MurphyA/hacker-news huggingface dataset:
by conradludgate | 2025-06-21 20:24:07+00:00
If a parser throwing an error due to duplicate fields causes a DoS, then the same is going to happen when it throws an error due to invalid encoding...

So, I don't think that's a relevant critique. I think any ambiguous case in parsing untrusted user input should raise an error, and anyone working on code with untrusted data should be ready to handle errors
by sonicvrooom | 2025-06-21 20:24:17+00:00
and it's not even strange that "people are starting to put 2 and 2 together" is totally normal when it's been going worse than moderately bad for 1 1/2 decades ... feels like Arbeitsbeschaffungsmaßnahmen had a twin nobody ever knew of and the revelation came way away waaaaay too late ...

like, why would you outsource something so imperative to people who do not give a damn about your company and who have less than anything competence in your field and just go "by some book" ...

20 years of IT build by people who just do their job because nobody gave a fuck about the result because some dude condemned "longtermism" a cool euphemism in times of climate change, privacy vacuum tubes, punch card shaped security, and of course mass x social media "nudging" based on 90% and rising probabilities of verified success with little to no resistance because click bait presidents are good for business?
by throwing_away | 2025-06-21 20:25:12+00:00
Some context for anyone unfamiliar with the linux desktop space:

Hyprland is a "wayland compositor" (roughly analogous to an X Window Manager) that is under active community development: https://hypr.land

Wayland is considered the future of the linux desktop and is what projects like Valve's SteamDeck are using: https://github.com/ValveSoftware/gamescope

It's known that Hyprland Premium is going to include a bunch of pre-made dotfiles including a Quickshell bar config, if you want to see the current top-tier rice: https://quickshell.outfoxxed.me/
by robcohen | 2025-06-21 20:25:38+00:00
Alternatively, you could make a Nix flake that can generate an immutable microVM image based on Solo5, running a MirageOS unikernel that implements NAT traversal with UDP hole punching and relay fallback. This image can be deployed to Fly.io as a lightweight, autoscaling Firecracker VM with per-second billing. It boots in milliseconds and costs far less than Lambda.

Any reason to use lambda vs this cloud-agnostic approach? Maybe I am missing something. I guess per second vs per 100ms billing, but I can't imagine it ends up being cheaper with Lambda.
by SllX | 2025-06-21 20:26:13+00:00
Well let me put it this way, I’m under no illusions that foreign nations will always attempt to exert their influence over American affairs. The only obligations we maintain with other nations are the ones we committed ourselves to, and yes, I know some of that is in question right now, but for what it’s worth I’m actually on the side of maintaining our commitments rather than pissing all over them or playing this silly “will they, won’t they” game. Our relationships with nations across the world, most of which did not exist or at least did not exist in anything like their current form including France, the Kingdom of the Netherlands née the Dutch Republic, and Spain (which we have actually and directly waged war with) have not remained static since the Revolutionary War.

All of that said, our Government, our problem, and while weighing what kind of intervention you might hypothetically support, also weigh how that stands up to the power of the Commander-in-Chief of the United States Armed Forces. So, really, we can have it both ways, even if that makes us hypocrites. Also for what it is worth: people can be hypocrites, organized entities led by different factions of people over the course of their history like nations cannot.
by out-of-ideas | 2025-06-21 20:27:24+00:00
i have had this issue and realized i was basically getting a low key elec shock every time i had the power plugged into my mac; turned out it was the apple wall wart power brick; using a different one ended the constant elec pulse shocking effect. (at first i thought it was the shitty fraying usb-c cables apple provides which turn yellow and the plastic breaks apart after 6months to a year - nope! that thing is fine).
by freeopinion | 2025-06-21 20:27:25+00:00
I don't advocate for the U.S. to concede its sovereignty to an outside court.

But I do think that having an outside court publicly try the guilt or innocence of somebody within the U.S. is much more palatable than having some non-court within the U.S. decide on whether non-U.S. citizens living outside the U.S. should live or die.

The U.S. openly assassinates foreigners in foreign countries without even faking a trial.

It's hard to complain that a court with very little power to enforce any ruling is giving U.S. citizens an open trial. Do you think it is inappropriate for a high school moot court team to put U.S. Presidents on trial? Or for speech and debate teams to argue the morality of the actions of U.S. politicians?

How exactly do you judge what is appropriate and what is not?
by coderatlarge | 2025-06-21 20:28:04+00:00
WA is busy losing its way on taxation vs value provided for taxes paid and reporting burden. so imo these IP issues are almost second order effects at this point. i personally expect a continued exodus over some of the latest tax hikes for example taxing cap gains beyond a certain amount at an additional 7%. as if niit was not bad enough. if residents could at least see some value from these added taxes maybe it could be something. also the estste tax there kicks in quickly and has hidden gotchas even for people who no longer live there.
by jordanb | 2025-06-21 20:29:06+00:00
I used to believe this kind of argument until Cuba. When I was young, the argument for why the US continues to try to punish Cuba was that Florida is a swing state and there are a lot of passionate anti-Cuba exiles in Florida who vote as a block.

The problem is that Florida hasn't been a swing state in a long time, and yet we continue to embargo Cuba. In fact, Biden made things worse [0]

The reality is that we don't live in a Democracy but an Oligarchy. The American oligarchy includes people who want to keep the boot on Cuba until a Batista-style regime is back in power. Likewise, the oligarchy supports Israel and therefore, so will the US government and it doesn't matter who you vote for.

[0] https://jacobin.com/2024/05/biden-trump-policy-cuba-embargo
by mapmap | 2025-06-21 20:30:44+00:00
In my experience, as a normal non-unicorn employee at a large corp, I was able to have my contract modified. It required advice from an employment law lawyer that cost a few hundred dollars and a couple emails with the company’s general counsel.

You can change these contracts. Hiring people is difficult and once the company has made that decision they don’t want to lose you over a contract clause.
by schmookeeg | 2025-06-21 20:31:01+00:00
I am 100% road warrior like you describe. I'll do a coast-to-coast in 29ish hours of driving.

I recently moved to an EV for my road-tripper vehicle. Yes, I need to stop and recharge every 4-5 hours for 20-40mn.

I find that I like it. A stretch, a coffee, snacks and replenishment. My favorite chargers are at a supermarket and a cafe' nearby.

I agree the pro-EV types try to whitewash this a lot, and I agree it is dishonest.

...but I find that I am okay with the cross-country EV reality anyway.

$0.02
by SllX | 2025-06-21 20:31:20+00:00
My position is that the ICC should not even exist, but if it is going to exist, then America should safeguard itself and its allies from it.

If you look at the real history of the ICC, it’s effectively toothless over any nation that can safeguard its own sovereignty, and otherwise a fig leaf for the supposed lawfulness of foreign intervention into nations that cannot.
by dsp_person | 2025-06-21 20:31:44+00:00
from phoronix:

Noted changes with XLibre 25.0 include: a) Xnamespace extension: a novel approach for isolating clients from different security domains (eg. containers) into separate X11 namespaces, where they can't hurt each other

that seems significant, I wonder why xorg hasn't implemented something like it so far.
by dave1010uk | 2025-06-21 20:32:02+00:00
Thanks for submitting this!

Author here. (If you can call me that. GPT-4 and Gemini did the bulk of the work)

This is a (slightly tongue in cheek) benchmark to test some LLMs. All open source and all the data is in the repo.

It makes use of the excellent `llm` Python package from Simon Willison.

I've only benchmarked a couple of local models but want to see what the smallest LLM is that will score above the estimated "human CEO" performance. How long before a sub-1B parameter model performs better than a tech giant CEO?
by 4ndrewl | 2025-06-21 20:32:14+00:00
The British perspective on this is really the Portable Antquities Scheme at https://finds.org.uk/ which has been running for over 20 years.

You'll find details of research papers and the Staffordshire Hoard, probably one of the largest collections of Anglo-Saxon metalwork ever found https://en.wikipedia.org/wiki/Staffordshire_Hoard
by tetha | 2025-06-21 20:32:39+00:00
> I agree with the article in that the mechanics of the game weren't ideal. Personally as someone that LOVES 4x and has spent _way_ too much time playing them, I think the format is fundamentally flawed and cannot be saved (e.g. expanding is too overpowered, games become too dull to close out - given the win was effectively gained hundreds of turns ago,

Avid Civ/Paradox-Player here as well. I've been banging my head into 4X design for a while as well, and it's hard. In the somewhat classical formula Civ, Master of Orion, Stellaris and such provide - and even many RTS, it's always the same situation as you have in chess: The better executed early game usually wins.

And strangely enough, in a chess middle game, you have better comback opportunities. In Stellaris, you can at times lose a fight, but if you have enough defenses left and sufficiently more production than your enemy, you still win, just slower than you might have. In Starcraft, you may be able to pull out of a bad fight, If you can, and have good production, you stay ahead. Giving back a piece advantage in chess is a much bigger deal and a much bigger loss.

From there, I can't help but think that many, many 4X games in the classical formula boil down to the right few choices in the early game and then it's about correct execution/conversion. And I haven't really found a way around that.

Or, rather, a way around that is to make the situation asymmetric or rather to change the formula. They are billions comes to mind, or Against the Storm. Don't fight equal and similarly shaped empires, but something else.
by d3Xt3r | 2025-06-21 20:33:21+00:00
Not "a Linux server", it's just Ubuntu 24 and Debian 12, and only X11. :/

Strange choice to build on an X11 stack, when distros (such as RHEL) have started to deprecate it.

Personally, I would've gone for a Wayland WM + wayvnc, or even a Wayland DE with a built-in VNC server (like KDE or Gnome) and then pair it with noVNC to have a web frontend.
by yousif_123123 | 2025-06-21 20:33:35+00:00
Maybe if instructed, but how would it know it needs to use python in this case vs just answer? Perhaps you'd instruct it to always attempt using code to reduce errors.

But the idea of trivial problems like this potentially causing issues for LLMs might mean other aspects of intelligence could also be a struggle for LLMs (which could impact it's coding ability as well).
by andy99 | 2025-06-21 20:33:35+00:00
I was trying to understand how this could be used for flights. I've seen either having to enter your last name and seat, or loyalty plan number to get in-flight wifi. Are there really airline wifis that give every mac address a free amount of time?

A lot of airlines now offer free "messaging" - usually just text on common messaging apps like WhatsApp. I've been meaning for years to write some kind of server that could give me useful functionality over chat messages.
by harmmonica | 2025-06-21 20:34:48+00:00
Who do you think will give priority to the states and local governments? Do you think it will be people in the Executive Branch? What kind of prioritizations do you actually think they'll give to, for example, the California vs. Texas state governments and on down the line?

Once those groups you mention are consulted, who actually chooses which parcels to sell? Is it someone or a group in the Executive Branch? Do you think "consulted" means more than "we're considering selling these specific lands... What do you think?" Once that consultation is done are there any restrictions, based on the feedback, about which lands can be sold? Or is it enough to have asked for comment and then it's ok to ignore those comments?

RE FMV, in particular for large parcels of land, valuation is a very subjective exercise. It's not only the land itself that determines that, but the credibility of the buyer. You might get an offer that's x, but then that buyer is considered unable to perform, but this other buyer at .5x has the means to close and therefore that's the FMV? Who decides whether a buyer is able to perform? That's a simple example, but there are countless ways to massage the definition of FMV. That applies to the sale of an every day home, but for large tracts of land it's impossible to argue FMV unless there's language in the law that says "at least x appraisals, with the appraisers drawn from lottery, for each parcel, must be performed and than averaged to get the asking price. And then qualified buyers are drawn from a hat once their ability to close is vetted." Are any of these checks in place in the bill?

You've read the bill. I'm begging the question(s) here, but I'm open to be surprised to find adequate checks that make the skepticism of so many comments in this thread unwarranted. If you tell me to read the bill myself I get it, but I'm interested in the dialogue if you're willing to share what you've learned about the details.

edit: autocorrect
by lmeyerov | 2025-06-21 20:36:33+00:00
I think bar for b2c, prosumer, SMB, yes.. folks want to see fast revenue growth (vs eyeballs & ideas)... but enterprise... not as much, and that's half the b2b market

Reverse there afaict, enterprise + defense tech are booming. AI means get to do a redo + extension of the code automation era. It's fairly obvious to buyers + investors this time around so don't even need to educate. Likewise, in gov/defense tech, palantir broke the dam, and most of our users there have an instinctive allergic reaction to palantir+xai, so pretty friendly.
by thaumasiotes | 2025-06-21 20:38:19+00:00
> Ginnerup dug up 14 glittering gold disks—some as big as saucers—that archaeologists say were buried about 1,500 years ago

> the real showstopper is an amulet called a bracteate with two stylized designs: a man in profile, his long hair pulled back in a braid, and a horse in full gallop. An expert in ancient runes says she was awestruck when she finally made out the inscription on top: “He is Odin’s man.”

> These embossed runes are the oldest known written mention of Odin, the Norse god of war and ruler of Valhalla. Ginnerup’s bracteate, which archaeologists describe as the most significant Danish find in centuries, extended the worship of Odin back 150 years

I don't think this is right. The first mention of Odin by a Germanic source could date to 500 AD. But the Romans wrote about the Germanic gods several centuries prior to that. They used the equivalence we still use today, calling Odin "Mercury". But what they say about the Germanic gods is compatible with what we know from Germanic sources; there's no reason to believe there was a change in the gods.

I note that the image on the bracteate features a pretty prominent swastika. Maybe Hitler was accidentally on to something after all.
by SllX | 2025-06-21 20:38:41+00:00
It won’t even come to that because the real truth is that no ICC member is ever going to arrest and extradite to the ICC a sitting or former POTUS putting us in a position where the Marine Corps. would have to roll into The Hague with a carrier group or two nearby and multiple submarine ICBMs aimed at every capital in Europe. Also you know, the American military personnel already situated nearby within Europe on American and NATO bases.

Should the Marine Corps. actually be put into a position to roll in and say “hi” to the people of The Hague for less than peaceful purposes on their leisurely stroll to the ICC’s courthouse, who in their right minds is also going to stand in their way and exchange fire?

Not to mention that whoever arrested the President has now effectively declared war on the United States.
by brulard | 2025-06-21 20:39:04+00:00
You made here an important assumption

> someone who already knows a programming language

I'm sure someone who can already code, can write a simple query. But my argument is

1. with AI assistance programmer would be quicker, with less friction, more productive, enabled to make queries beyond his current abilities

2. with AI assistance Non-programmer would be enabled to use SQL at all

3. real world queries are often not trivial (todays developers have simple queries covered by ORM / query building tools)

Regarding real life queries - I look at my last query that I crafted with difficulty and AI help - starts `WITH RECURSIVE`, uses `UNION ALL`, `GROUP_CONCAT`, `COALESCE` (even with SELECT statement inside), multiple CTEs. It would take me hours to get to that. I can have that in minutes with AI help. I don't even mention different dialects, feature support, arrays and JSONs, extensions, etc.
by blooalien | 2025-06-21 20:40:32+00:00
I just like the Jupyter Lab overall IDE-like interface. It's really well designed for general random exploration, and works well with Wil McGugan's "Rich" console output library. On the other hand, it's not really at all well suited for building web application type stuff. It's capable of it (with a whole lotta "hackery" and jumping through hoops) but it's not really built for it the way Marimo is. Marimo just feels like the right choice once you want to build a real repeatable end-usery type application for day to day use on a specific task. The widget set seems really well designed in Marimo too. I'm also really pleased with Marimo's usage of the uv Python package tool as well. I fully intend to keep both Marimo and Jupyter within easy reach, as they're both really excellent at what they do.
by tzot | 2025-06-21 20:42:03+00:00
Ctrl-Shift-C/V/X are not implemented in bash; it's the terminal emulator program that handles these. So the default terminal emulator of Ubuntu (gnome-terminal I assume, but ICBW) knows about a “system” clipboard and copies stuff to it and on paste feeds bash with the copied data. If you press Ctrl-Alt-F1 (and F2, F3, depends on your distribution's defaults) you can login and in your login shell, which I understand is bash, Ctrl-Shift-C/V/X have no difference to shiftless Ctrl-C/V/X.
by stiray | 2025-06-21 20:42:17+00:00
It worked until now for, what, 20 years? And it worked very well, check Google stock.

Don't be afraid, they have calculated people not paying into the strategy.

And it wont stop working because you wont pay Google extra money. But it will become worse for most of people, including you, if you set yourself into position of slave and pay, confirming their theory that they can exploit you so much more.

Btw, did you check the link? You should really learn from it.
by jordanb | 2025-06-21 20:43:20+00:00
Eh I felt that way about the internet in 2010s. Seemed like virtually any question could be answered by a google query. People were making jokes that a programmer's job mostly consisted of looking things up on stack overflow. But then google started sucking and SO turned into another expertsexchange (which was itself good in the 2000s).

So far from what I've experienced AI coding agents automate away the looking things up on SO part (mostly by violating OSS licenses on Github). But that part is only bad because the existing tools for doing that were intentionally enshitified.
by chubot | 2025-06-21 20:44:07+00:00
Unfortunately that doesn't solve the problem -- it only pushes it around

I recommend writing a protobuf generator for your favorite language. The less it looks like C++, the more hard decisions you'll have to make

If you try your approach, you'll feel the "tax" when interacting with idiomatic code, and then likely make the opposite decision

---

Re: "so gimped" --> this tends to be what protobuf API design discussion are like. Users of certain languages can't imagine the viewpoints of users of other languages

e.g. is unsigned vs. signed the way the world is? Or an implementation detail.

And it's a problem to be MORE expressive than C/C++ -- i.e. from idiomatic Python code, the protobuf data model also causes a problem

Even within C/C++, there is more than one dialect -- C++ 03 versus C++ 11 with smart pointers (and probably more in the future). These styles correspond to the protobuf v1 and protobuf v2 APIs

(I used both protobuf v1 and protobuf v2 for many years, and did a design review for the protobuf v3 Python API)

In other words, protobufs aren't magic; they're another form of parsing, combined with code generation, which solve some technical problems, and not others. They also don't resolve arguments about parsing and serialization!
by foresto | 2025-06-21 20:44:20+00:00
> The company I work for has been around for 15 years and we spent the first 5 or so getting yahoo and live/hotmail/outlook to accept our mail reliably despite proper dns/dkim/spf

This matches my experience from roughly 10 years ago. Even with a non-residential IP address, correct SPF, etc, it took months to navigate the biggest providers' obstacle courses for whitelisting. After succeeding with those, plenty of smaller providers remained to identify and work through one by one. And then, every so often, an already-completed one would revert.

It was not impossible, but even for someone experienced in email system internals, it was a slog that seemed never to be 100% done. I don't expect it's any easier today.
by BobbyTables2 | 2025-06-21 20:44:33+00:00
People usually think that but when it comes to attack surface, change management, upgrade issues, etc —- the extra stuff isn’t entirely free…

Upgrades shouldn’t ever break things, bugs and vulnerabilities never exist, and Rube-Goldberg machines should work 100% reliably day in and day out.

Unfortunately reality doesn’t work that way…
Ask HN: Is Supabase good for handling OAuth on iOS or should I go with Firebase?
by kurrupttt | 2025-06-21 20:45:29+00:00
Hi all, i'm building an ios app on swift and was wondering should i go with supabase or firebase for handling oauth? i only want to offer oauth for the mvp, curious how everyones experience been? ive used supabase for my web apps and love it, but not sure how well is it for ios?

advice is suuuuper appreciated. thanks hn community <3
by flomo | 2025-06-21 20:45:43+00:00
You have a great point, but discussing 'Linux' misses the forest for the trees. American vendors had solutions, European vendors did not. Because you are correct and Europeans don't really value software.

('Linux distros' get into the HN zone where nobody needs dropbox because they could write a shell script. Or install a crappy webmail package on a VPS. Google is entirely Linux and that's not what you are suggesting. It's irrelevant to the larger picture.)
by DaSHacka | 2025-06-21 20:46:23+00:00
More than just that, they also ship your data off to unnamed third-parties, who have no restrictions on how they use your information, or how long they keep it.

https://withpersona.com/legal/idv-privacy-policy

I've wondered how companies like Palantir amass the datasets for their mass-facial recognition offerings, guess this is how.