

One fine day, we discovered Jemalloc and put it in our service, which was causing a lot of memory fragmentation. We did not think that those 2 lines of changes in Dockerfile were going to fix all of our woes, but we were pleasantly surprised. Every single issue went away.

Today, our multi-million dollar revenue company is using your memory allocator on every single service and on every single Dockerfile.

Thank you! From the bottom of our hearts!