MurphyA/hacker-news huggingface dataset:
by motorest | 2025-06-26 08:30:31+00:00
The most concerning part about the belief that bootstrappy self-taught hackers are able to tackle any type of problem just as well as experienced engineers with a solid academic background is how the ignore the fact that hacking together an implementation is a very small part of the problem, and actually knowing the problem domain is of critical importance.

This is why we end up with businesses running services where a receptionist has access to customer passwords. Those who designed the system weren't even in a position to understand why that was a critical flaw in the design, let alone a problem that needed fixing.
by echelon | 2025-06-26 08:30:55+00:00
> it's not just that everyone you know will be dead when you arrive. Your entire nation will have disappeared to the sands of time.

Humans are just a stepping stone. Earth intelligence will transcend our 77 year lifespans and primate brains.

Our lungs are adapted to gas exchange on this particular gravity well and its unique biogeochemistry. There's no reason redox reactions need to happen like this, or indeed even be the primary propulsion mechanism.

This is our frail biases speaking. We are limited by our biology, but we won't be forever.
by A_D_E_P_T | 2025-06-26 08:31:08+00:00
Uh, yeah, so keeping in mind that "haubert doublier" was supposed to be more protective than the baseline stuff, it's either chainmail (1) with heavier and larger rings, (2) with two rivets per link, (3) with two layers, e.g. one hauberk worn on top of another, possibly with a linen interlayer (4) with smaller and many thousands more rings, (5) with double the links in each pattern unit – effectively, two rings where normally there would be one.

There's some scholarly support for each interpretation. The Romans were known to wear a double layer of mail, as their shoulder yoke overlapped their torso armor, though this predates the French and English by ~1000 years. There's also a good example of #2 here, though it's quite recent and not European: https://www.metmuseum.org/art/collection/search/35633

The most popular interpretation, among scholars, is #5. But there's no conclusive evidence. IIRC there was an effigy of a knight at the cathedral in York wearing double mail, but it was removed (and now thought lost) in the early 19th century.

This is the sort of ubiquitous historical question that can be solved by an amateur.
by teroshan | 2025-06-26 08:31:44+00:00
And to be able to preserve released Video Games, please go support the Stop Killing Games [1] movement and sign the European Citizen's initiative [2] if you're an EU citizen. There is 1 month left to bring the subject to a discussion, and 500k signatures are missing.

[1] https://www.stopkillinggames.com/

[2] https://eci.ec.europa.eu/045/public/#/screen/home
by easyThrowaway | 2025-06-26 08:32:18+00:00
Can't say that Windows 11 compatibility on this regard is any way better. Anything pre Dx-9 is somewhat broken one way or another.

I've recently found about Dreamm[1] by AAron Giles (a well known emulator developer) which is basically a very lightweight os-indipendent reimplementation of some windows and directx calls specifically for some Lucasarts games written during that time period, It would be nice to see a similar project expanding in such direction without having to reinvent Wine and/or Proton.

https://dreamm.aarongiles.com
by I_am_tiberius | 2025-06-26 08:32:31+00:00
I wish google would treat its products as completely separate offerings, each with its own login, dedicated site, and user management. I don’t want to be automatically logged into all Google services just because I signed in to one. Their ecosystem is becoming as complex and confusing as Microsoft’s. They should focus on making each product standalone, instead of forcing synergies that only make the user experience worse.
Ask HN: Do you experiment Cursor rate limit in PRO ?
by oliviergg | 2025-06-26 08:32:38+00:00
Although I've been subscribed to the PRO service at $20/month without any issues till this Monday, this subscription has now come with rate limits that render it useless to me. According to their customer service there's no problem; I just have to wait for it to recharge and try again in a few hours. Of course, they now offer a PRO+ service at $60 per month, which has limits that are three times further.

It brings to my mind the black mirror's episode "Common People" https://en.wikipedia.org/wiki/Common_People_(Black_Mirror) .

Are all dystopias destined to become reality? Really ?
by danielbln | 2025-06-26 08:33:24+00:00
What does "AI" mean? GPT3.5 on a website, or Claude 4 Opus plugged into function calling and a harness of LSP, type checker and tool use? These are not the same, neither in terms of output quality nor in capability space. We need to be more specific about the tools we use when we discuss them. "IDEs are slow to load" wouldn't be a useful statement either.
by whatevertrevor | 2025-06-26 08:35:14+00:00
I have learned over time that the actually smart people worth listening to, avoid jargon beyond what is strictly necessary, talk in simple terms with specific goals/improvements/changes in mind.

If I'm having to reread something over and over to understand what they're even trying to accomplish, odds are it's either AI generated or an attempt at sounding smart instead of being constructive.
by holowoodman | 2025-06-26 08:35:42+00:00
Security bugs always have a context-dependent severity. An availability problem in a medical device is far more severe than a confidentiality problem. In a cloud service, the same problems might switch their severity, downtime isn't deadly and just might affect some SLAs, but disclosing sensitive data will yield significant punishment and reputation damage.

That is why I think that "severity" and the usual kinds of vulnerability scores are BS. Anyone composing a product or operating a system has to do their own assessment, taking into account all circumstances.

In the context of the original article this means that it is hopeless anyways, and the maintainer's point of view is valid: in some context everything is "EXTREMELY HIGH SEVERITY, PANIC NOW!". So he might as well not care and treat everything equally. Absolutely rational decision that I do agree with.
by qingcharles | 2025-06-26 08:36:51+00:00
It's essentially that once you leave prison you have zero resources, usually all your friends are gone, often your family shuns you, you can't get a job due to your record and lack of skills, you can't rent any accommodation due to background checks, and you are on a knife-edge parole that will send you back for any tiny infraction.

And it's easy for someone to just give in and go back to prison. Prison is only scary the first time. After that you walk back in and meet people you know who don't judge you. You know the staff. You know the routines. Do a few more years for the parole violation and see if things have changed next time around. If not, repeat ad infinitum.
by miningape | 2025-06-26 08:36:58+00:00
Eskom is already trying to take people to court over "non-compliant" solar panel installations [1]. I wouldn't hold my breath. Like most things in ANC South Africa this is a political issue where Eskom wants to get their cut for providing a non-existent service - and then funnel that money back to their friends and family for their non-existent services.

[1] https://www.ecr.co.za/shows/stacey-jsbu/eskom-cracks-down-no...
by 1dom | 2025-06-26 08:38:13+00:00
I don't think that applies for microgrids, or at least, it's not really an issue in my case.

I know what you're talking about though: I think that more applies to generators that are operating with megawatts and take time for turbines to spin up and stuff. Microgrids are normally instantaneous battery buffered type things. They can instantly deliver power at the frequency range mandated for the national grid.
by mrcsharp | 2025-06-26 08:38:44+00:00
> The deployment story is non-existent

Wrong! it is as simple as executing `dotnet publish`, zipping up the output folder and sending that package somewhere using whichever protocol and shell utility you like.

> monitoring, tracing, alarming is barely there

Also wrong. OpenTelemetry is fully supported by first-class packages and the dotnet runtime itself exposes a lot of counters. There are a lot of tools to monitor and collect traces of running dotnet processes [1]

> You have to work with MS libraries that are on life-support with glaring bugs still present

You don't have to. Every Microsoft.* library follows strict semantic versioning and is clearly labeled when it is deprecated. If you don't have a plan in place on how to manage your dependencies then this is on you.

[1] https://learn.microsoft.com/en-us/dotnet/core/diagnostics/to...
by KingOfCoders | 2025-06-26 08:39:22+00:00
When a project is up, open source developers are keen to promote it, put it on their CV, give conference talks. There is no obligation for companies to sponsor anything, this is not the reason behind open source.

Yes open source has changed, from when the early 90s. There are more users, companies use projects and make millions with other peoples work.

I feel with the maintainer, with how ungrateful people are. And demanding without giving.

Open Source licenses fall short.

Open Source projects should clearly state what they think about fixing security, taking on external contributions or if they consider the project feature complete. Just like standard licenses, we should have a standard, parseable maintenance "contract".

"I fix whatever you pay for, I fix nothing, I fix how I see fit. Including disclosure, etc."

So everyone is clear about what to expect.
by teroshan | 2025-06-26 08:39:31+00:00
"Stop Killing Games" is a consumer movement started to challenge the legality of publishers destroying video games they have sold to customers. An increasing number of video games are sold effectively as goods - with no stated expiration date - but designed to be completely unplayable as soon as support from the publisher ends. This practice is a form of planned obsolescence and is not only detrimental to customers, but makes preservation effectively impossible. Furthermore, the legality of this practice is largely untested in many countries.

Over the past year, we have successfully escalated complaints on this problem to consumer agencies in France, Germany, and Australia, and have brought forth petitions for new law on this problem to various countries. A list of the actions taken to date can be viewed here. As of 2025, most consumer action on this matter has concluded and we are awaiting decisions on it from several governments. However, there are a few remaining avenues left where people can participate if they are eligible.

[European Citizens' Initiative] is the most powerful option at our disposal, but it requires a massive number of signatures from citizens of EU countries in order to pass. If we can pass the signature threshold, there is a very strong chance that the European Commission will pass new law that will both protect consumer rights to retain video games that they have purchased and advance preservation efforts massively.

Source: https://www.stopkillinggames.com/
by qingcharles | 2025-06-26 08:39:33+00:00
Absolutely not at all. I have a lot of experience with the justice system and I can tell you that incarceration has almost no positive benefits for those that are redeemable.

And for those who cannot function in the real world (i.e. serious untreatable mental problems resulting in constant criminality) we need to find a softer way to keep them separated from being able to harm the public.
by camel-cdr | 2025-06-26 08:40:50+00:00
https://riscv-software-src.github.io/riscv-unified-db/isa_ex...

You can get the Base instructions for each profile by placing a "m" in the profile filter.

The unified-db is WIP and doesn't contain full descriptions of every instruction yet (especially vector), but afaik RVI wants to migrate to the project.
by immibis | 2025-06-26 08:41:18+00:00
Contracts with vendors, usually. Vendors who make not much of their profit from Fairphone and would happily cut them off if they wanted terms like that.

There's a reason Pine64's devices (which are made out of parts with available public datasheets as much as possible - they don't do the software side of things) are mostly made with parts from a few generations ago, whose manufacturer doesn't care much any more.
by scootz1 | 2025-06-26 08:44:43+00:00
How much of this was AI generated? From the website favicon to the background, the animation on your mouse, the color scheming, the structure of the page, the writing content, the podcast voice, I dont believe any of this was written, recorded or even posted and made by an actual person that knows anything about what theyre talking about. Are the comments here even actually real? Am I going insane?
by somenameforme | 2025-06-26 08:45:38+00:00
Kind of a tangent, but a lot of brick and mortar business is far less profitable than most think. A McDonalds franchise owner is looking at ~$150k/year profit on average. And with lots of other fun stuff like the fact you don't even own the property, it's rented from McDonalds. And that's going to likely trend downward as McDonalds continues to put the squeeze on franchisees and labor costs continue to rise.

And far from passive income, there's a joke that buying a franchise is basically buying a job and not just any job - but a stressful, thankless job with terrible working hours. And the price tag for this new life of luxury starts at around a million dollars.
by qingcharles | 2025-06-26 08:45:55+00:00
Depends on the area. The area I lived in last year, it was rare to enter a Walgreens that wasn't actively being pillaged by shoplifters. I remember when they announced they were closing the only local Wal-mart (due to excessive shoplifting, allegedly) -- that same day the shoplifters went in like a swarm of locusts and stripped it bare. They had police at both exits, but they were powerless.
by account42 | 2025-06-26 08:47:20+00:00
We really shouldn't be making new standards with big endian byte order.

It's also questionable how much you actually benefit from common container formats like this since you need to know the application specific format contained anyway in order to do anything useful with it. It also causes problems where "smart" programs treat files in ways that make no sense, e.g. by offering to extract a .docx file just because it looks like a .zip
by holowoodman | 2025-06-26 08:47:27+00:00
> So when I say CIA nowadays, I'm actually thinking both mathematically irrespective of downstream application, and from the choose-your-own-compliance view.

That doesn't help anyone, because it is far too primitive.

A medical device might have a deadly availability vulnerability. That in itself doesn't tell you anything about the actual severity of the vulnerability, because the exploit path might need "the same physical access as pulling the power plug". So not actually a problem.

Or the fix might need a long downtime which harms a number of patients. So maybe a problem, but the cure would be worse than the disease.

Or the vulnerability involves sending "I, Eve Il. Attacker, identified by badge number 666, do want to kill this patient" to the device. So maybe not a problem because an attacker will be caught and punished for murder, because the intent was clear.
by danielbln | 2025-06-26 08:47:37+00:00
Who is forcing you to watch slop? And mind you, there was a TON of garbage at any local Blockbuster back in the day, with the added joy of having to go somewhere to rent it, being slapped with late and rewind fees or not even have availability of what you want to watch.

Choice is good. It means more slop, but also more gold. Figure out how to find the gold.
by xuf | 2025-06-26 08:48:33+00:00
That works for me, however, it automatically switches me to gemini-2.5-flash:

Slow response times detected. Automatically switching from gemini-2.5-pro to gemini-2.5-flash for faster responses for the remainder of this session.

To avoid this you can utilize a Gemini API Key. See: https://goo.gle/gemini-cli-docs-auth#gemini-api-key

You can switch authentication methods by typing /auth
by lukaslalinsky | 2025-06-26 08:49:58+00:00
As a maintainer of several open source projects over my life, I really hated these so called security researchers and their CVEs. I routinely fixed more impacting bugs due to user reports, but when one of these companies found a big, they made a whole theater around it, while the impact being pretty small. Pretty much any bug, except maybe a typo in the UI, is a security bug. It gets tiring very soon. And with the CVEs comes a lot of publicity and a lot of demands.
by jeroenhd | 2025-06-26 08:50:02+00:00
FWIW Microsoft's branding team fumbling everything into Windows Hello isn't the project's fault. The "Windows Hello" part that they're trying to find an alternative for was the only "Windows Hello" for a while before Microsoft also decided that all of their TPM operations were now Windows Hello things.

That said, without the depth reconstruction, I do agree that this is nowhere close to Windows Hello's features. That's not the devs' fault (that kind of mostly-secure facial recognition is very hard) but I also don't think the comparison is apt. But who knows, if this project gains popularity, maybe in the future that kind of thing becomes possible.

This is more akin to Android's facial recognition, except for using the IR camera. Which is still acceptable for plenty of people. After all, many fingerprint readers on Linux share similar risks and are often regarded as secure enough. I think the availability of this project, even if it's nowhere near Windows Hello's standards, is a great addition to many Linux desktops, as long as their users understand the limitations.

As for the plaintext, Linux doesn't really have a secure storage mechanism (even the standard secrets API is easy to fool) so obfuscating the facial features doesn't really serve a purpose. As long as your disk is encrypted, I don't think that's a risk (and if it isn't, whoever is looking at your laptop can just browse through your photo albums anyway).
by mrweasel | 2025-06-26 08:50:04+00:00
Yes and no, the government is trying to steer young people in the direction of engineering, nursing, doctors, teachers and trades (carpenter, bricklayer and so on), but it's not clear where the people are suppose to come from. Essentially Denmark is missing people in also every profession. There aren't enough people. My wife works in a field where unemployment is 12, not percent, but 12 people. So if you're unemployed, qualified to work in the EU and have a recognized education, applying for jobs in Denmark isn't a bad bet.

Various governments have also attempted to boost birth rates, but unsuccessfully.
by close04 | 2025-06-26 08:50:19+00:00
> it's very hard to imagine interstellar travel being feasible with our current understanding.

Even with massive advancements in tech, and getting close to the speed of light, interstellar travel will be a lot of "one way heading into the unknown forever" kind of initiative. Interstellar empires only work with truly sci-fi tech that mostly ignores distances, like in sci-fi (instant subspace comms or warp travel with no relativistic effects)

This will never be the same kind of age of exploration as when we crossed the oceans and explored our planet. The scales are so mind blowing that even the fastest speed known to mankind is too slow. The times and distances involved to move and even just send signals (both ways!) and relativistic effects means at best we can "seed" a distant planet and hope that turns into a new (human?) civilization, forever separated from us for all practical purposes.
by qingcharles | 2025-06-26 08:50:51+00:00
The end of cash bail was the right idea, though. At the time it ended there were ~100 homicide defendants out on bail (usually $150K+), yet there were hundreds of people held for months or years on petty offenses for want of under $250 to bail out.

Wouldn't wish my worst enemy to be held in the CCJ, though. Easily one of the worst detention facilities in the USA.
by benchly | 2025-06-26 08:51:00+00:00
Maybe it's just part of the reflexes I've developed in recent years as an American, but there is never going to be a day where I hand my phone off to anyone for any reason. Not because I am addicted to it, but because there is simply too much PII and sensitive content to protect on it.

Why not just trust people to keep their phone in their pocket when out at a social gathering that was formed for the expressed purpose of disconnecting? Wouldn't that also help the person break the habit of checking their phone frequently while also knowing it is still there?

A few years ago, I realized my screentime was getting out of control. Being a person who has a history of substance abuse (and recovery), I recognize addiction when I see it. So, I took some measure to minimize my use.

1. Remove all non-essential apps. Games, news apps, social media...basically anything that was not helping me get something done. I ended up left with email (work) any my banking or payment apps, while all the "fun" apps got installed on my tablet that stays at home.

2. Use a minimalist app launcher overlay. It's actually crazy how the removal of graphical icons helps, turning everything in lists of words, making you have to think about why you just unlocked your phone and find the specific app instead of something like "oh, there's Discord, I might as well check that while I have my phone open. These launchers also tend to have built-in blockers for notifications.

It seems like these were two simple things, but they were not. Especially at first. For about the first month, I found myself pulling my phone out for no reason, since the trigger that was making me do it (boredom, anxiety, FOMO) was still there, but I learned to cope with them and eventually they faded.

I would not have accomplished that by handing my phone off to other people, which actually makes me more paranoid about what's going given modern privacy concerns. In the US, we even campaign against handing your phone over to law enforcement since the implicit trust has been broken one too many times. Do Europeans share this anxiety?
by debesyla | 2025-06-26 08:52:25+00:00
Unless it was unexpectedly good. Sometimes I rush to write a 5 star review if a random restaurant in middle of nowhere exceeds my expectations - so more people would know of the place.

In my scale 3/5 is good (got what expected), 4/5 is very good (nice bargain), 5/5 is uniquely amazing. But I do understand that for some anything below 5/5 is bad.
by kookamamie | 2025-06-26 08:52:25+00:00
Yes, my thinking here isn't about the semantics of code, whether it is written in dense or terse form, but about the more meta level - code itself is something we write to achieve some goal, it shouldn't be the goal by itself. As an example, as a company is audited for their valuation, it is not the code amount itself that is valuable. In many ways it can be seen as a burden, as you'll need to maintain code over time.
by cryptoz | 2025-06-26 08:53:27+00:00
Fantastic feedback, my gosh, thank you. Yes the home content doesn’t do a good job of explaining what it is. Honestly that’s because a lot of the ideas I typed here are pretty fresh, and my ‘marketplace’ is only implemented on prod as a prototype. I do see the the mismatch in copy and the real utility.

I’ll work on positioning and update the copy to keep in sync with my vision …

And yeah, my target audience is developers, specifically those with not a lot of time but with a lot of ideas.

Gosh thanks again, that’s super excellent feedback.
by fnands | 2025-06-26 08:56:34+00:00
> hundreds of interested and highly capable people to agree

That's a polite way of putting it, but 100% the grit required to push this through is admirable.

> Of course he'll be on a lot of papers now :-)

Well, everyone in ATLAS is on all the papers anyway, but he's ATLAS famous now, which gets you places.