MurphyA/hacker-news huggingface dataset:
by lolinder | 2025-06-03 13:45:57+00:00
> Bikes, and e-bikes, are safer than cars for everyone around them. We want to encourage people to bike more and drive less because they're so much safer.

All else being equal, yes. But NYC drivers are exceptionally skilled relative to the rest of the country. They're nuts in a lot of ways, but they're also far more respectful of pedestrians, far more aware of their surroundings, far more willing to drive slowly, and far more happy to stop for pedestrians even if they technically have the right of way.

NYC e-bike riders (especially the Citi bikes) are the opposite. They're far less likely to stop, far more likely to be going way faster than is safe, and far more likely to blow through stop signs entirely.

There's a well-documented phenomenon in safety that the "safer" choice in the abstract can actually end up being more dangerous because it feels safer, which leads to riskier behavior. I fear this is what is happening in NYC: incentivizing people to ride bikes doesn't get you 10x as many of the good, respectful, careful bikers you had 10 years ago. It gets you a whole bunch of reckless amateurs who buy the hype that bikes are safer and bike like maniacs. We may well find that that's worse for pedestrian safety than the well-known and well-regulated dangers of cars.
by kalaksi | 2025-06-03 13:46:10+00:00
I now run KDE on Fedora after I got fed up with snaps and bugs in Ubuntu 24.04.

For linux newbies, I'd actually suggest checking out Linux Mint with Cinnamon desktop. I used to run Mint a long time ago and recently installed it for someone trying to change from Windows. it was nice to see that they still provide a good, preconfigured UX. And no snaps. It's probably simpler than KDE but not too simple.
by matthberg | 2025-06-03 13:46:36+00:00
A comment I wrote in another HN thread [0] (though this one was the original):

Web apps talking to LAN resources is an attack vector which is surprisingly still left wide open by browsers these days. uBlock Origin has a filter list that prevents this called "Block Outsider Intrusion into LAN" under the "Privacy" filters [1], but it isn't enabled on a fresh install, it has to be opted into explicitly. It also has some built-in exemptions (visible in [1]) for domains like `figma.com` or `pcsupport.lenovo.com`.

There are some semi-legitimate uses, like Discord using it to check if the app is installed by scanning some high-number ports (6463-6472), but mainly it's used for fingerprinting by malicious actors like shown in the article.

Ebay for example uses port-scanning via a LexisNexis script for fingerprinting (they did in 2020 at least, unsure if they still do), allegedly for fraud prevention reasons [2].

I've contributed some to a cool Firefox extension called Port Authority [3][4] that's explicitly for blocking LAN intruding web requests that shows the portscan attempts it blocks. You can get practically the same results from just the uBlock Origin filter list, but I find it interesting to see blocked attempts at a more granular level too.

That said, both uBlock and Port Authority use WebExtensions' `webRequest` [5] API for filtering HTTP[S]/WS[S] requests. I'm unsure as to how the arcane webRTC tricks mentioned specifically relate to requests exposed to this API; it's possible they might circumvent the reach of available WebExtensions blocking methods, which wouldn't be good.

0: https://news.ycombinator.com/item?id=44170126

1: https://github.com/uBlockOrigin/uAssets/blob/master/filters/...

2: https://nullsweep.com/why-is-this-website-port-scanning-me/

3: https://addons.mozilla.org/firefox/addon/port-authority

4: https://github.com/ACK-J/Port_Authority

5: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
by bell-cot | 2025-06-03 13:46:46+00:00
A) Most countries also have laws/treaties banning invasions. But when those happen to them anyway, most countries start ignoring the bans on landmines. Which are quick/cheap/easy to produce, even with century-old tech.

B) https://en.wikipedia.org/wiki/Naval_mine Not that anybody's doing Environmental Assessments on land, to determine whether the mines might be washed downstream after a heavy rain, or moved downslope by a landslide, or ...

The problem you describe sounds very much like poorly-directed mortar/artillery fire & strategic bombing - which have been killing civilians at scale since at least WWI.
by IggleSniggle | 2025-06-03 13:46:49+00:00
I don't think that's quite what happened. Google got in anti-trust trouble because they have an unfair advantage in user-tracking, given logged in Chrome accounts. Removing third-party cookies hurts other privacy-invading companies without substantially affecting Google. It was still somewhat on track to be removed from Chrome until they lost their antitrust battle, and Chrome was required to be spun off. With Chrome's new future, and Google's new legal constraints, there's less incentive to try and make Privacy Sandbox work. At least, that was my understanding; I didn't follow it all that closely.
by matsemann | 2025-06-03 13:47:04+00:00
> The red-light-running bicyclist blows past the stopped traffic that just had to safely navigate getting around the bicyclist occupying a vehicular travel lane, only to be forced to do it all over again.

The entitlement of calling it a vehicular travel lane probably means you have a strong bias against cyclists, but I'll try anyway: Doesn't this just prove that it's moot to overtake cyclists in the city? Whenever a car pushes past me (quite often dangerously) I'll overtake them next time they hit a red light anyways. And there I'll filter to the front of the queue (not cycling on red), and be on my way while the car might have to wait a cycle or two more to get through.

So why do it? Just relax and drive slow, you'll get there in the same time eventually, without risking someone's life.
by cratermoon | 2025-06-03 13:47:21+00:00
"If you build something with an LLM that people will depend on, read the code. In fact, you’ll probably do more than that."

Thus sucking up all the time you "saved" by having the LLM write the code you saved. The machine made the easy parts of coding easier while making the hard parts harder.

"You’ll spend 5-10 minutes knocking it back into your own style."

As if style is the only thing that matters?

"LLMs are showing signs of adapting to local idiom, but we’re not there yet."

First step fallacy. Ladders are showing signs of being tall enough to reach the moon, but we're not there yet.
by questerzen | 2025-06-03 13:47:37+00:00
Here is an example of a case that backtracking is required where there is only one solution:

11110 ----- 11|....0 2|....0 0|00000 0|00000 0|00000

The sequential constraint solver fails here even though the deduction required is trivial. The first row can only be 10010 or else the 2 in the second row isn't possible.

A more difficult problem is the following:

11 1 11211 ----- 1|..0.. 2|..0.. 11|.010. 4|.111. 0|00000

There are two choices at this point. One option is:

11 1 11211 ----- 1|..0.. 2|..0.. 11|.010. 4|01111 0|00000

And we immediately run into a problem with the 3rd row, 1st col which needs to be both 1 and 0.

The other solves the problem immediately as all remaining squares are immediately specified by a single constraint.

11 1 11211 ----- 1|00010 2|11000 11|00101 4|11110 0|00000

Compared to most sudoku solves, I think this is pretty straightforward (you only need to look ahead one move to one other square). I think this would be fair game to give as a problem.

Of all the games with a unique solution that the sequential solver can't do that I looked at, almost all fell somewhere in the range of difficulty between these two. I didn't find any that require more than one move lookahead.
by fc417fc802 | 2025-06-03 13:47:44+00:00
> hand out a different, temporary IPv6 address to every app and segment off any other interface that might be expose

Yes, but (AFAIK) not out of the box (unless one of the security focused ROMs already supports this). The kernel supports network namespaces and there's plenty of documentation available explaining how to make use of those. However I don't know if typical android ROMs ship with the necessary tooling.

Approximately, you'd just need to patch the logic where zygote changes the PID to also configure and switch to a network namespace.
by jillesvangurp | 2025-06-03 13:47:45+00:00
There is kotlin native these days; so not impossible.

Kotlin is kind of nice for this stuff; which is probably why they picked it. IMHO Kotlin is undervalued as a python replacement; it's pretty convenient for a lot of data processing stuff. And being able to use whatever Java libraries are around is also not a bad thing.

Anyway since it is kotlin, you could use kts (the scripting support). You'd still need a jre and kotlin installed but it would make it easy to invoke from the command line and it would be able to pull in jar file dependencies straight from maven central. There might also be a possible path to build this thing via Graal and package it up as native. Another option is to package everything with docker and call it with a simple shell script. And finally, Kotlin has a native compiler as well but I assume there are too many jvm dependencies to be able to use that.

So, there are a few options here to make using this more convenient.
by wpietri | 2025-06-03 13:47:46+00:00
Great point.

Humans really like to anthropomorphize things. Loud rumbles in the clouds? There must be a dude on top of a mountain somewhere who's in charge of it. Impressed by that tree? It must have a spirit that's like our spirits.

I think a lot of the reason LLMs are enjoying such a huge hype wave is that they invite that sort of anthropomorphization. It can be really hard to think about them in terms of what they actually are, because both our head-meat and our culture has so much support for casting things as other people.
by JohnFen | 2025-06-03 13:47:53+00:00
I'm not arguing that SaaS is good or bad, just that it isn't for me. You were asking if you're leaving money on the table by not offering a non-Saas, non-subscription plan and I was just saying yes, you are. I don't know if the amount of money is worth it for you, though. Only you can determine that.
by reimdev | 2025-06-03 13:48:17+00:00
Sephera is a lightweight command-line tool for analyzing and visualizing your project's structure and codebase.

Features: * Cross-platform, portable, no setup requirement. * Enjoy infinite customization through YAML configuration. * You always can update Sephera in your console. * LOC: Count total lines of code with regex/glob support. * For more information, please visit: * https://github.com/Reim-developer/Sephera
by black_puppydog | 2025-06-03 13:48:36+00:00
> The comparison around deaths is only useful if those figures are primarily car deaths caused by running red lights.

I don't know about the UK or US, but here in France, the majority of pedestrians killed each year die on "protected" crossings. So whether those are traffic lights or "zebra" crossings, yes, that's a very major source of accidents.

Addendum:

Would love to see per-modality statistics on this for UK/US. Here in France, the preliminary stats for 2024 look like this:

https://masto.bike/system/media_attachments/files/114/521/93...

The table shows the deaths per modality (leftmost column, "tués") and in collision with which modality they were killed (and "sans tiers" for "no counterparty").

Needless to say, cars and trucks are dominating the "who kills the most people" contest, far outweighing their percentage in transport usage.

Source: https://www.onisr.securite-routiere.gouv.fr/sites/default/fi...
by matthberg | 2025-06-03 13:48:42+00:00
A comment I wrote in another HN thread [0] covering this issue:

Web apps talking to LAN resources is an attack vector which is surprisingly still left wide open by browsers these days. uBlock Origin has a filter list that prevents this called "Block Outsider Intrusion into LAN" under the "Privacy" filters [1], but it isn't enabled on a fresh install, it has to be opted into explicitly. It also has some built-in exemptions (visible in [1]) for domains like `figma.com` or `pcsupport.lenovo.com`.

There are some semi-legitimate uses, like Discord using it to check if the app is installed by scanning some high-number ports (6463-6472), but mainly it's used for fingerprinting by malicious actors like shown in the article.

Ebay for example uses port-scanning via a LexisNexis script for fingerprinting (they did in 2020 at least, unsure if they still do), allegedly for fraud prevention reasons [2].

I've contributed some to a cool Firefox extension called Port Authority [3][4] that's explicitly for blocking LAN intruding web requests that shows the portscan attempts it blocks. You can get practically the same results from just the uBlock Origin filter list, but I find it interesting to see blocked attempts at a more granular level too.

That said, both uBlock and Port Authority use WebExtensions' `webRequest` [5] API for filtering HTTP[S]/WS[S] requests. I'm unsure as to how the arcane webRTC tricks mentioned specifically relate to requests exposed to this API; it's possible they might circumvent the reach of available WebExtensions blocking methods, which wouldn't be good.

0: https://news.ycombinator.com/item?id=44170099

1: https://github.com/uBlockOrigin/uAssets/blob/master/filters/...

2: https://nullsweep.com/why-is-this-website-port-scanning-me/

3: https://addons.mozilla.org/firefox/addon/port-authority

4: https://github.com/ACK-J/Port_Authority

5: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
by throwaway1004 | 2025-06-03 13:48:56+00:00
Distinction without difference: one would have to actually explain how surveillance is applied and leveraged differently across jurisdictions, allowing us to sub-divide into "good surveillance" and "bad surveillance", two different things.

Otherwise, we're talking about the inherit good-or-bad nature of surveillance as a whole and, thus, using the character of those applying it is irrelevant and contradictory.

The fact that many contradictory ideas are widely held or, at least, broadcast from the tallest proverbial hills, doesn't change the fact that they are contradictory. One thing all living generations seem to agree on is that politicians talk out of both sides of their mouth.
by romac | 2025-06-03 13:49:47+00:00
You can also go the other way around and generate traces [1] from the TLA+ or Quint [2] specs using the Apalache model checker [3], map each action in the trace to an action on your system under test, and check that the abstract and concrete states match at each step.

[1] https://apalache-mc.org/docs/adr/015adr-trace.html

[2] https://quint-lang.org

[3] https://apalache-mc.org
by dematz | 2025-06-03 13:50:06+00:00
There's definitely a balance. Someone told me years ago that when they'd look for one bug to try and fix it, they'd realize a bunch of other stuff about their code along the way. You learn a lot by struggling with a problem exactly when it feels unproductive. On the other hand, there are cases when maybe it's better to get an answer today than spend a week really learning something. For example if you don't care about how a library itself works, AI helps abstract the details away and maybe there really is no cost to that as long as you can see it works.
by sdenton4 | 2025-06-03 13:50:09+00:00
I'm a millennial who has watched the complete failure of my generation to realize the promise of those Obama 'Hope' posters.

"Everyone don't do X" runs into problems when there are clear incentives to do X. Like, say, grades which eventually will be used to determine who gets to graduate, who gets into which schools, who ultimately gets easier access to higher paying jobs. And simple convenience is an incentive in itself - if doing X saves time, it will be the default.

This same dynamic is why we still have a climate crisis, even though everyone has known about the problem for thirty years.

"Everyone just do Y" is what we call a collective action problem. When there are clear incentives to defect, it is also a free rider problem.
by mdaniel | 2025-06-03 13:50:27+00:00
The "jikes" compiler from IBM <https://github.com/daveshields/jikespg> was written in C++ and was for the longest time screaming fast. It also had its own parser generator lpg which was fun to play with, if you're into those things <https://github.com/daveshields/jikespg>

It seems someone liked it and made a "v2" along with LSP support https://github.com/A-LPG/LPG2#lpg2
by afavour | 2025-06-03 13:50:32+00:00
The main application for WebRTC is peer to peer data transfer.

I think you can make the argument that it should be behind a permission prompt these days but it's difficult. What would the permission prompt actually say, in easy to understand layman's terms? "This web site would like to transfer data from your computer to another computer in a way that could potentially identify you"? How many users are going to be able to make an informed choice after reading that?
by the_sleaze_ | 2025-06-03 13:50:56+00:00
Yes - although I disagree on one point.

All we need to do is define the $thing and mandate that lawsuits can be effective.

No agency enforces that potato chips need to fill up 92% of the bag or whatever, or that McDonalds cannot show pictures of apple fritters with more apples than they actually come with (this happened).

You just incentivize a cottage industry of legal that can squeeze a profit out of suing peanut butter companies for labelling incorrectly, or advertising dishonestly and it sort of takes care of itself.
by danaris | 2025-06-03 13:51:28+00:00
In the early days of the information revolution, when computers were new and being nerdy was still seen (almost universally) as a bad thing, a very high proportion of computer enthusiasts were people already on the fringes of society, for one reason or another. For a large number of them, hacking was a way to express their preexisting antiestablishment tendencies. For a lot of them, they were also your basic angsty adolescents and young adults rebelling against The Man as soon as they found any way to do so.

As time went on, computers became more mainstream, and lots more people started using them as part of daily life. This didn't mean that the number of antiestablishment computer users or hackers went down—just that they were no longer nearly so high a percentage of the total number of computer users.

So the answer to "what happened to all the hackers fighting for personal freedom and privacy?" is kinda threefold:

1) They never went away. They're still here, at places like the EFF, fighting for our personal freedom and privacy. They're just much less noticeable in a world where everyone uses computers...and where many more of the prominent institutions actually know how to secure their networks.

2) They grew up. Captain Crunch, the famous phreaker, is 82 this year. Steve Wozniak is 74. And while, sure, some people reach that age and still maintain not merely a philosophy, but a practice, of activism, it's much harder to keep up, and even many of those whose principles do not change will shift to methods that stay more within the system (eg, supporting privacy legislation, or even running for office themselves).

3) They went to jail, were "scared straight", or died. The most prominent example of this group is, of course, Aaron Swartz, but many hacktivists will have had run-ins with the law, and of those many of them will have turned their back on the lifestyle to save themselves (even Captain Crunch was arrested and cooperated with the FBI).
by liveandlet | 2025-06-03 13:51:33+00:00
EliseAI | DevOps Engineer | New York, NY | Full-time | $210K-$260K

EliseAI develops cutting-edge conversational AI technology for industries fundamental to our lives: housing and healthcare.

As the first DevOps Engineer at EliseAI, you will own the systems and processes that support reliable software deployment across multiple environments. You’ll be responsible for managing configuration, maintaining deployment workflows, and ensuring operational consistency as our infrastructure scales.

Ideal candidate would have experience with AWS, Terraform, Python, CI/CD, etc.

Apply: https://job-boards.greenhouse.io/meetelise/jobs/8021081002
by soulofmischief | 2025-06-03 13:51:35+00:00
Location: Southern US

Remote: Yes

Willing to relocate: No

Technologies: JavaScript/TypeScript/Web, Python, C, Rust, Full-stack, AI/ML

Email: hello @ bad-software dot com

GitHub: https://github.com/soulofmischief

Full-stack JavaScript-focused engineer/entrepreneur with lots of experience in building scalable single page apps in various frameworks, web3, multiplayer web games, building transformers and other networks, all sorts of things. Product-oriented, executive and leadership experience, comfortable in both autonomous and collaborative settings, capable Linux sysadmin.

I've focused for several years now on agentic and generative work such as simulating networked LLM-augmented embodied agents, interface research, too much to list here but always happy to talk more over email. While the rest of the industry is just starting to latch onto agentic systems, I can offer years of experience and product insight.

Available for consulting, projects, anything web or agentic.
by alexandredoria | 2025-06-03 13:52:10+00:00
Location: Sergipe, Brazil

Remote: Yes

Willing to relocate: Yes

Technologies: PHP, Symfony

Experience: 12+ years building strong legacy codes in many ways of PHP (template engine/MVC, pure, DDD, etc)

Email: alexandredoria.01@gmail.com

Linkedin: https://www.linkedin.com/in/alexandredoria/
by Festro | 2025-06-03 13:52:11+00:00
I think the AnalyticsStorage:Denied is preventing pageviews from being tracked. They still fire, but only so that they can be tracked should consent be given retroactively for that pageview. This prevents the snippet from having to be re-fired once the user consents.

This is just a necessary quirk, since you want the pageview to be triggered on page load, but the user can't consent until the consent banner has loaded.

Since you're not loading a consent banner at all the pageview event triggers and is held in the data layer waiting for consent status to change. If the user exits or clicks to a different page that data is lost (because no cookie allowed). If they allow cookies later (somehow) then only the current pageview will be recorded (and as a landing page, even if it's not their actual, original, landing page).
by soulofmischief | 2025-06-03 13:52:15+00:00
SEEKING WORK | REMOTE / US

Full-stack JavaScript-focused engineer/entrepreneur with lots of experience in building scalable single page apps in various frameworks, web3, multiplayer web games, building transformers and other networks, all sorts of things. Product-oriented, executive and leadership experience, comfortable in both autonomous and collaborative settings, capable Linux sysadmin.

I've focused for several years now on agentic and generative work such as simulating networked LLM-augmented embodied agents, interface research, too much to list here but always happy to talk more over email. While the rest of the industry is just starting to latch onto agentic systems, I can offer years of experience and product insight.

Available for consulting, projects, anything web or agentic.
by blyry | 2025-06-03 13:52:32+00:00
Yeah dude! Did you see linqpad is supported on osx now? I used a Mac for a couple years, last gen Intel, when I was doing mostly node work, but I never really got used to it. One of my coworkers though has been doing full-time .net on a Mac with jetbrains for probably about 2 years now and he said he's just as productive as before at this point.