MurphyA/hacker-news huggingface dataset:
by mercora | 2025-06-08 11:03:00+00:00
its funny you call out Mullvad in this specific case because its the one thing i really dislike about their VPN service. It wont route DNS to the root server, or any designated server really. They redirect DNS queries to their cache indiscriminately. which actually will harm the success of setting up a recursive resolver. I get this is done to prevent leaks, i would just like the option to opt out of it. been customer for many years now though. I use unbound semi recursively resolving using a forwarder with DNS over TLS. So Mullvad is not burdened with what i resolve and the forwarder not with information on who.
by spiffyk | 2025-06-08 11:03:05+00:00
Alright so the article's tl;dr says to not use DoH as it merely reduces the number of peepers to one (which firstly is a good thing and secondly also offers protection against UDP spoofing attacks)... then goes on to recommending DoT, which would suffer from the exact same (non-)issue, but also actually gets to the actual problem with DoH, which is that the HTTP part has no business being there and increases complexity, which I as a former DNS resolver implementor wholeheartedly agree with!

Why discredit the whole post by adding an irrelevant tl;dr?
by ignoramous | 2025-06-08 11:03:44+00:00
> Based on what?

The bar is real low, mostly for the fact that ISPs are mandated by law in most if not all countries to track traffic flowing through their pipes.

Cloudflare provides relatively better privacy guarantees for the public DNS resolvers it runs: https://developers.cloudflare.com/1.1.1.1/privacy/cloudflare...
by latexr | 2025-06-08 11:03:59+00:00
> Trademarks can become genericized

That’s not the same thing. Trademarks become generalised terms in the public’s mind, not legally. Two people in conversation might refer to a non-Xerox photocopier as a Xerox, but a non-Xerox photocopier company can’t just advertise their products as being Xerox.

Additionally, from the wikipedia page you linked (emphasis mine):

> A trademark thus popularized is at risk of being challenged or revoked, unless the trademark owner works sufficiently to correct and prevent such broad use.

Which, again, goes directly counter to the idea of a public domain trademark.
by chrismorgan | 2025-06-08 11:05:05+00:00
Admittedly I have done some cryptographic string generation based on different alphabet sizes and characteristics a few years ago, which is pretty specifically relevant, and I’m competent at cryptographic and security concerns for a layman, but I certainly hope security reviewers will be more skilled at these things than me.

I’m very confident I would have noticed this bias in a first pass of reviewing the code. The very first thing you do in a security review is look at where you use `crypto`, what its inputs are, and what you do with its outputs, very carefully. On seeing that %, I would have checked characters.length and found it to be 62, not a factor of 256; so you need to mess around with base conversion, or change the alphabet, or some other such trick.

This bothers me and makes me lose confidence in the review performed.
by smoody07 | 2025-06-08 11:05:54+00:00
This is why TS is winning. Agent frameworks largely replace backend logic, and they have their own quirks with runtime costs. Most agent use cases look like chron job scripting or chatbots right now, and I expect we'll see far more use cases with proactive scripts. All of these avoid traditional bottleneck of runtime because the AI is the bottleneck.
by Dylan16807 | 2025-06-08 11:06:09+00:00
> Even Nintendo Switch 2 Game Card is now only going to be a Game Key.

Lots of games are still stored on the cards. The key-only cards are mostly an alternative to printing the key on a piece of cardboard.

The real problems are that A) not every game lets you choose and B) the cards use flash and will wear out.
by btasker | 2025-06-08 11:07:00+00:00
> His "don't move off 22 for ssh" is also just opinion. He argues "you will be found"

Worse than that, that post misunderstands it's own statement:

"Sure, you will see fewer attacks than before, but most of the attackers are no longer just stupid bots"

That's a *good* thing, because the move has reduced the signal to noise ratio. By getting rid of most of the crufty noise of the internet, you now know that anything hitting your logs now is more likely to be an actual threat than the poorly automated dictionary attack bots.

Moving SSH to a different port doesn't make the system much more secure (and definitely shouldn't be the only thing you do), but it does generally enable you to be more responsive.
by latexr | 2025-06-08 11:07:26+00:00
> Independent certification that something fits a brand but anyone is allowed to use the brand if they pass certification.

But then it’s not public domain (which was the argument I was replying to). Public domain means everyone can do it without permission, while applying for a certification still requires a governing body which has the ultimate power.

> Things like "Organic" already do that a bit

That’s a classification, not a trademark.
by JumpCrisscross | 2025-06-08 11:08:06+00:00
> this article is absolutely about a court order that exhibits “[...] almost no regard for the privacy of parties not involved to a given dispute”

How? It’s compelling OpenAI retain data they have the contractual right and technical ability to retain. Nothing is being made public, other than the order itself. Nothing is even being transferred to the plaintiff’s legal team. (At some point it will be made available. But both sides will fight over what they have access to, with the court mediating. That’s a lot of regard for third parties’ privacy.)
by HenryBemis | 2025-06-08 11:08:39+00:00
Wait till someone gets a serious disease (as it happens in many families) and lose their home, car, and their shirt because US healthcare is ....(crickets).

Also, imagine a woman having a baby and going back to work on Monday, and having to pay a full salary for care.. insane right?? Who needs babies.

But sure, salary difference..
by supriyo-biswas | 2025-06-08 11:09:05+00:00
I'm not disputing the title per se as I have not worked for EU companies. Having said that, news articles of this sort usually interview a few people and then has the journalist draw a conclusion by way of storytelling.

However, this article seems like an ad for a single company, where they post a direct link to their careers section and even heap praise on the interview experience, which is unusual unless the person is specifically talking about their career to another prospective employer or to an otherwise "professional" audience.
by aquariusDue | 2025-06-08 11:11:42+00:00
There's also something nice about having everything in the same place, at least until Obsidian becomes a code editor and email reader. For a while I thought that Neovim might be the next Emacs (if you squint a bit) but looks like Obsidian is halfway there if you take a look at the plugin landscape and what people are doing at the extreme ends.

Also stuff like Bases[0] might be the thing that entrenches Obsidian even further as an IDE for knowledge work (more or less).

[0]: https://help.obsidian.md/bases
by aleph_minus_one | 2025-06-08 11:11:51+00:00
> There are people now that know what a Commodire 64 is but have never heard of an Amiga. The C64 made a cultural impression that lasts today.

I would claim that in my generation (people born after Commodore's heyday), those who are interested in retrocomputing topics (a minority) are similarly aware of the C64 and the Amiga and their cultural relevances.
by chaz6 | 2025-06-08 11:13:50+00:00
If you are lucky, yes. For example, I have a choice between CityFibre (XGS-PON), Openreach (GPON) and Virgin Media (DOCSIS) as well as 2 different 5G networks. It is rare for a property to only be covered by a single wired network these days in the UK.
by namibj | 2025-06-08 11:14:22+00:00
It's a proxy for abstract designing, like writing software or designing in a parametric CAD.

Most the non-math design work of applied engineering AFAIK falls under the umbrella that's tested with the pelican riding the bicycle. You have to make a mental model and then turn it into applicable instructions.

Program code/SVG markup/parametric CAD instructions don't really differ in that aspect.
by mrkeen | 2025-06-08 11:14:26+00:00
> What is a safe concurrency model?

STM.

The terms 'atomic', 'thread-safe', and 'concurrent' collections are thrown around too loosely for application programmers IMO, for exactly your example above.

In other scenarios, 'atomics' refer to the ability to do one thing atomically. With STM, you can do two or more things atomically.

Likewise with 'thread-safe'. Thread-safe seems to indicate that the object won't break internally in the presence of multiple threads, which is too low of a bar to clear if your goal is to write an actually thread-safe application out of so-called 'thread-safe' parts.

STM has actual concurrent data structures, where you can write straight-line code like 'if this collection has at least 5 elements, then pop one'.

I don't think the Feb 31 example is that fair though, because if you want to construct a representation of Feb 31, who's going to stop you? And if you don't want to, plain old static types is the solution.
by Dylan16807 | 2025-06-08 11:15:15+00:00
If I can't throw it in a box for 30+ years then it's not a reliable storage medium.

A server that uses parity drives and regular data checks is a reliable system built on top of unreliable storage. It achieves the same data integrity but it's a lot more annoying and difficult to deal with.

A huge stack of m-discs is not a good option either.
by afro88 | 2025-06-08 11:15:42+00:00
> What this interaction shows is how much knowledge you need to bring when you interact with an LLM. The “one big flaw” Claude produced in the middle would probably not have been spotted by someone less experienced with crypto code than this engineer obviously is. And likewise, many people would probably not have questioned the weird choice to move to PBKDF2 as a response

For me this is the key takeaway. You gain proper efficiency using LLMs when you are a competent reviewer, and for lack of a better word, leader. If you don't know the subject matter as well as the LLM, you better be doing something non-critical, or have the time to not trust it and verify everything.
by jiri | 2025-06-08 11:15:42+00:00
I am also worried a bit about knowledge nowadays.

With LLM-based AI, should one also store individual chats in personal knowledge system? Yeah, I believe that some my chats are quite full of relevant info, that can be used in the future.

Also what is the right general approach here - should I ask the same question several times (every time I need information) or should I just look up previous answer in my history? To be fair I dont store google results, I just search it again, but with chat the path to right answer is often more complex than spitting few words in google search input box.
by chaz6 | 2025-06-08 11:15:58+00:00
CityFibre is only available through wholesale ISP's. Other smaller alt-nets (such as the one I work for - Netomnia (including Brsk/YouFibre)) is gearing up to provide wholesale access.

In the UK there are even aggregators like Fibre Café [1] that makes it easier for ISP's to connect through multiple networks.

[1] https://fibrecafe.co.uk/
by admiralrohan | 2025-06-08 11:16:30+00:00
Lack of motivation isn't an issue, we procrastinate when we have lack of power to do the task.

The core point of the article is breaking down the task, which he made it look trivial but it's not that simple.

In my experience, higher expectations leads to trying to control the outcome which leads to perfectionism and procrastinating for "ideal" time. So the key is to reduce expectations, which is under our control.

Once I reduce expectation I can try random stuffs which usually lead to breakthrough and the flywheel mentioned in the article.
by exiguus | 2025-06-08 11:17:03+00:00
I concur and generally advise against using large corporate DNS providers. Instead, consider setting up your own DNS infrastructure, such as your own recursive servers, or opt for a trustworthy DNS provider like Freifunk or CCC, rather than Google, Cloudflare, or Quad9.

The advantages of self-hosting recursive servers include complete configurability, absence of censorship, tracking, and rate limits. However, like any self-hosting solution, it requires an investment of time and money. It's also important to note that DNS lacks an authentication layer, so for access restrictions, it should be placed within a private network or VPN.

The issue of pre-configured DNS over HTTPS (DoH) in many browsers and mobile devices can be addressed through firewall rules on your router.

For creating your own DNS infrastructure, I recommend dnsdist if you have ample time, though bind and unbound are also viable options.

For the past three years, I have been running dnsdist with recursive servers on two ARM VPS instances, costing around 14 EUR per month. This setup provides me with DNS over TLS (DoT), DoH, and other features. I use them with unbound (TLS) or dnsproxy and dnscrypt-proxy across routers, servers, and other machines. For mobile devices, I utilize DoH directly.

Previously, I used bind in recursive mode without any encryption beyond SSH tunneling or VPN.

Alternatively, I can recommend ffmuc as a DNS provider.
by lokimedes | 2025-06-08 11:18:23+00:00
There’s a couple of “concerns” you may separate to make this a bit more tractable:

1. Learning CUDA - the framework, libraries and high-layer wrappers. This is something that changes with times and trends.

2. Learning high-performance computing approaches. While a GPU and the Nvlink interfaces are Nvidia specific, working in a massively-parallel distributed computing environment is a general branch of knowledge that is translatable across HPC architectures.

3. Application specifics. If your thing is Transformers, you may just as well start from Torch, Tensorflow, etc. and rely on the current high-level abstractions, to inspire your learning down to the fundamentals.

I’m no longer active in any of the above, so I can’t be more specific, but if you want to master CUDA, I would say learning how massive-parallel programming works, is the foundation that may translate into transferable skills.
by edg5000 | 2025-06-08 11:18:31+00:00
Great writeup. I appreciate the bravery.

To solve the housing issues, all we have to do is build basic soviet-era apartment buildings everywhere and all will be good. The fact that we don't do this in many countries with crippling real estate situations must be a symptom of much larger underlying systemic issues. The future will hold a great many things but also some unavoidable and painful refactoring of leadership.
by tasuki | 2025-06-08 11:18:58+00:00
The article about how hamburger menus are bad has a hamburger menu. The "why nn/g" page[0] subtitle says "We practice what we preach". Really?

I maintain a website with around 15 subpages. What should I use instead?

[0]: https://www.nngroup.com/about/why-nng/
by JumpCrisscross | 2025-06-08 11:19:18+00:00
> Why would autonomous vehicles be treated any differently than human operated vehicles?

Humans have been driving on public roads for over a century. We know how they work. We don’t know how a given self-driving system will work, and are trusting the companies developing them to do the right thing, but to make sure we need to see their books. The alternative is requiring each version of driverless software to take a comprehensive regulatory driving test, which is a bureaucratic nightmare nobody wants.
Show HN: I built a real-time dashboard to visualize my hourly earnings
by barisbll | 2025-06-08 11:20:00+00:00
> Hey HN, > > As a software developer, I was always curious to see my earnings accumulate in real-time during my workday. I find it motivating to have a tangible sense of the value I'm creating second by second. > > So, I built this small web app, Bobo, to do just that. You set your hourly rate and your work schedule, and it gives you a live-updating tally of your earnings for the day. It's built with Next.js, TypeScript, and uses @number-flow/react for the animation. All settings are saved locally in your browser. > > My cat's name is Bobo and I love him, therefore I named it bobo > > Would love to hear what you think! Any feedback is welcome.
by throwaway81523 | 2025-06-08 11:20:04+00:00
I looked at the CUDA code for Leela Chess Zero and found it pretty understandable, though that was back when Leela used a DCNN instead of transformers. DCNN's are fairly simple and are explained in fast.ai videos that I watched a few years ago, so navigating the Leela code wasn't too difficult. Transformers are more complicated and I want to bone up on them, but I haven't managed to spend any time understanding them.

CUDA itself is just a minor departure from C++, so the language itself is no big deal if you've used C++ before. But, if you're trying to get hired programming CUDA, what that really means is they want you implementing AI stuff (unless it's game dev). AI programming is a much wider and deeper subject than CUDA itself, so be ready to spend a bunch of time studying and hacking to come up to speed in that. But if you do, you will be in high demand. As mentioned, the fast.ai videos are a great introduction.

In the case of games, that means 3D graphics which these days is another rabbit hole. I knew a bit about this back in the day, but it is fantastically more sophisticated now and I don't have any idea where to even start.
by aquariusDue | 2025-06-08 11:20:20+00:00
Semi related there's also ekg which stores notes in a sqlite database and uses tags as titles as in you don't really have to name a note per se and multiple notes can share a "title" which is just a tag.

But that's not why I mentioned ekg, the reason is that it does embedding out of the box, here's a quote from the repo on GitHub:

"There is support for attaching Large Language Model (LLM) “embeddings” to notes, for use in search and similarity search, via the llm package. This allows you to search based on semantics, as opposed to text matching. You can also use LLM chat in your notes, getting an LLM to respond to your notes based on a default prompt, or new prompts that you add."

These days I feel like you have lots of great options for note-taking in Emacs and you're not forced to use the org format unless you want to.

ekg repo: https://github.com/ahyatt/ekg
by buran77 | 2025-06-08 11:22:21+00:00
The points are generally applicable to any decent employer in the EU and most non-EU European countries, white collar work in particular. This is the norm not because companies are so much nicer. Most of this is codified in law. Some countries have better conditions than others. Minimum vacation period, paid overtime, the healthcare system, the public pension system, job security (protections from dismissal), employee representatives or union, etc. Your mileage may vary if you work remotely.

The obvious drawback is the difference in pay. European salaries are lower for the same job. Probably still lower even relative to real hours worked.

There's a less tangible and harder to quantify benefit of not having to deal with the same kind of job related stress a US worker has to deal with. The boost in quality of life that can't be gleaned from the size of your house or number of cars you own. So it's hard to factor that in when making a data driven comparison.
by puttycat | 2025-06-08 11:22:25+00:00
You are right, but the companies making these models invest a lot of effort in marketing them as anything but probabilistic, i.e. making people think that these models work discretely like humans.

In that case we'd expect a human with perfect drawing skills and perfect knowledge about bikes and birds to output such a simple drawing correctly 100% of the time.

In any case, even if a model is probabilistic, if it had correctly learned the relevant knowledge you'd expect the output to be perfect because it would serve to lower the model's loss. These outputs clearly indicate flawed knowledge.
by 0xDEAFBEAD | 2025-06-08 11:22:27+00:00
>It turns out that when elections are fought on the basis of identity (race, religion) etc corruption is actually considered a benefit! This is because the loyalists interpret this as "we" are winning and "they" are losing.

So how could one design a political system so this behavior doesn't emerge / is not incentivized?
by heavenlyhash | 2025-06-08 11:23:21+00:00
My 2c (opinions may vary, etc, etc): I think that doing percent-encoding shenanigans is going to be widely perceived as "ugly" and will severely hamper adoption. I'd reconsider.

I think it's quite likely that people are going to care a lot (lot) less about the semantic distinction between <namespace> and <name> (which is a semantic, handwavey, somewhat indistinct subject to begin with) than they are going to be turned off by percent encoding.

There's two broad categories of possible outcome for that kind of friction:

- Either people-in-the-wild do implement and obey the percent encoding rule, despite the friction (and adoption gets a debuff);

- Or, people-in-the-wild will just quietly ignore the percent encoding rule. And I think this is significantly likely, considering that (iiuc) the only consequence is that the parts with slashes end up considered <name> and never <namespace>.

Neither of those outcomes is totally bad, but they're both unfortunate. For the first one, an adoption debuff is never great. For the the second one (e.g. rule mostly ignored), there's other potential negative outcomes: the community might be fractured; and also, that figuring out what to do when writing a good renderer and some people followed the percent-encoding rule and some didn't... is going to be very, very ugly.

On the other hand, if the spec doesn't recommend (or support) percent encoding at all... yes, it loses the ability to express some <namespace> values. But is that actually something that's truly load-bearing? Maybe dropping that expressability is actually a viable trade.
by bandoti | 2025-06-08 11:23:39+00:00
Honestly, new code always has bugs though. That’s pretty much a guarantee—especially if it’s somewhat complex.

That’s why companies go for things that are “battle tested” like vibe coding. ;)

Joke aside—I like how Anthropic is using their own product in a pragmatic fashion. I’m wondering if they’ll use it for their MCP authentication API.
by aiono | 2025-06-08 11:25:09+00:00
I agree with the last paragraph about doing this yourself. Humans have tendency to take shortcuts while thinking. If you see something resembling what you expect for the end product you will be much less critical of it. The looks/aesthetics matter a lot on finding problems with in a piece of code you are reading. You can verify this by injecting bugs in your code changes and see if reviewers can find them.

On the other hand, when you have to write something yourself you drop down to slow and thinking state where you will pay attention to details a lot more. This means that you will catch bugs you wouldn't otherwise think of. That's why people recommend writing toy versions of the tools you are using because writing yourself teaches a lot better than just reading materials about it. This is related to know our cognition works.