MurphyA/hacker-news huggingface dataset:
by cafard | 2025-06-26 10:05:07+00:00
A historical note:

Forty years ago, I shared a house with a guy who had recently completed an MA, and hadn't found any work related to it. I always knew when his family had been in town, because the Help Wanted ad section from the Sunday New York Times would be on the table. Memory may exaggerate, but I remember this section as fatter than today's Times is Monday through Saturday. The Washington Post had a similar Help Wanted section. In fact, I think that every job I have held since 1983 I applied for in response to a classified ad.

Obviously it would be better to be recruited, to have somebody call up and say, Hey, Dave says you're a great hand at X, are you by any chance looking to move? But responding to a classified ad is how an awful lot of us found employment back then.

I should say that there one would occasionally see ads for work requiring remarkable qualifications, but paying a bit better than McDonalds. It was only much later that I understood that these were placed to establish that one couldn't hire US citizens for the work and so should be allowed to hire someone on an H1-B.
by alganet | 2025-06-26 10:05:12+00:00
> I learned to trust them because their code works well

There's so much more than "works well". There are many cues that exist close to code, but are not code:

I trust more if the contributor explains their change well.

I trust more if the contributor did great things in the past.

I trust more if the contributor manages granularity well (reasonable commits, not huge changes).

I trust more if the contributor picks the right problems to work on (fixing bugs before adding new features, etc).

I trust more if the contributor proves being able to maintain existing code, not just add on top of it.

I trust more if the contributor makes regular contributions.

And so on...
by hliyan | 2025-06-26 10:05:21+00:00
I think it all started when libraries began to be replaced with "services" (I mean this in the broader context, not just auth). Integrations that were once development time or compile time, are now runtime. Two somewhat perverse incentives: developers get to offload some of their thinking (and also maintainence, reliability and scaling worries) to a service, and the service provider gets a perpetual income stream.
by lukan | 2025-06-26 10:05:28+00:00
"local proprietors would head to forested mountains unfit for residences, and actively desertify it to put on PVs to collect incentives, if incentivized."

Can you give me one example, where PVs contributed to desertification?

Usually it is the contrary, in the shade of the PVs, more can grow than in direct burning sunlight.

And there are plenty of non forest land, or literal dessert land tp put PV there and if forest gets cut, than for other reasons than PV. And china is actually quite active in combating desertification with green belts and recently, PVs.
by giantg2 | 2025-06-26 10:06:09+00:00
I don't think people are really going hard nationalist. But it does seem like the offshoring has increased over the past 5 years. Im probably going to lose my job in part because offshore has essentially eliminated the internal job moves available to me so I can't get off a shitty team.

Everything keeps getting automated or shipped overseas. It's hard to be optimistic for my kids to have good job opportunities when they grow up.
by zoobab | 2025-06-26 10:06:52+00:00
BigTech now control Qemu?

"Signed-off-by: Daniel P. Berrangé <berrange@redhat.com> Reviewed-by: Kevin Wolf <kwolf@redhat.com> Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com> Reviewed-by: Alex Bennée <alex.bennee@linaro.org> Signed-off-by: Markus Armbruster <armbru@redhat.com> Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>"
by tenthirtyam | 2025-06-26 10:08:18+00:00
I recently read "Delta-v" and the sequel "Critical Mass: A Novel" by Daniel Suarez. They're very much fiction but there is a certain amount of science underpinning the arguments and I enjoyed that aspect. And the author even states that he's trying to get across, with solid arguments, why humanity should begin planning asteroid mining ASAP. In brief, the arguments are:

Firstly we're now at a point where we have lots of cheap energy available, principally chemical. Depending on many factors it's conceivable that we are in fact at or near peak human energy output (e.g. WW3 or civilization collapse - the next iteration of civilization won't have so much cheap oil to exploit).

Secondly LEO is not yet full of junk, meaning that it's trivial to find launch windows to LEO and beyond. That could easily change very much for the worse in a relatively short time (I infer decades from the books).

Finally it's unrealistic to expect us to colonize the Moon or Mars using only Earth-mined materials. You can launch a spacecraft to Mars easily, but to launch a small city's amount of construction equipment and raw materials is beyond our capabilities.

Conclusion: now is the best time to mine asteroids. We can do all of the processing and much of the construction in LEO (or even better at Earth-Moon or Earth-Sun lagrange points) and then, with relatively low delta-v, we'd actually have a chance of becoming an interplanetary species!

But, the novels warn, the window of opportunity will eventually ("soon") close. Well worth the read.

Maybe someone else more familiar with the arguments, who has also read these novels, can offer a critique?
by zeroq | 2025-06-26 10:09:09+00:00
I'm not sold on Better Auth.

Recently I wanted to add auth to my pet project, and between (a) using better-auth, then integrating 3rd party mailer service, and rolling out my main dashboard (b) leeching off free tier of Auth0 or Clerk and getting all batteries included I've chose the latter.

The fact that better-auth doesn't come with barebone dashboard is criminal.

For pet project it doesn't matter if I have to integrate Resend or Clerk, it's still some mental overhead I have to account for, but with Clerk at least I don't have to manage my users using sql queries.

People say it's better because you can embed it in your app. I don't buy that either. If I'd have to rollout better-auth I'd do that as a separate app, just to encapsulate database, dashboard, and integrations.

Anyway, glad it's getting traction, I just don't get all the hype around it.
by tengwar2 | 2025-06-26 10:09:56+00:00
The other thing I would hope for is wildcard certificates. I stopped using S/MIME because I usually create a new email (based on the same domain) for each vendor that I deal with. I would find it useful to be able to get a single certificate covering all email with that domain. Obviously that does mean that anyone else using an email from that domain would have to share the certificate, but for private use that can be acceptable - I don't worry about my wife reading my currently unencrypted email!
by wakawaka28 | 2025-06-26 10:10:52+00:00
It IS overly antagonistic. Maybe this stuff is overpriced but I think there is a need in the market. Lots of medication is protected by patents and overpriced. Doctors also gatekeep a lot of basic medications like Viagra. Third world countries are not nearly as uptight about medication, and probably sell Viagra and such as OTC medications. Perhaps the prescription system in the US can detect drug interactions, but for something like that there is probably little benefit to having a doctor in the loop. As for the quality of the medication, that could be debated. But it is quite possibly made at the same factories as the prescription stuff.
by calessian | 2025-06-26 10:11:02+00:00
How the platform and the vendor split that money is irrelevant to me, and I’m not convinced this would become cheaper - evidently consumers are willing to pay the current price, so why wouldn’t the vendor just increase their profit?

In the same vein: Games don’t cost less on the epic store despite their lower (compared to Steam) either, so as an end user it makes no difference where I buy games.
by lrvick | 2025-06-26 10:13:44+00:00
I think the biggest missing bit in Tinfoil is lack of full source bootstrapped deterministic builds. That is an absolute requirement to ensure no single member of the supply chain, such as a single Debian maintainer or a Tinfoil release engineer cannot tamper with the image.

Also there is the issue that the debian and ubuntu packages you rely on can change from one day to the next etc.

I went down that road for over a year, building a whole package.json style hash locking system on top of apt only to abandon it realizing no existing Linux distribution was up to the task from a trust and security perspective. Even a lot of the packages Debian claims are reproducible, like rust, are actually just built from unverifiable binary blobs from the internet. It was a sad realization that the reproducibility of all existing distros has some huge asterisks.

So my team and I at Distrust started StageX to be the first container native Linux distribution and the first that trusts no single human or system, now at the heart of enclaves at Mysten Labs, Turnkey, etc. Totally FOSS though donations or support contracts are always welcome.

Took a look at your image generation setup and it could certainly be ported to stagex to have a completely verifiable, deterministic, and tamper evident supply chain.

https://stagex.tools

By all means reach out if you want help! Not many of us working on this sort of thing.
by dspillett | 2025-06-26 10:14:03+00:00
I think “since the 90s” here is “since the late 90s”. When I first was aware of gif files (in the early 90s IIRC) I only saw the name and meaning in print so went with the hard G to match the g's pronunciation in graphics, I don't think I was aware of the original intention to pronounce it jif until somewhere in the early 2000s, at which point the use of the hard g was almost ubiquitous and the soft g idea was presented as an interesting/amusing aside.
by sigilis | 2025-06-26 10:14:46+00:00
The importance of the system in question is not a factor in whether something is a security bug for a dependency. The threat model of the important system should preclude it from using dependencies that are not developed with a similar security paradigm. Libxml2 simplly operates under a different regime than, as an arbitrary example, the nuclear infrastructure of a country.

The library isn't a worm, it does not find its way into anything. If the bank cares about security they will write their own, use a library that has been audited for such issues, sponsor the development, or use the software provided as is.

You may rejoin with the fact that it could find its way into a project as a dependency of something else. The same arguments apply at any level.

If those systems crash because they balanced their entire business on code written by randos who contribute to an open source project then the organizations in question will have to deal with the consequences. If they want better, they can do what everyone is entitled to: they can contribute to, make, or pay for something better.
by thechao | 2025-06-26 10:15:43+00:00
Even at .0006c (our current tech), the galaxy would be filled with (weakly self propagating) robotic probes after just 750 million years. Unless extremely long lived self-propagating probes just ... die out ... that implies no aliens older than 750 million years from our galaxy. It implies no aliens from the nearby galactic neighborhood within 3 billion years. That kind of implies we're all alone.

I have three wild-eyed theories: (1) eukaryotism is an unbelievably exotic step; (2) and/or the moon is required and ultrarare; or, (3) advanced civilizations eschew yellow stars for being inconveniently short-lived: maybe they prefer brown dwarfs, white dwarfs, or black holes for their energy gradient.
Show HN: Electret Mic Preamp Circuit
by nativeforks | 2025-06-26 10:16:20+00:00
I built a studio-quality electret mic preamp that’s all about low noise, high gain, and super clean audio — and the best part? It uses easy-to-find components. This is my own design, not based on the usual TI or Analog Devices reference circuits. I ran tons of simulations in LTspice before actually building it, just to make sure everything checked out.

Everything’s open-source — schematics, design notes, and step-by-step build guide — so feel free to copy it, tweak it, or make it better.

Here's a quick demo of how it sounds: https://youtu.be/RZR_PrxcBBU?si=9gN_5yx09bwNFjba

I spent over a month diving into research, testing, and fine-tuning. Would love to hear what you think!
by OJFord | 2025-06-26 10:16:54+00:00
I think a better title here than:

> The first non-opoid [sic] painkiller

might be:

> The first non-opioid nociceptive pain-killer

Nociceptive pain being that by actual damage to tissue, as opposed to neuropathic pain like a headache or inflammation that you might take a (non-opioid!) NSAID for.

https://www.iasp-pain.org/resources/terminology/
by nemoniac | 2025-06-26 10:17:37+00:00
Only partially. At least for my Dutch licence. It contains neither holder's last name nor end date.

It does start with D1NLD. Then a single digit which is not the checksum of the foregoing (using the passport checksum algorithm). Then the document number. Then some letters and numbers I can't make any sense of. It ends with a correct global checksum for all of the foregoing.
by wakawaka28 | 2025-06-26 10:17:47+00:00
They have to make it sound overly serious, because if it wasn't then you might question why you must go to a doctor or why the prices are (or were) high. When a new version comes on the market, they will conveniently find lots of negative side effects to make you take the newer and more expensive one.

I had to laugh at the gas station sex pill thing. In other countries not only do they have the gas station pills with Viagra in them, but they have a lot of basic "prescription" meds for sale over the counter at the pharmacy.
by Imustaskforhelp | 2025-06-26 10:17:49+00:00
There is a vscode extension that can basically be an agent but use gemini from the website which is cool.

But I found it to a little bit clunky and I guess I like the ui of google, I mean, the point is to get the point across. If you really hate the gemini ui, I am pretty sure that there is stylus extension which can beautify it or change the styles to your looking.

I guess I am an android user but still I understand your icloud subscription but if you're only choice as to why to not switch to google is passwords (but maybe you can mention more?), then for passwords, please try bitwarden, I found it to be really delightful.
by ath3nd | 2025-06-26 10:18:33+00:00
> I think the ideal set up (it would have been so for me) would have been for both parents to work part time.

Beautifully said, very progressive also!

I am a big fan of the 4-day work week (for the same amount of money as 5 days), it's been transformative for my life. The extra energy and focus you get from that 1 day translates to higher productivity in the 4 days where you do work. Sadly, the current "squeeze em', bleed em' dry, and drop em'" brand of capitalism is incompatible with the majority of the people to experience how good life can be like that.

I certainly ain't looking forward to them raising the retirement age to 1337 by the time I get to retire.

It's like a race where they repeatedly move the finishing line because the organizers took the medals and sold them, while waiting for you to drop dead so they don't have to give you what you are due.
by PicassoCTs | 2025-06-26 10:18:51+00:00
Everywhere socialist movements like the ANC take hold- there sets in a "im going to extract as much as i can from the state as he extracts from me - while giving him nothing" mindset. Its prevalent in the older generations in the eastern european block countries, china - its almost universal where the socialist experiment was run. The idealized society does not mesh and work with human nature at all, in fact it brings out the worst.

The old people of china, still steal paper towels on public toilets, because "take it all, while its there, before its gone" is the mindset encouraged. They brought you the tourists-"buffet rush"-genre of videos on youtube.

Of course this leads to dysfunction and misery- which then leads to conspiracy - of "they took it". Its ultimately another version of low-thrust society unable to function. https://en.wikipedia.org/wiki/High-trust_and_low-trust_socie...

A ugly side-effect that lingers for decades. Re-distribution and retribution, do not increase the size of the cake. Hard work rewarded does!
by kinow | 2025-06-26 10:18:54+00:00
Apptainer and singularity ce are quite common in HPC. While both implementations fork the old singularity project, they are not really identical.

We use singularity in the HPCs (like Leonardo, LUMI, Fugaku, NeSI NZ, Levante) but some devs and researchers have apptainer installed locally.

We found a timezone bug a few days ago in our Python code (matplotlib,xarray,etc.), but that didn't happen with apptainer.

As the code bases are still a bit similar, I could confirm apptainer fixed it but singularity ce was still affected by the bug -- singularity replaces the UTC timezone file by the user's timezone, Helsinki EEST in our case in LUMI HPC.

https://github.com/sylabs/singularity/issues/3686
by mandmandam | 2025-06-26 10:19:26+00:00
In foraging societies - ie, most people for the vast majority of human history - people worked ~15–20 hours/week on subsistence tasks. The rest was leisure or social time (ie, time for being a human later rebranded as 'idleness').

Industrialization has pushed inequality to extremes while raising hours worked - even as productivity keeps shooting up. There's no good reason for people to tolerate this; it's just exploitation.
by aa-jv | 2025-06-26 10:19:35+00:00
Very interesting .. I was recently tasked with getting a bespoke AI/ML environment ready to ship/deploy to, what can only be considered, foreign environments .. and this has proven to be quite a hassle, because, of course: python.

So I guess Apptainer is the solution to this use case - anyone had any experience with using it to bundle up an AI/ML application for redistribution? Thoughts/tips?
by BiteCode_dev | 2025-06-26 10:20:24+00:00
I get it. And also, I know that Apple and Google would abuse that, and destroy lives and businesses as casually as I eat my breakfast. Then 1000's of disposable companies would pop up with valid id, and abuse some system (like terrible DMCA) and make it worse.

If you think people self-censoring themselves on social media is now a problem (the "unlive" novlang is always such a dystopic hint to me), you have seen nothing.
by citrin_ru | 2025-06-26 10:20:57+00:00
> Source address filtering (BCP 38) got us part of the way, but it's difficult/undesired to do in data centers.

BCP 38 is applicable in the DC environment, especially between an operator (hosting/cloud provider) and the customer. Where it is from hard to not practical to use is the network backbone and link between different ISPs. But that's would be a minor problem if BCP 38 will be applied to all stub networks.
by berkes | 2025-06-26 10:21:00+00:00
> A single, pre-compiled binary is convenient for the user's first install only.

Its not.

Its convenient for CIs, for deployment, for packaging, for running multiple versions. It's extremely simple to update (just replace the binary with another one).

Now, e.g. "just replacing one file with another" may not have convenience commands like "npm update". But its not hard.

My point is that a pre-compiled binary is extremely more convenient for *everyone involved in the delivery pipeline* including the end-user. Especially for delivering updates.

As someone who's packaged Javascript(node), Ruby, Go and rust tools in .debs, snap, rpms: packaging against a dynamic runtime (node, ruby, rvm etc) is a giant PIAS that will break on a significant amount of users' machines, and will probably break on everyones machine at some point. Whereas packaging that binary is as simple as it can get: most such packages need only one dependency that everyone and his dog already has: libc.
by graemep | 2025-06-26 10:21:17+00:00
Services are bad - that is what the first part of the story is about.

However I do not think it is different for any online service. Any American company would have to cut off services to an individual (or organisation) subject to sanctions (the main example given). The same might apply to other countries for various reasons. There are various reasons a service might fail, or cut off a particular customer (lots of reasons, lots of examples in previous HN discussion).

What has changed is that the typical MS customer is a lot more dependent on MS services - MS 365, Python in Excel ONLY works in the cloud, people used hosted email instead of their own Exchange installation...... That means MS cutting off a customer would mean all their IT would cease working. They can just shut down any organisation with that level of dependency if they are ordered to, or decide to, do so.
by cometapi | 2025-06-26 10:24:20+00:00
When you’re looking to elevate your creative workflows with AI-driven image generation and editing, FLUX.1 Kontext API is a game-changer. In this article, we’ll walk through everything you need to know—from the fundamentals to advanced best practices. We’ll dive into real-world examples, and guide you step by step so that by the end, you’ll be ready to harness the full power of FLUX.1 Kontext in your projects.
by citrin_ru | 2025-06-26 10:24:32+00:00
It is commonly done in a sense that probably about 50% of end users cannot spoof source IP but even if 10% (I don't know exact numbers) of end users allowed to spoof IP (due to ISP neglegence) and 1% of them are compromised (one way or another - useful software with hidden "functions" seems to be a common way) it is more than enough for a huge DDoS attack.
by dan00 | 2025-06-26 10:25:29+00:00
> The problem here (again, i think) lies in the fact that we don't often see the grander value of our everyday works and yearn to do SOMETHING grander, more impactful, but we don't know which, or how, and in time it will torment us each time we do our normal work.

I think it's a kind of yearning that can't be satisfied in the outside world. It's an inside problem and can only be solved there.
by SirHumphrey | 2025-06-26 10:26:21+00:00
I did start to use them for AI development on the HPC I have access to and it worked well (GPU pass-through basically automatically, the performace seemed basically the same) - but I mostly use them because I do not want to argue with administrators anymore that it's probably time they update Cuda 11.7 (as well as python 3.6) - the only version of Cuda currently installed on the cluster.
by surajrmal | 2025-06-26 10:26:46+00:00
I don't think the style described in that doc is at all ugly. It's practical and simple. I say this as someone who spends a lot of time writing modern c++ and heavily using templates.

I thoroughly enjoy rust, but I doubt not being able to use it should be grounds for avoiding contributing to a project. Unless you are going to write async heavy code, libusb is pretty easy to use in C.
by metalman | 2025-06-26 10:27:10+00:00
technological advances for off/tied grid solar are now maturing into high quality solutions for all scenarios, costs are in free fall. I was an ultra early adopter of solar pv in 1991 in Takilma, Oregon living in a school bus,and continue to live off grid in Nova Scotia. As to Peurto Rico, my first question was answered by a quick look at a topograpgical map, and Peurto Rico looks a lot like Nova Scotia....lots and lots of hills and little valleys and rivers, which means that for them topography has a big part to play, also looking at pictures of the instalations there, basic roofing is clearly a price consideration before other things, so developing solar that assembles into a physical roofing product, that entirely replaces other roofing, would be important for anyone who is carefullt crunching numbers on a new build in a choice location, add in charging for cars and scooters which can double as extra house power when needed and the inevitability of the comming switch becomes obvious.