MurphyA/hacker-news huggingface dataset:
by maqp | 2025-06-21 17:53:58+00:00
>the only better alternative would be self hosting.

Which doesn't really work in practice. The closer you move to the user, the more the threat of creepy buddy watching over metadata of people they know grows. Medium sized institution like university or a company might run their own, but that's also somewhat risky.

>the question is not what is the best, most secure, most private, option, but what has the right balance between easy onboarding, ease of use, security and privacy.

No. The question is, given an architecture that imposes fundamental limitations on what can be achieved, which tools under that domain have best privacy by design system, where the UX and features are maximized with ingenious design, is the best.

Fundamental architectural limitations:

Does Delta Chat use data diodes? No? Then it can't have key exfiltration security, but it can have message forwarding.

Does Delta Chat use Tor Onion Services? No? Then it can't have proper metadata privacy for users' identity from the server, but it can have offline messages.

These are fundamental trade-offs.

DeltaChat is content-private by design. It might be metadata-private by policy (internal policy that server on nine.testrun.org does not collect metadata), but until that is tested in court like Signal is, we can't know for sure.

Signal is content-private by policy. Cwtch uses Tor Onion Services so it's metadata-private by design.

Now, it's fine to argue which is the best inside one league.

Element/Matrix is E2EE with double ratchet protocol, so it has both forward secrecy and future secrecy, which DeltaChat doesn't have.

It's only once security is more or less exactly on par, that you should be comparing general UX. Really usable but insecure tool might turn into really unusable tool when you sit in prison for your political opinions, or because you revealed your ethnicity and ICE caught on.

>maybe deltachat is not the best possible, but it is pretty good

It's not the worst out there. At least it tries to do things properly. It's just that given that there's insane obstacle of moving people to a safe platform, DeltaChat is just another distraction. Until it does what competition does security wise, and improves on their UX, it doesn't get the top podium.

>when security and privacy are to onerous then you don't have security or privacy

Sure, but when you're in prison for using crap tool, you won't have liberty, security, or privacy.
by rurp | 2025-06-21 17:54:14+00:00
Why would those numbers mitigate how bad this is? Public land is awesome and open to everyone. These areas are currently used by millions of hikers, hunters, ranchers, miners, researchers, campers, OHVers, and so many other groups.

These sales will close the land to a few wealthy people/businesses, or be destroyed by extractive industries. Once these areas are sold they will be lost forever, after being open for generations. All so billionaires, who currently pay a lower effective tax rate than most HN posters, can pay even less.
by hansvm | 2025-06-21 17:54:18+00:00
- The walking thing you can mostly calculate yourself if you only examine particular foods, but here's some study looking at the dietary impact in practice averaged across a country (walking has comparable emissions to a 22mpg car trip in developed countries) [0].

- For cotton reusable bags (very common for all sorts of reasons; all my reusable bags are cotton and not because of any particular intentional selection), you need 50+ trips to the store to hit a break-even point [1] in greenhouse emissions. Similarly with the 50x thicker plastic bags stores in CA sell compared to disposable shopping bags. That's 1-2yrs for the break-even point with weekly or biweekly shopping trips, worse if your usage distribution is temporally nonuniform (e.g., owning 5 bags but sometimes only using only 1-3 for slightly more frequent shopping trips and occasionally using all 5). Properly reusable bags are likely worth it, but it's not an immediate or obvious win unless you use them regularly and they're sturdy enough to not wear out too quickly (enough material is involved and the timescales are long enough that you should also consider the impact of the disposal method and a number of other things).

- Some of the other points like linearity in the number of days between shopping trips should be obvious. I'll leave investigating everything else as an exercise for the reader.

[0] https://www.nature.com/articles/s41598-020-66170-y

[1] Not "source" so much as a summary of sources, so I referenced the smallest number in the article to give the argument more weight: https://www.cnn.com/2023/03/13/world/reusable-grocery-bags-c...
by ACCount36 | 2025-06-21 17:55:41+00:00
For all we know, those systems ARE a path to AGI. Because they keep improving at what they can do and gaining capabilities from version to version.

If there is a limit to how far LLMs can go, we are yet to find it.

Dismissing the ongoing AI revolution as "it's just hype" is the kind of shortsighted thinking I would expect from reddit, not here.

> So why exactly do they continue developing these things and making them more dangerous, exactly?

Because not playing this game doesn't mean that no one else is going to. You can either try, or don't try, and be irrelevant.
by 7e | 2025-06-21 17:57:56+00:00
Exactly, you need to protect the state of the PRNG and you need to ensure that the seed isn’t deterministic or easily reversed (time of day, 0, etc). That includes recovery from events and timing seen by the hypervisor. And some cloud VMs don’t have a non-deterministic entropy pool, or one safe from the hypervisor.
by duxup | 2025-06-21 17:58:12+00:00
>Tan is overhauling Intel’s operations, cutting jobs and eliminating layers of management in hopes that will accelerate the company’s innovation.

They said this about firing factory workers too. Marketing, factory workers, none of these seem to be things that would mess with innovation.

Middle management and executives stuck in their ways / anyone who can say no / has to give approvals. Those are the folks who stand in the way of things.
by smokel | 2025-06-21 17:58:31+00:00
There are even developers who do not learn to touch type. Baffles the mind.

Making Caps Lock an additional Ctrl, and using Emacs keybindings (supported in nearly every IDE and on many command lines) makes one even more productive, because your hand doesn't have to travel all the way to where the arrow keys are. (A similar thing can be said about Vi keybindings.)

It is a strange phenomenon that many people do not wish to invest a few hours to make their lives easier later on.
by nijave | 2025-06-21 17:58:53+00:00
>but don't properly account for time spent by engineers rummaging around for data they need but don't have

This is a tricky one that's come up recently. How you you quantify the value of $$$ observability platform? Anecdotally I know robust tracing data can help me find problems in 5-15 minutes that would have taken hours or days with manual probing and scouring logs.

Even then you have the additional challenge of quantifying the impact of the original issue.
by bigstrat2003 | 2025-06-21 18:00:10+00:00
> Federal land belongs to you, to me, to all Americans.

So if it belongs to me, can I build a house there? Plant crops? Go hiking or camping? Can I do these things whenever I please without asking anyone? Because I wouldn't say "that land belongs to me" in any meaningful sense. National parks aside, I don't see how citizens benefit from the government owning large tracts of land.
by Glyptodon | 2025-06-21 18:02:25+00:00
Sabino Canyon is on this map and is a very popular nature complex in Tucson relatively adjacent to a large amount of expensive real estate. I can only imagine how much controversy there is going to be if they actually try to sell it to create more luxury housing when tons of older people with money have built custom homes on large lots nearby explicitly because they want to border or be near public land.
by seec | 2025-06-21 18:03:27+00:00
Yes, I think there is a lot of social pressure that is driving all of this. I doubt it's only about body dysphoria, because after all you may alter it a bit but still you cannot deviate that much from what you were given in the first place. Extensives surgery procedure seems to be really hit or miss and it is largely impossible to fully rework the features that you were given at birth (especially facial or the pelvis). Some are luckier than others in these matters because they are "in the middle" but still, physically passing for one sex doesn't really alleviate the need to conform to that gender expectation.

I think it's a losing battle because you cannot make people change their minds about who/what others are. The real solution is true acceptance of differences but that seems very hard to create culturally, people are still tribal no matter what.

I am somewhat pissed off by all this gender culture ward around LGBTQ, trans and feminism because people constantly assume I am gay from my physical appearance and demeanor when I am definitely not.

I am dumbfounded around the trans issue because they make it look like they are the only one being socially pressured into conforming to one cookie cutter identity or another. I believe that most people feel that pressure, just to differing levels and only the outlier at the extreme are considered a "true" man or woman.

The political discourse obliviate the fact that we cannot all be that close to what is deemed the "ideal" in the current culture and everyone is worse off for it.
by spwa4 | 2025-06-21 18:03:59+00:00
Yes, agreed ... but on which side?

There is no way in hell, after all, that EU politicians are going to make any effort to do something about this before it happens (not even sponsoring real research into it). So they will be surprised by what happens. And as for the model, the EU capturing the "Long Boom" of value that the internet and computers produced ... well, they failed to do that, except a relatively small amount going to the existing EU rich and landlords.

So either AI crashes and burns, or the change will be implemented, all EU citizens entered against their will before you can shout "I demand elections".
by mindslight | 2025-06-21 18:04:09+00:00
Those "courts" are currently rubber stamping many of the out of control "unitary" executive actions out of political expedience. It's not far fetched to think that the trend will continue for reform. In fact I think a lot of the people supporting the current administration support the autocracy because they think it is about reform (because they seemingly have no ability to analyze the administrations' actual actions beyond team sport cheerleading, but I digress)

Escalating the dynamic is bad, because we ultimately need to pull out of the corruption. But continuing the dynamic of letting the looters keep their ill gotten gains having them declared as untouchable "private property" is worse.

Also even if this does not end up happening, broadcasting the intent far and wide puts a chilling effect on the current looting. The point is there needs to be possible consequences on the table to balance the official policy of having a fire sale.
by CactusRocket | 2025-06-21 18:04:44+00:00
I think I didn't explain myself well.

As long as a language has bytes and arrays, you can implement anything on top of them, like unsigned integers, 8-bit strings, UTF-8 strings, UCS-2, whatever you want. Sure it won't be native types, so it will probably be slower and could have an awkward memory layout, but it's possible

Granted, if a language is so gimped that it doesn't even have integers (as you mentioned JavaScript), then that language will not be able to fully support it indeed.
by securesaml | 2025-06-21 18:04:52+00:00
Issue is not with go's parser, but instead about processing layer using different input than verifying layer [1]

We patched the gosaml2 (and other go saml libraries), by ensuring only the authenticated bytes are processed (not the original XML document). You can see the patches here: https://github.com/russellhaering/goxmldsig/commit/e1c8a5b89... https://github.com/russellhaering/gosaml2/commit/99574489327...

> I just wrote my own for my SAML.

Curious to see your implementation for SAML and XML Signatures.

[1]: https://bsky.app/profile/filippo.abyssdomain.expert/post/3le...
by necovek | 2025-06-21 18:05:20+00:00
If anyone is to say "life is just slime on a planet", I'd mostly read into it as how insignificant life forms on Earth really are to the entirety of the Universe.

So, to me, the entire article is arguing a non-point: that's how I would read into the Hawking's statement. It's not about the beauty or complexity of life (or lack of it), but how even such complexity pales in comparison to the vastness of universe itself!

While life as we know it might not exist elsewhere in the universe due to a set of conditions required for it to evolve in such a complex way, there is likely other similarly awe-inspiring stuff (slime or not) throughout the universe — but, we are likely never going to experience any of it, with how restricted we are to existing within the boundaries of our little planet.
by cyberax | 2025-06-21 18:05:46+00:00
Region (and even availability zones) in AWS are independent. The regions all have overlapping IPv4 addresses, so direct cross-region connectivity is impossible.

So it's actually really hard to accidentally make cross-region calls, if you're working inside the AWS infrastructure. The call has to happen over the public Internet, and you need a special approval for that.

Deployments also happen gradually, typically only a few regions at a time. There's an internal tool that allows things to be gradually rolled out and automatically rolled back if monitoring detects that something is off.
by guiriduro | 2025-06-21 18:06:14+00:00
It doesn't need to throw out the baby with the (US-controlled) bathwater. The EU should present Microsoft with an ultimatum similar to what China might: setup a non-controlled european licensee to own and manage all MS & Azure infrastructure in the region, or have some legislators force a similar structure on them. Complete control, full sourcecode, EU-only support/access - as a condition for corp HQ being allowed to have a monopolistic market share. Either way, nothing the US might decide to do should have any effect in "EU Microsoft", short of severing US Microsoft off completely, in which case EU MS just becomes fully autonomous and bye-bye US. Clearly, a US-controlled Microsoft without this structure is a deep security risk to europe now.
by fmbb | 2025-06-21 18:06:40+00:00
> Assuming California is the region that hit 47% (call it 50%), and the reusable bags are better than the best available (only 10x worse than pre-ban) that translates to a 5x increase in microplastics on the beach. I’d consider this a disaster, not a win.

You are assuming that people are throwing away more reusable plastic bags. Are they?

Where I live (Sweden) the extra plastic bag fee introduced made people also buy more single use plastic bags in bulk which were cheaper and flimsier. If they are making up a larger part of the "items" counted, and not the reusable bags, then the win is even greater than a 25-47% decrease.

What reason do you have to believe people are throwing away the heavier, reusable bags at that rate? Do other bags not exist anywhere?
by tialaramex | 2025-06-21 18:08:51+00:00
Yes there are UI and UX choices which make it feel less sluggish, which is an important thing to do and e.g. Windows could certainly stand to improve there.

But in terms of wallclock time "less sluggish" just translates to it takes longer but you don't notice as much. Maybe the file copy takes 18 seconds but feels butter smooth, in contrast to this alternative where it took 14 seconds but wasn't nice - so for 4 extra seconds you get buttery smooth delay. Those seconds add up.
by Jtsummers | 2025-06-21 18:08:53+00:00
Cons cells aren't the only data structures in Lisp. And there are libraries, packages, that you can use if you want a common structure across multiple projects.

> To be clear, I'm steal manning his argument as I'm not sure I agree with it. But I think the point is summarized best with an example: "Here's an API that takes a red-black tree as an argument." Okaaay, what format is the red-black tree? How do I construct one?

If the API calls for taking a red-black tree as an argument, it will also provide either the specific red-black tree implementation itself or it will refer you to an existing package to include as a dependency. This is not dissimilar from C++. In C++ if something takes a std::map, you use a std::map. If it takes another data structure that's not in the STL, then it will provide it or tell you how to obtain it as a dependency.

BTW: steel, not steal, manning.
by Atlas667 | 2025-06-21 18:10:10+00:00
The will of the masses is NEVER enacted. This is what bourgeois capitalism is.

Oh you like phones? Well our phone companies require us to directly or indirectly create proxy wars in this region in order to acquire the raw materials necessary.

This is the democracy of western nations: policy hidden behind capitalist interests that the people engage with through consumption.

Its democracy for the rich not for the millions of us.

That's why they NEED to manufacture consent, in order to get you on board with murder and fabricated poverty in order to have goods and services.
by kspacewalk2 | 2025-06-21 18:10:37+00:00
No one's angry. This just gives a bigger impetus to de-Americanizing the tech stack. I've recently taken part in a decision at our university to use a non-US based cloud storage provider for some relatively sensitive health data. The risk is just too high, and justifies paying a slight premium elsewhere. Sadly we're not likely to migrate away from Office 365 over here, but for any new vendor decisions, US now definitely equals premium for risk of fuckery.
by wwfn | 2025-06-21 18:10:52+00:00
.8% is a bit misleading. Public Land is 37% (as of 1991) [1] of the state. The ADK park is state owned/managed and huge. Catskill region also has lots of public land. They're both amazing places I'm happy don't look like the US side of Niagara falls [2]

[1]: https://www.summitpost.org/public-and-private-land-percentag... [2] https://www.nps.gov/parkhistory/online_books/runte1/prologue...
by layer8 | 2025-06-21 18:12:05+00:00
For JS on the client side to be able to behave in the way you describe, it has to be informed by the server about the unskippable parts. Thus browser extensions are informed as well, and can take action correspondingly. In the worst case, they’ll behave as YouTube’s new hold screen does now.

Anything that JS on the client can do is also under control of browser extensions. We are talking about YouTube’s options under that constraint.
by slg | 2025-06-21 18:12:11+00:00
It's always hilarious to see people who are so defensive about capitalism that the mention of any flaw is received as a total and complete condemnation. It is noticeable that you didn't try to refute any specific point made, you are simply objecting to the idea of someone criticizing capitalism. I guess the one market that we can't trust is the marketplace of ideas.
by aquafox | 2025-06-21 18:12:58+00:00
On a related note: Transporting a human in a car is (in relation to weight and size) like using a standard shopping cart to transport two 1L bottles of water. So the next time you walk through a pedestrian area, imagine everyone carrying a bag would use a shopping cart instead. That would be a huge traffic jam -- exactly like what you see on the road!
by uncircle | 2025-06-21 18:13:18+00:00
I feel there is a lot of FUD spread whenever someone moves off the cloud, with the inane comparison to the annual wage of a dedicated sysadmin, trying to discourage you from doing a “reckless” migration which will bite you in the ass, your servers will catch fire every day and that it is better to stay within the golden handcuffs of AWS and GCP.

I wonder if it’s both stockholm syndrome and learned helplessness of developers that cannot imagine having to spend a little more effort and save, like OP, 90% off their monthly bill.

Yeah sure for some use cases AWS is the market leader, but let’s not kid ourselves, 9/10 companies on AWS don’t require more than a few servers and a database.
by s1artibartfast | 2025-06-21 18:13:38+00:00
I'm a big fan of camping in federal lands. No permits like stupid state parks, just a 2 week limit on location. I like to 4x4 on old trails, pick a wild spot that looks good for camp, then break out the axe to find firewood.

If you are not constrained by a vault toilet and pack your own water, it is a playground.
by TulliusCicero | 2025-06-21 18:13:46+00:00
In general, road diets that make things worse for cars typically make things better for other modes of transportation.

People walking and biking are much more sensitive to changes in the urban environment because they're not in a climate controlled metal safety box. Lots of things can change that impact how much people are willing to walk or bike around. Having fewer/slower cars around, for example.
Show HN: Rezume – Build your resume, portfolio, and personal site in minutes
by cvarma | 2025-06-21 18:14:48+00:00
Hi. I built rezume.page. Similar to any other student, I had assignments, deadlines, projects and everything else. Focusing on these didn't allow me to allocate time for the future. You can't get more hours in a day, but you can use the hours given to you more efficiently.

Using Rezume, you can build your personal portfolio page (your Rezume page!), a well-formatted resume PDF, and a shareable link in bio, all at the same time. You can also use AI to automatically enhance your resume. Whether it's an internship, a job, or any other prospect, you're always prepared.

Rezume is your link in bio, your personal portfolio site, and most importantly, your resume. It’s personally helped me quickly retrieve my resume, make easy edits, and stop wasting time on formatting.

Open to feedback! (Free beta access)
by weaksauce | 2025-06-21 18:14:50+00:00
> I just wish that folk like Wilderness Society were a bit more clear on what to expect.

that just means the stuff that is easier to access is going to be prioritized. there's already 17+ classic rock climbing destinations that are in the proposed areas which could be sold off to his cronies. nobody is going to be buying up the land in the middle of nowhere with no access to it. this is devastating regardless of the absolute percentage.
by ryandrake | 2025-06-21 18:15:28+00:00
Technically, maybe, but effectively, nobody is going to be able to withstand BigCorp's 100 lawyers whose mission is to bury you in legal fees if you push back. By the time that you confirm these things are unenforceable, you've spent your life savings on $millions in legal fees, and possibly gone into crippling debt. In the legal system, might (wealth + lawyer quantity) makes right.
by evilduck | 2025-06-21 18:17:02+00:00
Planting and harvesting are managed activities to protect the local ecosystem but there are permits available for both activities. You are also free to go hiking and camping within the rules (distance requirements from roads and trails, wildfire management restrictions, stay limits to prevent lasting damage, etc) across the _vast_ majority of publicly owned lands. Even building structures can be done in specific circumstances with permits or leases.

This is all such easily accessed information direct from NFS, NPS, and BLM government websites, it's impossible to not view your comment as written in bad faith. Public lands are broadly your lands to enjoy and use as they exist in their natural state, so long as you're not depriving others of the same access.