MurphyA/hacker-news huggingface dataset:
Show HN: Vento – A lightweight CLI for file transfers with YAML-based automation
by kyotalab | 2025-06-26 05:46:15+00:00
Hi HN,

I've been working on a small but powerful CLI tool called *Vento*, inspired by tools like HULFT, but designed to be open-source, cross-platform, and developer-friendly.

Vento is a lightweight Rust-based CLI that automates file transfers (SFTP/SCP for now), using simple *YAML profiles*. It supports:

* Upload/download with SFTP or SCP (public key, ssh config, env auth) * Pre/post/error hooks with custom shell commands * Logging to file or stdout * File size limits for safety * Easily cron-able with external schedulers

Example YAML:

```yaml - profileId: "daily-report" source: type: "local" path: "./report.csv" destination: type: "sftp" host: "example.com" authentication: method: "env_key" username: "user" envKeyRef: "SFTP_KEY_PATH" transferProtocol: protocol: "SFTP" postTransferCommand: "echo 'done!'" ```

It’s designed for devs and ops who want something dead simple to automate file delivery without complex infrastructure.

GitHub: [https://github.com/kyotalab/vento](https://github.com/kyotalab/vento) v0.2.0 released now, with SCP and validation features.

Happy to hear feedback, questions, or ideas! Thanks!
by codedokode | 2025-06-26 05:46:36+00:00
Dereferencing a null pointer is an error. It is a valid bug.

The maintainer claims this is caused by allocator failure (malloc returning null), but it is still a valid bug. If you don't want to deal with malloc failures, just crash when malloc() returns null, instead of not checking malloc() result at all.

The maintainer could just write a wrapper around malloc that crashes on failure and replace all calls with the wrapper. It seems like an easy fix. Because almost no software can run where there is no heap memory so it makes no sense for the program to continue.

Another solution is to propagate every error back to the caller, but it is difficult and there is high probability that the caller won't bother checking the result because of laziness.

A quote from a bug report [1]:

> If xmlSchemaNewValue returns NULL (e.g., due to a failure of malloc), xmlSchemaDupVal checks for this and returns NULL.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/905
by fencepost | 2025-06-26 05:47:58+00:00
Keeping in sync isn't as much of a problem as you might think, it simply requires that everything able to feed into the grid has to accept the grid as authoritative for syncing.

Relevant are some of Chris Boden's videos about bringing up a hydro power plant and his comment that you have to be in sync with the grid when you actually connect because the turbine WILL sync to the grid at connection and if it was incorrect before then there will be a lot of loud angry noises from the equipment. https://www.youtube.com/watch?v=xGQxSJmadm0
by sly010 | 2025-06-26 05:48:09+00:00
Nah. You misunderstood. "They" don't make money on human time wasted. They make money on ads served. They don't particularly care if the ads were served to humans or agents, they get paid either way. Bot-traffic is actually good for tech companies because it inflates numbers. Capthas are not there to waste our time, but are there to improve their credibility ("We are certain those ad-clicks were real humans because the captha said so").
by AlbertoGP | 2025-06-26 05:49:02+00:00
>I get now what the Voynich Manuscript says, in a way that might not satisfy all the code-crackers and linguists out there. Its enigmatic script doesn't say anything, and yet it says everything. Your communication needs to include connection: otherwise, with any luck, people may only someday debate not what you said, but whether you said anything at all (6).
by rixed | 2025-06-26 05:49:35+00:00
She seems to have missed the real reason why Feynman became so "popular": his series of textbooks. Maybe his name is not associated with such historical discoveries as those of Newton, Boltzmann or Einstein are, but writing one of the best textbook series is also a good reason to be famous, at least for as long as the content will remain relevant. Feynman, to me, is the American Landau: A mathematical and scientific genius whose immensely valuable legacy consists of teaching and textbooks rather than any novel breakthrough in theory.

Apart if you want more clicks on YouTube, I don't think it's fair to call him a sham, unless you believe every popularity is a sham, but I don't think it's the case being made here.
Ask HN: New Grad Seeking Tech Role – Data, ML, SDE or AI (Portfolio Inside)
by ChengyangShen | 2025-06-26 05:49:41+00:00
Hi HN,

I'm a recent graduate with a Master's degree in Data Analytics Engineering and a Bachelor's in Computer Science. I have hands-on experience in data engineering, data analysis, data science, machine learning, and cloud computing.

I'm currently looking for entry-level opportunities or internships in tech — particularly in data or ML-focused roles (remote or US-based).

You can find more about my work here:

Portfolio: https://yannacs.github.io/

GitHub: https://github.com/YannaCS

Resume: https://yannacs.github.io/assets/resume_Jun_09_2025.pdf.

Thanks for reading — I'm open to feedback and connections!
by jasonm23 | 2025-06-26 05:50:53+00:00
This seems timely, `uv` is a complete revelation for me and has made working with Python extremely convenient ... the Python "just works" time has arrived.

I'm building yt-dlp / uvx based WebUI

- https://github.com/ocodo/uvxytdlp

Still work in progress but shaping up nicely.
by defrost | 2025-06-26 05:52:56+00:00
You might want to brush up on your history.

Aside from the peer comment pointing out the bleedingly obvious, there's also a bit of history here:

In 1907 Justice Henry Bourne Higgins, President of the Commonwealth Conciliation and Arbitration Court, set the first federally arbitrated wages standard in Australia. Using the Sunshine Harvester Factory as a test case, Justice Higgins took the pioneering approach of hearing evidence from not only male workers but also their wives to determine what was a fair and reasonable wage for a working man to support a family of five. Higgins’s ruling became the basis for setting Australia’s minimum wage standard for the next 70 years.

that you're clearly unaware of.

* https://www.nma.gov.au/defining-moments/resources/harvester-...

* https://www.fwc.gov.au/about-us/history/waltzing-matilda-and...

* https://en.wikipedia.org/wiki/Harvester_case
by forgotoldacc | 2025-06-26 05:53:23+00:00
Every country on earth is trending downwards. A lot of currently immigrant-exporting countries (e.g. Vietnam, India, Mexico) have sub-replacement levels of birth. They're going to have absolutely massive problems in a few decades when a lot of their youth have left and they're stuck with an inverted population pyramid.

There's a tendency for people in developed (particularly western) countries to feel entitled to immigrants. It's weird to think you'll not only have people changing your diapers when you're 90, but that your country should actively bring in people and deprive poorer countries of similar care, then leave those poor working class immigrants to fend for themselves once they're old.

It's the same mindset that drove society since the 1950s: it makes my life convenient, who cares if it makes life harder for people far from me or after I'm dead? And now we're all living with the accumulated consequences of all that (depleted ozone, climate change, ocean acidification, microplastics, oceans stripped of life, teflon pollution, deforestation, CO2 rising rapidly).

The world needs better solutions.
by palmotea | 2025-06-26 05:54:07+00:00
> This is not going to happen when you can just import people from other countries.

That's basically the same solution as dumping toxic waste overseas: you're just shifting the problem (depopulation) to someplace poorer and probably less able to deal with it.

Birthrates are declining everywhere, and the current global fertility rate is at replacement (so don't expect it to stay that high). In the future, there's going to be no magical place from which you can "import" all the people you need, because you chose not to make them yourself.
by joshka | 2025-06-26 05:54:49+00:00
Literally no deps except for a few dev-deps that make testing easier. That's a reasonable thing for something that you ship as a fundamental tool to be used by administrators as part of an OS like windows. Take a look for lhecker's [1] responses for more info on the not invented here stuff.

[1]: https://news.ycombinator.com/threads?id=lhecker
by ninjin | 2025-06-26 05:54:57+00:00
It is reasonable to assume that this is true. But an equally effective way other than making your license unpalatable to them, is just to say no and state clearly: "Patches or GTFO". Also, have a homepage to link with your (hefty?) consulting rates?

I have mentioned this in the past, but there was this weird shift in culture just after 2000 where increasingly open source projects were made to please their users, whether they were corporate or not, and "your project is your CV" became how their maintainers would view their projects. It does not have to be this way and we should (like it seems to be the case with libxml2) maybe try to fix this culture?
by zrobotics | 2025-06-26 05:56:51+00:00
What's the advantage for a consumer here though? I honestly don't get the selling point of why I would want Win11 specifically on a handheld. The desktop UI sucks with a touchscreen, so having a windows vs a Linux desktop on the hardware doesn't seem like a difference. I get why MS wants to try to compete here, but I just don't get what they could possibly offer. I don't believe Win11 can be stripped down enough to compete on performance, currently I can't get a machine with 4GB of RAM and a SATA SSD to perform adequately with a web browser in Win11. The OS just consumes huge amounts of resources on stupid background tasks that can't be disabled without registry tweaks and the undefined behavior that comes with that.
by Tepix | 2025-06-26 05:56:53+00:00
I think certificates for IP addresses can be useful.

However, if Let‘s encrypt were to support S/MIME certificates, it would have a far greater impact. Since a few years, we have an almost comical situation with email encryption: Finally, most important mail user agents (aka mail clients) support S/MIME encryption out of the box. But you need a certificate from a CA to have a smooth user experience, just like with the web. However, all CAs that offer free trustworthy¹ S/MIME certificates with a duration of a year or more² have disappeared. The result: No private entities are using email encryption.

(PGP remains unused outside of geek circles because it is too awkward to use.)

Let‘s encrypt our emails!

¹ A certificate isn‘t trustworthy if the CA generates the secret key for you.

² With S/MIME you need to keep your old certificates around to decrypt old mails, so having a new one frequently is not practical
by amake | 2025-06-26 05:57:06+00:00
> It's not obvious because people producing high quality stuff have no incentive at all to mark their changes as AI-generated

I feel like we'd be hearing from business that crushed their competition by delivering faster or with fewer people. Where are those businesses?

> But there are also local tools generated

This is really not the same thing as the original claim ("Software projects that somehow are 100% human developed will not be competitive with AI assisted or written projects").
by Teever | 2025-06-26 05:57:28+00:00
What's worth mining in space? Everything that we can mine in space. That seems glib but I'll elaborate.

By moving mining off planet to the moon and asteroids we eliminate the carbon emissions and environmental damage that occurs from these processes.

So how do we do it? We don't need to start sending fleets and fleets of crafts into space which is energetically expensive and time consuming, what we need to do is develop self-replicating mining equipment that we can send to turn the things we want to mine into more things that can mine for us. We won't achieve full self-replication immediately but we can definitely send machines that can do partial self-replication at first and work on improving the ratio of material sent to material returned.

What do we send back? titanium, platinum, aluminum, nickel, iron, whatever we find there. If platinum was as cheap and plentiful as aluminum was now we would have all sorts of catalytic uses for it that would significantly clean up our Earth based industrial practices.

How do we send it back? If we're sending it back from the moon that's easy -- a space elevator or rail gun. If we're sending it back from asteroids inefficient but cheap iron ion thrusters. Use iron from the asteroids as fuel.

Bonus points: Send it back covered in ablative material like mined olivine that can react with CO2 in the atmosphere to sequester it, that way the whole process isn't just moving environmentally damaging industrial practices to other solar bodies but we're undoing some of the damage from past human activities.
by eggy | 2025-06-26 05:57:46+00:00
Great article!

The excitement kind of ebbed early on with seeing the video and realizing it had a plate/weight on one face.

"A few years later, the duo answered their own question, showing that this uniform monostable tetrahedron wasn’t possible. But what if you were allowed to distribute its weight unevenly?"

But the article progressed and mentioned John Conway, I was back!
by caleblloyd | 2025-06-26 05:58:22+00:00
Signed by mostly people at RedHat, which is owned by IBM, which makes Watson, which beat humans in Jeopardy in 2011.

> These are early days of AI-assisted software development.

Are they? Or is this just IBM destroying another acquisition slowly.

Meanwhile the Dotnet Runtime is fully embracing AI. Which people on the outside may laugh at but you have extremely talented engineers like Stephen Toub and David Fowler advocating for it.

So enterprises: next time you have an IBM rep trying to sell you AI services, do yourself a favor and go to any other number of companies out there who are actually serious about helping you build for the future.

And since I am a North Carolina native, here’s to hoping IBM and RedHat get their stuff together.
by XorNot | 2025-06-26 05:59:23+00:00
If you keep no records, require no process, then how do you even identify if corruption is taking place?

The entire reason with we have say, double-entry book-keeping, is because it makes it substantially more difficult to engage in corrupt activities without producing a record which can be used to hold people to account for their actions.

People declare "I think it's corruption" on the internet all the time with absolutely no evidence, which itself is indistinguishable to corruption in the first place (since the favorite tool of dictators and autocrats is to "discover" corruption in their political opponents when it is convenient to do so).
by aaravchen | 2025-06-26 05:59:29+00:00
Good breakdown, and excellent clarification.

That said, I see some of those "legitimate business purposes" as things the CCPA was explicitly intending to redefine as illegitimate. In particular, while it says it would still limit third-party data collection for marketing, it would no longer limit when the company itself (e.g. Facebook) does that data collection for itself. Additionally the "analytics services" is standard speak for "all data that can be hoovered up for cross-site tracking", and is specifically exempted as well.

On the face there is certainly clarification that' needed, and some of the exemptions are needed (E.g. security features), but the current bill clearly includes extras that effectively completely revoke everything the CCPA tries to do.
by Terr_ | 2025-06-26 05:59:37+00:00
> The U.S. can now employ quantum sensing to see stealthy opponents

This links to a defense-contractor marketing page, and it's triggering my fluff/oversold/BS sensors.

I was originally expecting to see something about detecting the stealth aircraft because the now-noisier sky behind them is being occluded. [0]

[0] https://avweb.com/aviation-news/analyzing-interference-in-sa...
by rklaehn | 2025-06-26 05:59:45+00:00
The two sides are peers when it comes to connection establishment, but once you have a connection they can and frequently will have different roles.

Many existing iroh protocols have clear client and server roles once the connection is established. E.g. gossip is a peer to peer protocol, blobs is a client server protocol in that one side provides data and the other requests it.

For a client you can use an ephemeral node id and not publish your info to discovery, since you will never be dialed yourself.
Show HN: Frametwo – Tired of my videos getting flagged, so I built this
by andrewjustus | 2025-06-26 06:00:40+00:00
Over the past year I uploaded a bunch of videos to my personal channel. Most of them were short documentaries, news-style edits, or content covering current events and war. A lot of it ended up getting demonetized, age-restricted, or removed completely, usually without any clear reason or explanation.

The worst part was not knowing what caused it. You upload something, it seems fine for a while, and then it disappears or gets buried. I spent days editing videos that ended up dead in the water because of things I couldn’t see coming.

I started building a tool to help with this. Just something to check the content before uploading, to see if it might get flagged. That eventually became frametwo.

frametwo scans your video and flags the kinds of things that might trigger platform filters. It looks at visuals, language, and metadata. It doesn't rewrite your content or suggest edits. It just gives you a clear report, so you can decide what to do before your content gets punished.

I built the analysis system myself while balancing school and work. It’s called Nextros, and it’s focused specifically on moderation risks, not general-purpose AI. I didn’t want a black box. I wanted something that helps creators understand what might go wrong, without guessing or overcorrecting.

The site is at https://frametwo.com

I’d appreciate any feedback. Especially from people who have run into the same issues, or have thoughts on how this could be more useful to creators.
by bevr1337 | 2025-06-26 06:01:56+00:00
> The birthrate right now is below replacement rate, meaning that if we keep going like this (even if the birthrate doesn't keep trending down and holds steady) that society will die off.

Why? Why are we sure that the population will not settle? Or that our increased productivity won't offset a change in labor?

I do worry societies will fail to handle side effects like the temporary increased demand for elder care, but no real fear of total societal collapse.
by viraptor | 2025-06-26 06:02:18+00:00
The score assigned to issues has to be the worst case one, because whoever is assessing it will not know how people use the library. The downstream users can then evaluate the issue and say it does/doesn't/kinda affects them with certainty and lower their internal impact. People outside that system would be only guessing. And you really don't want to guess "nobody would use it this way, it's fine" if it turns out some huge private deployment does.
by tstrimple | 2025-06-26 06:02:39+00:00
> it's because the existing process to get medical treatment is paternalistic, hard to navigate and often expensive

I ended up paying over $1k out of pocket for two inconclusive sleep studies trying to get my sleep issue sorted out. I'm fortunate to work in technology where I can pay that sort of thing, but I still got zero results from my local medical community. I can't blame anyone for seeking self-treatment options. It can be pretty bad even with "good" insurance and the ability to cover co-insurance.
by recursivecaveat | 2025-06-26 06:03:53+00:00
It is totally feasible and not uncommon for a family doctor to have 2000+ patients. Young healthy people can go years without interacting with the medical system, and when they do it's often some thing that barely involves their doc. I mean their doc doesn't know them personally then, but they have no problems worth surfacing clearly so why do they need to? The limiting factor really is the quantity of seniors and people with complex chronic conditions that you take on.
by like_any_other | 2025-06-26 06:05:56+00:00
Unpaywalled: https://archive.is/dxBo0

Apparently, there was a government report, that "warned that “instances of China’s espionage, interference in our democracy and the undermining of our economic security have increased in recent years”"

However, most of the report is classified, so we can only speculate what those acts of interference and undermining were.
by throwaw-zxcvbn | 2025-06-26 06:05:58+00:00
While doing my PhD at a top-tier college, I went to their health center for psychological counseling and said "I can't study and concentrate well, I don't sleep enough, I don't do enough exercise, I eat crap, and I drink too much." The expert told me that I needed to study and concentrate better, sleep well, exercise more, eat healthily, and drink less.

It was enormously helpful /s
by solatic | 2025-06-26 06:07:47+00:00
Or, you continue to grow the population through immigration.

The US is unique (or maybe there are a handful of others, I don't know) in its ability to welcome immigrants who, within two generations, largely see themselves as Americans first and not as the identity of their grandparents. American identity politics has eroded this somewhat but it is still largely true, for example, that grandchildren of immigrants will usually have a very poor grasp of their grandparents' native languages.
by ergocoder | 2025-06-26 06:07:56+00:00
IMO the names pronounce identically. They are in the same space.

When people tell each other about this "io" or "iyo" device, they will 100% be confused. Or most of them will only think of OpenAI's io.

The iyo guy is cringey for begging Sam that much, but he isn't in the wrong here. And the guy is right. OpenAI can chose one of billion other names that don't overlap with other products in the same space.
by imiric | 2025-06-26 06:08:40+00:00
That might be the way to go. Someone else in the thread mentioned a similar reputation system.

The problem is that such a system could be easily abused or misused. A bad actor could intentionally or mistakenly penalize users, which would have global consequences for those users. So we need a web of trust for the judges as well, and some way of disputing and correcting the mistake.

It would be interesting to prototype it, though, and see how it could work at scale.
by dwattttt | 2025-06-26 06:10:37+00:00
It's your IOMMU, you can do what you want with it. Maybe you need to write heaps of stuff to take advantage of it, but what's new there?

The only thing you're getting by saying "no IOMMU" is "I want any devices in my machine to be able to do anything, not just what I want them restricted to".
by motorest | 2025-06-26 06:12:16+00:00
> We may have swung the pendulum a little too far towards deliberate, though. The birthrate right now is below replacement rate, meaning that if we keep going like this (even if the birthrate doesn't keep trending down and holds steady) that society will die off.

The US alone doubled it's population since the 1950s. Enough scaremongering.
by matwood | 2025-06-26 06:13:04+00:00
I feel you. I’m selling my house and I joke that I’ll give someone a better deal if they just take everything in it as part of the sale. A suitcase for my clothes, my computer, and some physical mementos is all I need to keep. Even the clothes are optional, but I don’t feel like buying a new wardrobe.

My coffee grinder may have been on my list, but I moved countries and the power is incompatible hah.