MurphyA/hacker-news huggingface dataset:
by paulsen | 2025-06-25 19:06:47+00:00
I wonder, do people from Paraguay "get" the accent from the different provinces? I mean it is pretty easy for us Argentines to differentiate a porteño from a cordobes and even someone from the northern provinces (specially if they use slang) with a short conversation

Granted, whenever I had any sort of conversation with someone from Paraguay I had trouble to differentiate their language from someone from the Argentine northeast unless they started using some Guarani words (and that is still not that useful given it is also spoken in the Corrientes province)
by naikrovek | 2025-06-25 19:06:51+00:00
The new Edit.exe is indeed safe from those things.

A requirement for the tool is that it must remain as small as possible, so that it can be included in the smallest distributions of Windows, like Nano Server. It is the rescue text editor there.

I’m sure plugins are going to do all the things that everyone doesn’t want (or does want) but the default edit.exe will remain small, I’d bet money on it.
by sameermanek | 2025-06-25 19:06:52+00:00
Gemini is by far the most confusing product of all time. The paid version for it is available in 3 forms: 1. Gemini pro (which gets you more google drive storage and some form of access to veo so people obviously get that) 2. Google AI studio, just to piss off redmond devs and which is used by no one outside google 3. This CLI, which has its own plan.

Then there are 3rd party channels, if you have a recent samsung phone, you get 1 yr access to AI features powered by gemini, after which you need to pay. And lord knows where else has google been integrating gemini now.

Ive stopped using google's AI now. Its like they have dozens of teams within gemini on completely different slack sessions.
by jkelleyrtp | 2025-06-25 19:07:22+00:00
Yeah not sure why someone's first reaction to seeing 150ms Rust hot-patches is to call it BS and a "pain-in-the-ass." Tough crowd.

We could aim lower, or make it entirely automatic. The first prototype was entirely automatic, but I realized that you definitely need to signal to the program to hot-reload.

For code like:

```rust

while true {

let msg = io.poll();

}

```

you're now stuck because the program is hung on a syscall. Doesn't matter if you hot-patch the loop, the program is stuck. My first prototype used the exception tables to unwind the program, but that didn't work on WASM and led to weird issues with cancellation and effects.

Similar issues with one-time initialization code at the beginning of the program. You could just hot-patch from `main` - basically restarting the program - but the whole point of hot-patching is that you can keep as much state around as possible while also changing its behavior.

For most apps, you just need one `subsecond::call()` and it works. The bevy folks wrote a `#[hot]` macro which we might integrate, but I'm also keen for frameworks to just adopt it and/or distribute a simple universal adapter.
by riskable | 2025-06-25 19:08:21+00:00
Google trained their AI on stuff they scraped without knowing whether it was pirated content. Why should it be different for Anthropic?

Google literally scrapes pirated content all day every day. When they do that they have no idea if the content was legally placed on that website. Yet, they scan and index it anyway because there's actually no way to know (at all!). There's no great big database of all copyrighted works they can reference.

I'm not saying Meta and Anthropic didn't know they were pirating content. I'm saying that it should be moot since they never distributed it. You can't claim a violation of copyright for content that was never actually "copied" (aka distributed). The site/seeders that uploaded the content to Meta/Anthropic are the violators since copyright is all about distribution rights.
by soneil | 2025-06-25 19:08:24+00:00
We had an issue like this with a small office lottery at work.

So our "setup" was simple. Our national lottery has a 'bonus ball' mechanism. Each participant in the office lottery bought a number. If this week's bonus ball is your number, you win the pot. If no-one wins, the pot rolls over.

The issue we hit was people joining mid-roll. Say we have 10 players, rolled over 9 weeks putting $90 in the pot. On week 10, a new player joins, $11 joins the pot, and the new player wins $101 for their $1 in. This is legally fair, but everyone with $10 in the pot feels robbed by the $1 newbie.

We took the easy out and only accepted new members during a 'fresh' pot - which isn't practical for a state lottery.

But it shows the difference between legal fairness and perceived fairness. Someone being able to buy every combination is game-breaking - who would play a lottery where millionaires are guaranteed to win? But roll-overs twist the math until it pays off, and now everyone who's entered in the previous weeks is unwillingly playing a lottery where millionaires are guaranteed to win.

It's not impossible to fix either - if you want to fix it. Cap wins at $x and return the remainder to the pot; keep the maximum prize far under the point where buying combinations pays off, and you can keep offering that maximum prize until the roll-over is exhausted.

But if you're the one making a profit from the lottery, you don't want to fix it. Massive jackpots are a feature - they encourage more participants, more spending, more profit.

And it does seem unfair to protect a mechanism that's so easily exploited, just because it attracts more people to be exploited. And it really can't be good for the long-term health of the game, if people know that roll-overs will be exploited.
by b_fiive | 2025-06-25 19:08:33+00:00
(disclosure: I work on iroh): you're selling yourself short! All of this is accurate, except for maybe the BGP stuff :)

Dumb Pipe & Sendme me are indeed demos, we do provide a set of default, public relays to use for free. The relay code is also open source, and if you want to pay us we can run a network for you.

We try to provide a few different options for discovery, the one we think has the most general utility is a custom DNS server, but both local mDNS and Bittorrent Mainline are also pluggable options.
by alexrsagen | 2025-06-25 19:08:38+00:00
I've written some Rust code to do the same thing. Mainly to get a copy of the photo stored on my passport, and because I was curious about how eMRTDs worked. I enjoyed reading through the ICAO 9303 specs, they were very detailed.

Example: https://github.com/alexrsagen/rs-nfc1/blob/main/examples/rea...

Library with eMRTD specific code: https://github.com/alexrsagen/rs-mrtd1
by SECProto | 2025-06-25 19:08:58+00:00
> Genuine question: In which country do you live where working Windows 10 PCs are sent to the landfill? [...] Nobody's throwing them away in the landfill when there's always a buyer/taker for them if you have patience

> Edit: would the downvoters care to explain themselves with some arguments?

I'll bite. I know many many many people who had all the era's of PC you mentioned. None of them still have them. None of them sold them. They may have put them on the curb, or "recycled" them, or sent them to the landfill - I don't know and it doesn't impact the fact that I don't know anyone who has a single one of them still in use.

This is easy to confirm by doing some order of magnitude math on how many of these machines were made (many), and how many are still in use (very few).

Regarding the Windows 10 specific question: it is still supported and receives updates, so of course they aren't going to landfill yet. The question is what will happen in a year or so once they are no longer supported (most non-techy users wont be installing LTSC). Spoiler: the vast majority of them will be sent to landfill or "recycler", not sold and kept in use.
by lucb1e | 2025-06-25 19:08:58+00:00
I had a security manager at a big bank (one of my first clients) tell straight to my face that the website decides whether to let me in before I even start typing the password(-equivalent) and that the password is just a formality not to scare people. Near as I could tell, he believed it himself

Marketing indeed. He had me doubting for a while what magic they weren't sharing with the rest of us to avoid countermeasures being developed, but I know better now (working in infosec, seeing what these systems catch, don't catch, and bycatch)
by ThrowawayR2 | 2025-06-25 19:09:03+00:00
"We have calculators so arithmetic matters less" you say?

https://en.wikipedia.org/wiki/Third-pound_burger#Marketing_f...

"The results revealed that many participants mistakenly believed that one-third of a pound was smaller than one-fourth (quarter) of a pound. Focus group participants expressed confusion over the price, asking why they should pay the same amount for a "smaller" third-pound burger."
by jpalawaga | 2025-06-25 19:09:31+00:00
I feel like I might be the only one who thinks Windows 11 is a good OS. The only tweak I needed to make was to turn of bing searches from the start menu.

I wish user accounts were still local only and did not back up to OneDrive, but I can understand that this is actually probably a valuable feature for 99% of windows users.
by mananaysiempre | 2025-06-25 19:09:47+00:00
Noot quite. DNS hostnames and IP addresses are encoded differently in X.509 certs: one is the dNSName option of the GeneralName choice type in the subjectAltName extension[1], the other is the iPAddress option. (And before you ask, tagging a stringified IP address quad as a dNSName is misissuance per the CA/Browser Forum Baseline Requirements[2] and liable to get your CA kicked from certificate stores. Ambiguous encodings are dangerous.) So some explicit support from the TLS library is indeed required. But I’m indeed not aware of many apps having problems with IP address certs.

[1] https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1....

[2] https://cabforum.org/working-groups/server/baseline-requirem...
by theamk | 2025-06-25 19:10:38+00:00
The "most common intuition" is that if you have a timestamp X, and you add 3600 seconds, you get a same time but in next hour (unless there are timezone shenanigans). But that's not true for TAI - it's entirely possible that 3600 seconds after 23:30:00, the time is 00:29:59. No intuition works like that.

So that's why I always advocate for UTC, ideally with smeared leap seconds (although this point is kinda moot now). The 0.00000001% of people who actually care about leap seconds can use the library to get TAI.
by bryanherediax | 2025-06-25 19:10:40+00:00
One of the core ideas behind Calyssa is that journaling isn’t just about expressing, it’s about understanding. The deeper your self-reflection, the more clarity you gain. And that clarity insight is what actually leads to growth.

Turns out, there’s a well-validated psychological model that captures exactly this. It’s called the Self‑Reflection and Insight Scale (SRIS). We came across this while working with our cognitive behavioral therapist advisor, and it’s had a big influence on how we’re designing Calyssa.

What is the SRIS?

Developed by Grant, Franklin & Langford (2002), the SRIS breaks personal reflection into two measurable skills:

Self‑Reflection: your tendency to explore your thoughts, feelings, and behaviors with curiosity (not anxiety). It’s cognitively driven, not emotional spiraling.

Insight: your ability to understand why you think or feel the way you do, the ability to connect the dots in your internal experience.

These two are tightly linked. Reflection is the process. Insight is the outcome.

Sample statements from the SRIS:

Self-Reflection items:

“I frequently examine my feelings.”

“It is important for me to understand how my thoughts arise.”

“I often take time to reflect on my thoughts.”

Insight items:

“I usually know why I feel the way I do.”

“I usually have a very clear idea about why I’ve behaved in a certain way.”

“I often don’t quite know what I really feel.” (reverse-scored)

Research shows that:

High self-reflection scores correlate with increased curiosity and emotional awareness.

High insight scores correlate with reduced anxiety and stronger self-regulation.

How Calyssa builds on this:

Calyssa isn’t just a journal—it’s a framework for strengthening these exact abilities.

We use SRIS-informed design to guide prompts that encourage meaningful reflection, not just data entry.

We’re building an insight engine that highlights patterns in your writing, moods, themes, shifts over time—helping you see what you might not catch in the moment.

We’re integrating a feedback loop, where you can actually track how your self-reflection and insight evolve over time—turning personal growth into something you can visualize.

And of course, it’s all encrypted and private. Your thoughts stay yours.

Why this matters:

Anyone can write things down. But to actually understand yourself, that’s the real power of journaling. Calyssa is being built to help you do that better, with tools grounded in real psychology.

We’re still early, but this is the north star. If you’re curious about the SRIS model or how we’re applying it, let’s talk. And if you want to try the beta and shape what this becomes, we’d love your input.
by qmarchi | 2025-06-25 19:10:45+00:00
No but maybe yes: It would be impossible, and undesirable to issue certificates for local addresses. There's no way to verify local addresses because, inherently, they're local and not globally routable.

However, if a router manufacturer was so inclined, they _could_ have the device request a certificate for their public IPv4 address, given that it's not behind CG-NAT. v6 should be relatively easy since (unless you're at a cursed ISP) all v6 is generally globally routable.
by ssalka | 2025-06-25 19:11:37+00:00
As much as I hate to say it, forcing users to look at ads probably does a decent job of limiting social media time, at least it would for me.

On TikTok you can just swipe through ads when they come up, so lots of people now have built-in muscle memory to auto-swipe every 4th or 5th video, or if they see "Sponsored" in the lower left. If I was instead forced to watch every one of those through to completion, I'd spend a lot less time on there.
Show HN: MaskGPT – A Chrome Extension That Masks Secrets in Copied Text
by bakigul | 2025-06-25 19:11:42+00:00
We all use AI every day but have you ever thought about security? Your code snippets might contain sensitive information like apikey:123 or pwd:mysecret. To solve this, my friend Atakan and I built a Chrome extension that automatically masks secrets in the text you copy-paste into GPT interfaces. We use regex-based pattern matching to detect and mask secrets in real time no more leaking sensitive keys by accident!

For example:

apikey=123456 → apikey=[MASKED] pwd:supersecret → pwd:[MASKED]

This is just the beginning, and we have a lot of room for improvement. If you’d like to contribute, please open an issue or PR on our GitHub!
by walthamstow | 2025-06-25 19:11:54+00:00
Everything in an LLM was already available, that's how they work.

Short of hiring a human, there has never been a phrasebook I can talk to out loud and it talk back. That's what I did that day in Manila, earbuds in, walking and talking, acting out scenarios like ordering food in Tagalog with the assistant.
by NewUser76312 | 2025-06-25 19:12:07+00:00
Thanks for your response, that's certainly an exciting use case, and what I'd hope AR headsets could help with in the future.

From your company's landing page, I saw the video and it looks like you're working with in-office project managers and similar white-collar types.

Do you work with any products in the field, like on the job sites? Is that something that would be interesting or valuable? Some examples: letting workers be able to quickly share first-person recorded videos of issues, first-person video chat with supervisors, ability to pull up blueprints and instructions in their heads-up displays, etc? Assuming perhaps a different platform than the Meta, as I don't think fully covered VR would be appropriate for a worksite.
by _Algernon_ | 2025-06-25 19:12:11+00:00
>But consumers want content and drama and opinion. Consumers want the talking heads on Fox News telling them what they want to hear. Consumers want something to consume all day, every day, constantly, whenever they need to feed their doomscrolling addiction.

Compulsion isn't desire. People are compulsively checking the news, Tiktok, Reddit etc. because thousands of smart engineers' full time job is to maximize how much time people spend consuming content. If you ask people if they want to spend 6+ hours doom scrolling every day, very few people would agree. Don't confound revealed preference with intrinsic desire. The former is just an assumption of an economic model.
by riskable | 2025-06-25 19:12:27+00:00
It can recite something like 80% of Harry Potter with carefully crafted prompts. If you take half a sentence from Harry Potter then tell the LLM to predict the rest it will complete it. That's what they did in that study you're referring to.

It's not even remotely the same thing as "can recite whole Harry Potter." If you ask an LLM to regurgitate Harry Potter it won't be able to do so because that's not how they work. They're prediction engines and it just so happens that Harry Potter quotes/excerpts are so pervasive on the Internet that the LLMs ingress ranks that style of wording higher than other styles.

Ask it to regurgitate some other, less-popular work. Do it for hundreds or thousands of them. You'll quickly find that those two examples you gave are the exceptions and that LLMs can't pull it off. They won't even get close.
by mbananasynergy | 2025-06-25 19:12:47+00:00
I'm the community manager for GrapheneOS. That isn't what happened, and it is very weird to not only see that on Mastodon, but also that you're going around saying it in other places, too.

People involved with the project you're working on have a history of making attacks on GrapheneOS, but what I mostly want to focus on is your suggestion because my goal here isn't to get in a back-and-forth with you or convince you, but rather provide context for others reading this.

Our hardware requirements are not arbitrary. They are what we need in order to be able to provide usable security to people who depend on it. There's no "average security" for devices that are missing patches for known vulnerabilities for months. That's a non-starter, not something imperfect that an OEM can work on improving. Multiple OEMs have reached out to us and actually want to do the work of improving their devices so that we can use them to provide security for people. It's very weird for people to be fixated on this idea that GrapheneOS should instead be supporting devices which can't actually provide what the OS is known for.

Without a secure element, a 6 digit PIN is no longer secure and can be bruteforced. What average person is using a long diceware passphrase to unlock their phone? Our device requirements are reasonable, and can be found at https://grapheneos.org/faq#future-devices. Every time people ask us to support another device, we have to point to that explain that we cannot, because to date, no other devices meet them, and those who do purposefully go out of their way to cripple third-party OS support (Samsung chief among them). Then, we ask people which of our requirements we should drop in order to support that other device, and why people think that requirement is unreasonable. To date, we have received no convincing reply to that.

You think we're chasing "perfection" but Pixels are just the best that exists right now and is extremely far from perfect. Our requirements aren't a wishlist, they're based on what is possible and reasonable today, not in the future.
by 2OEH8eoCRo0 | 2025-06-25 19:13:00+00:00
Did agile lead to this?

Features are planned in sprints. Add a widget here, remove a widget there. We end up with no design principles or vision, just a Frankenstein monster of junk.

His process sounds a lot like (dare I say) waterfall. Spending a long time in the design phase until you know what you want to build.
by Paradigma11 | 2025-06-25 19:13:05+00:00
The problem is that you still need the infrastructure to sustain through longer https://en.wikipedia.org/wiki/Dunkelflaute . It does not matter if you have to pay the fixed cost of the infrastructure to use it once or ten times a year. If we only need it every few years things will probably get worse since politicians might try to skirt it and hope nothing will go wrong during their tenure.

I am not arguing against intermittent energy sources but we need to address these problems.
by xeonmc | 2025-06-25 19:13:26+00:00
Can this be a made to work as an adapter to play older, raw UDP multiplayer games with random strangers? E.g. telling someone in Twitch chat “bro 1v1 me in CS1.6, here’s my Iroh ticket:”, they put it into their “InstaFrag NetDriver” Windows Client and you both launch CS1.6 and just start playing in an ad-hoc p2p lobby.

With Tailscale this use case is very cumbersome as you’d need to add them to your tailnet and configure access controls to make it an ephemeral connection.
by lucb1e | 2025-06-25 19:13:32+00:00
How does one graduate from probation, while being hellbanned / having your contribution quarantined? Since I'm certainly not wasting my time doing a second contribution so long as the first one isn't getting approved, it sounds like this would have to be a manual process or you'd lose out on new contributors that are seeing their work go to /dev/null and never returning
by everforward | 2025-06-25 19:14:23+00:00
I would presume, perhaps incorrectly, that “120 per 100,000” has 3 significant digits and “12 per 10,000” has 2.

I’ve never seen a period used like that in census data. It seems like a conscious choice because the period is confusing when used in the middle of a phrase. 12E1 makes more sense but is abnormal notation for many people.
by WarOnPrivacy | 2025-06-25 19:14:27+00:00
The desk I'm at abuts a shipping department and a ½doz tape guns. I have earbuds, headphones and Tidal & (self hosted) Navidrome.

I need noise and not vocals. I hunt for artists here: https://www.music-map.com/

Usable finds this week: Yomi Ship, sleepmakeswaves, Mt.Mountain.

Discards this week: Lord Loud, Phil Thorton, Luciferian Light Orchestra, Liquid Sound Company, Gandalf, black midi, Jadu Jadu, Jagannatha.

The latter aren't bad at all, just not a good fit.
by NoMoreNicksLeft | 2025-06-25 19:14:50+00:00
>The steelman counterargument is that focusing resources on extraplanetary colonies at the expense of the one habitable planet within reach will hasten humanity's destruction.

That doesn't seem like a strong argument to me. It seems like a distraction from the crowd that would save the planet by extinguishing humanity if that's what it took. Though what value the planet might have with all of us gone I leave as an exercise for the reader.

The first priority of any society that wants to continue to exist into the future must always be to make the next generation. If you do not do this, or if you just leave the task to others hoping that someone else will do it, then you are behaving in a way that will in all probability lead towards there being no next generation sooner or later. The "global warming is the apocalypse" movement constantly talks about how the best way to reduce your carbon footprint is to have no children.

>The only large-scale planetary engineering in humanity's history is Veniforming its home world.

So it is claimed, but from my point of view it looks very much as if it's intent on making itself extinct through fertility decline. But at least carbon dioxide levels will return to normal, eh?