MurphyA/hacker-news huggingface dataset:
by ekr____ | 2025-06-16 12:20:17+00:00
This seems like a truly unreasonable level of political skill for nearly any setting. We're talking about changing every endpoint in the Internet, including those which can no longer be upgraded. I struggle to think of any entity or set of entities which could plausibly do that.

Moreover, even in the best case scenario this means that you don't get the benefits of deployment for years if not decades. Even 7 years out, TLS 1.3 is well below 100% deployment. To take a specific example here: we want to deploy PQ ciphers ASAP to prevent harvest-and-decrypt attacks. Why should this wait for 100% deployment?

> The big downside of negotiation is that no one ever has to commit to anything so everything is possible. In the case of TLS, that seems to have led to endless bikeshedding which has created a standard which has so many options is is hardly a standard anymore. The only part that has to be truly standard is the negotiation scheme.

I don't think this is really that accurate, especially on the Web. The actual widely in use options are fairly narrow.

TLS is used in a lot of different settings, so it's unsurprising that there are a lot of options to cover those settings. TLS 1.3 did manage to reduce those quite a bit, however.
by rcarmo | 2025-06-16 12:20:42+00:00
I was on the Kubernetes slack and I’ve found it much better than any of the multiple horrors that I’ve expected in Discord. It was even (somewhat) searchable.

But in the end, I never really relied on it for finding information, and am kind of sad that people keep creating chat communities instead of searchable forums.

I also think people overrate chat for actual learning or resolving issues. Even back in the IRC days, asking a question almost never yielded an immediate reply—-quite often you’d have to come back the day after and ask again, or check your DMs on screen overnight.

Forums let you ask and check for replies later, or search for similar questions, or even (shudder) get an e-mail reply, and Discord does exactly none of those things in a way that I find effective or productive.
by kaly_codes | 2025-06-16 12:21:47+00:00
whether it’s reformatting a messy resume, tailoring a resume to match a job posting, or highlighting relevant but overlooked skills.

it’s not about faking qualifications. it’s about showing you’re a fit in a language recruiters and ATS systems actually understand.

that’s the game, like it or not. the real job is about learning and willing to learn more
by nunobrito | 2025-06-16 12:21:52+00:00
You don't need a radio license to receive radio messages, that is valid also for satellite messages received on walkie-talkies.

This fact alone is incredibly important to at the very minimum known what the heck is going on. Suddenly you have a cheap device in your hands that can receive updates relevant to survivors and victims.

In Portugal exist the 3-3-3 plans for anyone to practice using a radio. These are regular-weekly sessions with a lot of people joining.
by ToucanLoucan | 2025-06-16 12:22:18+00:00
> "I guess if they die I can use shitty image gen programs" versus "I know that AI will make it possible for others to do so" are very different takes.

Miyazaki's art is Miyazaki's. If another artist were to come along and imitate his style, especially after he is gone, that is still not Miyazaki. That is whomever's that is's style and it's disrespectful of both to call it Miyazaki.

And, more to the point, all the AI generated garbage Ghibli crap makes the point better than I ever could. Look at it. It's dead. It looks like the right thing, and it mostly gets it all right, but you just know in your heart that it's not correct. It lacks intentionality which is a pretty universal critique of AI art (since an AI model, by definition, can't have intentionality) but it's one that triples down in potency when associated with something so widely beloved.

> But isn't a lot of what Disney et al are doing specifically because their movies take a lot of resources to pull together, so end up playing it safe in the worst possible way?

... yes? Was this meant as a counterpoint to what I said or a corroboration? I genuinely can't tell, the lead-in is phrased like you're going to disagree and then you cite the exact same (awful) example of how BAD this is.

> What's your opinion on sampling, when it comes to music?

As with most things, it depends. I think the Ghibli AI slop has a lot more in common with Vanilla Ice than, say, Hung Up by Madonna.
by westurner | 2025-06-16 12:22:36+00:00
Is it possible to steer the weather by heating the atmosphere with power beaming microwaves?

Is it possible to cancel the vortical formation of a tornado or a hurricane with microwave power beam(s)?

Does heating the atmosphere with microwaves change the weather, or the jet stream, or the cloud cover?

What sort of a fluidic weather simulator could answer this question?

Is there a fluid simulation device that allows for precise wireless heating of certain points in the fluid?

If so, there could be international space law to study and control for the known and presumed risks of space-based microwave power beaming.
by izacus | 2025-06-16 12:23:09+00:00
> So, I think people will still be prompting, but if you can prompt an agent and it can happily code away, what are you supposed to be doing ? Watching it do its work ?

Well, what do managers do once they prompt junior developers? ;)

Also, "tell a prompt and wait for it to finish without intervention" is not something that happens even with magical Claud Code.

I'd really like to see some actual theory (and position, people) surfaced that can be laid off due to AI and who and how then actually runs the LLMs in the company after layoffs. I've never been in a company where new work wouldn't fill up the available developer capacity, so I'm really interested in how the new world would look like.
by FrustratedMonky | 2025-06-16 12:23:31+00:00
Its a process.

You find some un-identified variables.

Form some hypothesis, try to narrow it down.

Sometimes it is a discovery, new particle, and sometimes it is nothing.

But that is how science works.

At some point in time, everything was an unknown, and people had to work with unknowns.

This whole movement from the 'right' that all science has to know the answers ahead of time in order to justify spending money, is hindering progress. How can you know the results are worthwhile, in order to justify funding, before doing the research to know the results?
by xtiansimon | 2025-06-16 12:23:54+00:00
I always think of Hobo semiotics together with the Great Depression (1929-1939), the Dust Bowl (1934, 36, 39-40) and Social Security (1937).

The Dust Bowl displaced half a million farm workers. Lots of people on the move, with no means of support.

My maternal family lived in Santa Clara, CA from about the 1910’s, when it was largely orchards.
by sReinwald | 2025-06-16 12:25:19+00:00
You're attacking a strawman. Nobody's claiming LLMs are a new piracy vector or that people will use ChatGPT, Llama or Claude instead of buying Harry Potter.

The issue here is that tech companies systematically copied millions of copyrighted works to build commercial products worth billions, without reembursing the people who made their products possible in the first place. The research shows Llama literally memorized 42% of Harry Potter - not simply "learned from it," but can reproduce it verbatim. That's 1) not transformative and 2) clear evidence of copyright infringement.

By your logic, the existence of torrents would make it perfectly acceptable for someone to download pirated movies and charge people to stream them. "Piracy already exists" isn't a defense, and it especially shouldn't be for companies worth billions. But you bet your ass that if I built a commercial Netflix competitor built on top of systematic copyright violations, I'd be sued into the dirt faster than I can say "billion dollar valuation".

Aaron Swartz faced 35 years in prison and ultimately took his own life over downloading academic papers that were largely publicly funded. He wasn't selling them, he wasn't building a commercial product worth billions of dollars - he was trying to make knowledge accessible.

Meanwhile, these AI companies like Meta systematically ingested copyrighted works at an industrial scale to build products worth billions. Why does an individual face life-destroying prosecution for far less, while trillion dollar companies get to negotiate in civil court after building empires on others' works? And why are you defending them?

Edit:

And for what it's worth, I'm far from a copyright maximalist. I've long believed that copyright terms - especially decades after creators' deaths - have become excessive. But whatever your stance on copyright ultimately is, the rules should apply equally to individuals like Aaron and multi-billion dollar corporations.

You cannot seriously use the fact that individuals may pirate a book (which is illegal) as an ethical or legal defense for corporations doing the same thing at an industrial scale for profit.
by eadmund | 2025-06-16 12:26:38+00:00
> Lisp is an incredible experience to write and experiment in, unlike any other language I've ever worked in.

I think that the experienced of Smalltalk is very similar in some ways, despite the languages themselves being very different. At the end of the day I prefer Lisp, in large part because I feel that it interoperates with the rest of my system better (I could be wrong — no doubt expert Smalltalkers have figure out solutions to all the issues which annoyed me once upon a time).

They’re both roads not taken. It’s sad, and I think that our industry would be in a much better position had we not wasted decades in the C trap. But history unfolded as it did. Maybe it had to.
by ekr____ | 2025-06-16 12:26:38+00:00
This has a number of negative downstream effects.

First, recall that links are very often inter-site, so the consequence would be that even when a server upgraded to TLS 1.2, clients would still try to connect with TLS 1.1 because they were using the wrong kind of link. This would relay delay deployment. By contrast, today when the server upgrades then new clients upgrade as well.

Second, in the Web security model, the Origin of a resource (e.g., the context in which the JS runs) is based on scheme/host/port. So httpt would be a different origin from HTTPS. Consider what happens if the incoming link is https and internal links are httpt now different pages are different origins for the same site.

These considerations are so important that when QUIC was developed, the IETF decided that QUIC would also be an https URL (it helps that IETF QUIC's cryptographic handshake is TLS 1.3).
by staticman2 | 2025-06-16 12:26:57+00:00
Nobody in real life thinks humans and machines are the same thing and actually believes they should have the same legal status. The A.I. enthusiast would not support the legality of shooting them when no longer useful the way a company would shred an old hard drive.

This supposed failure to see the difference between the human mind and a machine whenever someone brings up copyright is peformative and disingenuous.
by Gravityloss | 2025-06-16 12:27:23+00:00
Exactly. The coin flipping example is a very nice way to put it. It works since the coins are interchangeable, you just count the number of heads or tails.

If the coins were of different color and you took that into account, then it wouldn't work.

It's not intuitive to me what gravity has to do with entropy though, as it's classically just a force and completely reversible (unlike entropy)? Ie if you saw a video of undisturbed objects only affected by gravity, you couldn't tell if the video was reversed.
by tsimionescu | 2025-06-16 12:27:50+00:00
> Our models use single atoms (or single molecules), and for those we have pretty good models that we can solve numerically, at least.

We can only solve these with assumptions, like assuming that protons or neutrons are indivisible particles with experimentally determined sizes and perfectly spherical shapes - even though we know very well that they are in fact collections of quarks and gluons whose size and shape is fully determined by more fundamental intercations. We are nowhere near a point where we could compute anything about a whole hydrogen atom using only the standard model and no other assumptions. Quantum chromodynamics is far to complex to allow for a perfect simulation like this.
by bananapub | 2025-06-16 12:29:40+00:00
git was a tiny crappy content tracker linus, one of the most prolific C hackers in history, did in a couple of weeks. it wasn’t even a version control system nor intended to be used directly, merely to make his personal life easier after tridge enraged larry.

“Normie focussed multi platform api-driven rich text media chat system” is 100x that work and unrelated to k8s’ existing ocean boiling.
by ekr____ | 2025-06-16 12:29:41+00:00
There used to be, though it's less true now. However, the reason to treat them distinctly (as different origins, technically) is that HTTPS provides integrity whereas HTTP does not. So, consider the case where the client enters an HTTP URL and is redirected, just as you say above. If the attacker injects their own JS and it is cached in an origin that is just `example.com`, then they control the user's experience of the site, even if later the user securely goes to the site with HTTPS.
by msp26 | 2025-06-16 12:31:11+00:00
Agree completely. When I read the Gemma 3 paper (https://arxiv.org/html/2503.19786v1) and saw an entire section dedicated to measuring and reducing the memorization rate I was annoyed. How does this benefit end users at all?

I want the language model I'm using to have knowledge of cultural artifacts. Gemma 3 27B was useless at a question related to grouping Berserk characters by potential baldurs gate 3 classes; Claude did fine. The methods used to reduce memorisation rate probably also deteriorate performance in some other ways that don't show up on benchmarks.
Show HN: I build an Astrology AI, Which can expose people personality in detail
by viknesh_x | 2025-06-16 12:31:15+00:00
Hello guys

After failing many features.

Finally build something useful.

I made a astrology ai which takes a person birth details such as dob,time and birth place as input.

And give a tailored response on their personalities such as, loyal or not, aggressive or not, manipulative or not

Still it's just a initial MVP, based on the user's feedback, will fine tune it to something better.
by virgilp | 2025-06-16 12:31:36+00:00
The problem with consciousness is kinda' the same as the problem with AGI. Trying to prove that someone/something has or does not have consciousness is largely, as a commenter said, the same as debating whether it has or not plipnikop. I.e. something that is not well defined or understood, that may mean different things to different people.

I think it's even hard to conclusively prove that LLMs don't have any emotions. They can definitely express emotions (typically don't, but largely because they're trained/tuned to avoid the expression of emotions). Now, are those fake? Maybe, most likely even... but not "clearly" (or provably) so.
by Sophira | 2025-06-16 12:32:58+00:00
> This seems like a truly unreasonable level of political skill for nearly any setting. We're talking about changing every endpoint in the Internet, including those which can no longer be upgraded. I struggle to think of any entity or set of entities which could plausibly do that.

Case in point: IPv6 adoption. There's no interoperability or negotiation between it and IPv4 (at least, not in any way that matters), which has led to the mess we're in today.
by rvz | 2025-06-16 12:33:05+00:00
"CrYptO hAs No uSe cAse"

Following from Stripe, Moneygram, PayPal adding stablecoins, we now have the shopping platforms integrating stablecoins such as Walmart, Amazon and now Shopify. [0]

[0] https://www.shopify.com/news/stablecoins-on-shopify
by ToucanLoucan | 2025-06-16 12:33:16+00:00
The only writing I've ever used ChatGPT for is writing I openly don't give a shit about, and even then I constantly find myself prompting it to write less because holy shit do LLMs love to go on and on and on.

Like not only do I cosign all said above, but I will also add to this: brevity is the soul of wit and none of these fucking things are brief. No matter what you ask for you end up getting just paragraphs of shit to communicate even basic ideas. It's hard to not think this tool was designed from go to automate high school book reports.

I would only use these programs to either create these overly long, meandering stupid emails, or to digest ones similarly sent to me, and make a mental note to reduce my interactions with this person.

It's no wonder the MBA class is fucking thrilled with it though, since the vast majority of their jobs seem to revolve around producing and consuming huge reports containing vacuously little.
by globnomulous | 2025-06-16 12:34:21+00:00
Thank you for (1) sharing a fascinating project that has nothing to do with "AI," (2) mentioning not once, anywhere, even in the repo docs (as far as I can tell) that Tattoy is written in Rust, and (3) not writing docs that look and sound like ad copy intended to woo VCs or outcompete other software packages.

Seriously, this is high-quality work (as far as I can tell -- though it is way outside of my area of expertise) and the presentation is a model of class and taste. This is what I come to HN for, and it's a badly needed shot of motivation to start, finally, working on my own terminal-related project.
by ekr____ | 2025-06-16 12:35:11+00:00
Just on a technical note, TLS 1.3 only uses AEAD ciphers where the nonce is determined by the record numbers, so it actually is in principle possible to decrypt the packets even if they are received out of order by trial decrypting with different record numbers. You don't do this in TLS (as opposed to DTLS) because it runs over TCP and therefore you are guaranteed in-order delivery.

DTLS, by contrast, provides a record number hint (the low order bits of the record number and epoch) to assist in record number reconstruction: https://www.rfc-editor.org/rfc/rfc9147.html#name-reconstruct....
by mcpherrinm | 2025-06-16 12:35:38+00:00
No: while the handshake is unencrypted, it is authenticated. An attacker can’t modify it.

What an attacker can do is block handshakes with parameters they don’t like. Some clients would retry a new handshake with an older TLS version, because they’d take the silence to mean that the server has broken negotiation.
by jeroenhd | 2025-06-16 12:35:50+00:00
Looking at the spec (https://github.com/facebook/zstd/blob/dev/contrib/seekable_f...), I don't see any mention of custom dictionaries like you describe.

The spec does mention:

> While only Checksum_Flag currently exists, there are 7 other bits in this field that can be used for future changes to the format, for example the addition of inline dictionaries.

so I don't think seekable zstd supports these dictionaries just yet.

With multiple inline dictionaries, one could detect when new chunks compress badly with the previous dictionary and train new ones on the fly. Could be useful for compressing formats with headers and mixed data (i.e. game files, which can contain a mix of text + audio + video, or just regular old .tar files I suppose).
by ForHackernews | 2025-06-16 12:36:01+00:00
Bit strange to approach this from the app dev perspective. Surely it's operating systems and users who care about sandboxing apps? As a developer, I'll live with whatever restrictions I need to, but I'm not sure why I'd go to extra hassle making my life harder in order to secure your system against code that I trust (I just wrote it!)
by roryirvine | 2025-06-16 12:36:20+00:00
LWN publish better stats for every kernel release - the most recent (for 6.15) can be found at https://lwn.net/Articles/1022414/

So RedHat were the third largest employer by number of changesets (after Intel and Google), IBM were 15th - but, by number of lines changed, they were 5th and 4th respectively.
by badmintonbaseba | 2025-06-16 12:36:56+00:00
It's up to the demangler, the info must be there in the decorated/mangled name. Demanglers sometimes choke on these complex symbols.

AFAIK MSVC also changed their lambda ABI once, including mangling. As I recall at one point it even produced some hash in the decorated/mangled name, with no way to revert it, but that was before /Zc:lambda (enabled by default from C++20).
by major505 | 2025-06-16 12:37:14+00:00
yeah, thres a cool story. A wealth lady gave her a diamond neckless that was audictioned. The person who won the neckless in the auction gave it back to my aunt, so she could auction it again. The same neckless was auctioned like 3, 4 times because of that. A lot of generous people helped her pave the way, but it was her wll and determination that focused this efforts.

Personally I dont have a good relationship with her, because of things she done in the family, including to my own parents, but damn if this don't goes to show that even peolpe we may think are bad can can make the world a better place. She does have a lot of good karma to expend the rest of her life.
by vanattab | 2025-06-16 12:37:48+00:00
This is the correct answer. Alone is not really a how to live in the woods show, it's a managed starvation show. The contestants are limited to about a 1 sq mile area which may or may not have a good source of clay. They purposely set them out just a few weeks before winter so they do not have a long time to prep. Conserving and replenishing calories is the name of the game.
by api | 2025-06-16 12:38:21+00:00
A while back it dawned on me that we think the greatest past civilizations were all in Egypt, the Middle East, and Mesopotamia because those areas are deserts or semi-deserts. They built out of stone because they didn't have much wood, and their writings survived because they weren't destroyed by water.

There could have been very sophisticated societies, even large scale civilizations, in the past in places like North America that built mainly out of wood, clay, bone, and other readily available materials, and there'd be nothing left. Any writings would be gone too, since writings don't survive well in wet climates unless they are chiseled into very durable stone or vitrified pottery (and even then they can erode).
by bdsa | 2025-06-16 12:39:03+00:00
My dad (who worked for BT in various positions) claims he was involved with the decision to move the exchange in our/their village from one end to the other. Coincidentally, closer to the end in which we lived, which I gather would have a non-trivial impact on our internet speed.

I think this probably coincides with the time period we got ISDN, very early, and I was amazed by the concept of _always connected_ internet. I can still vividly remember watching GoZilla download a game demo at 7kb/s, stunned and excited.
by messe | 2025-06-16 12:39:23+00:00
I think you still have access to whatever user-portal starlink uses, so you can unpause it that way. But I have not confirmed this, and could be mistaken. The documentation only mentions that when you are out of data you have access to that page, it doesn't mention anything about when your plan is paused.

> If you exceed the allotted data on the Roam 50GB plan and have not opted-in for additional data, you will be unable to use the internet except to access your Starlink account, from which you can add additional data or change plans.
by kgwxd | 2025-06-16 12:39:59+00:00
> No email access

> Every sane person nowadays uses a password manager anyway

First, basically no one is using a password manager and, if they are, the password manager is on their phone.

If they're savvy enough to use a password manager, their email is configured on their phone too.

> I deliberately avoid checking email to maintain focus.

> Clipboard disruption

Self-inflicted problems.