MurphyA/hacker-news huggingface dataset:
by lucideer | 2025-06-13 13:29:36+00:00
> But these don't seem to be authoritative enough for IT / security,

As someone who's worked for a cybersecurity team that was responsible for enforcing password rotations in a company, trust me when I say that nobody was more eager to ditch the requirement than we were. This is enforced by external PCI auditors & nobody else.

Fwiw, PCI DSS 4.0 has slightly relaxed this requirement by allowing companies to opt-out of password rotation if they meet a set of other criteria, but individuals employed as auditors tend to be stuck in their ways & have proved slow to adapt the 4.x changes when performing their reviews. They've tended to push for rotation rather than bothered to evaluate the extra criteria.
by maeln | 2025-06-13 13:30:19+00:00
> Pitting a two minute reading vs months of work by a team of scientists is not a great move.

> In this case, the nature of the study is clearly acknowledged, it does not “change a lot of things”:

> These findings are a starting point for further understanding, not something to be immediately ranked as true/false.

Yes I know this and do not dismiss their research at all. I have been in the same boat, having to write at the end of a paper "We have proven a certain link between Y and X in this very limited experiment A, a wider, deeper research would be needed to prove if any such link exists in much larger condition B". This is normal, and how most scientific advencement is made.

But look, I don't think the average HN user comes to this article and comment section thinking what happened when you put erythritol on a cell culture outside of a living organism. They care about what is the consequences of consuming erythritol on them. So a small clarification comment stating the 2 importants conditions of the experiment (cell culture + dosage) is usually useful if you don't have the time to read the whole study and if you came here just to know if you should stop consuming your favorite sweetened drink right now.
by tomrod | 2025-06-13 13:30:32+00:00
I'd trust Zuck if I had a signed, airtight agreement for a large amount of money he paid into an escrow account for something I owned or was transferring ownership.

He's very close to peak homo economicus. (EDIT: this next point is wrong, the oral history I heard referred to Winklevoss pops, not Zuckerberg, and I misremembered) Which makes sense, given his father is deep in actuarial services.
by sevensor | 2025-06-13 13:31:22+00:00
My last job had some giant red flags right up front. “Who would I report to?” “We don’t know.” “Who would I work with?” “We’re not sure yet.” And then there was a high profile legal issue after I accepted but before I started, and it rendered the position I was hired for irrelevant.

I worked there for four years anyway. Every one of those red flags was a sign of a real problem. Three of those years were very good, but eventually the chickens came home to roost.
by Reubachi | 2025-06-13 13:31:44+00:00
Er, "instant" here is "relativistic instant."

even in a vaccum, light speed travel from the travelers POV still takes time, and said traveler would perceive time passing exactly as occurring in that local space. But yes you're totally correct, the observer on earth would in this time see only the briefest part of my journey's trail due to light from my journey taking "exponentially" longer to travel back to the observer.
by hn_acker | 2025-06-13 13:32:05+00:00
> "Senator Padilla chose disrespectful political theatre and interrupted a live press conference without identifying himself or having his Senate security pin on as he lunged toward Secretary Noem," DHS said. "Mr. Padilla was told repeatedly to back away and did not comply with officers’ repeated commands. @SecretService thought he was an attacker and officers acted appropriately.

If you watch the second video you'll notice that officers never told Padilla to back away.

> Speaking outside the Federal Building in LA's Westwood area, Noem said Padilla appeared to be "lunging" toward her and "nobody knew who he was."

There's no other evidence that Padilla "lunged" at Noem, and a lot of evidence that he didn't (skim [1], and watch 6:04-6:48 of the second video to draw your own conclusions).

> "If he had requested a meeting, I would have loved to have sat down and had a conversation with him that coming into a press conference like this is political theater," Noem said.

A Senator of California walks into a press conference about the administration's deployment of thousands of members of two different military forces to (one city in) California. Why would it be abnormal (never mind political theater) for a Senator to join a press conference?

Something I initially missed: Padilla claims that the FBI escorted him to the press conference [2][3]. The FBI could put out a follow-up tweet to confirm or deny, but I doubt that it will. Contrary to Noem's claim that "nobody knew who he was", the FBI knew, and there's a chance that Noem knew.

Another reminder that this administration does not want people to know about their freedom of the press [1]:

> A video shared by Padilla on social media then shows he was pushed facedown on the ground by three officers who then handcuff his hands behind his back. The video stops after an officer tells Padilla’s staffer there is no recording allowed “per FBI rights.”

[1] https://www.sfchronicle.com/politics/article/padilla-noem-lu...

[2] https://www.mediaite.com/media/news/sen-alex-padilla-tells-m...

[3] https://www.msnbc.com/the-beat-with-ari/watch/first-on-msnbc...
by notfried | 2025-06-13 13:32:59+00:00
I don't really think Meta ever had a vision beyond "Facebook is a social network to connect people". Since then, their strategy has primarily been driven by their fear of being left behind, or of losing the next platform war. Instagram, Whatsapp, Threads, VR, AR, and now AI, they all weren't driven by a vision as much as it was their fear of someone else opening a door to a new market that renders them obsolete. They are good at executing and capturing the first wins, but not at innovating, redefining a market, or pushing the frontier forward; which is why they eventually get stuck, lose direction, and fall behind (Tiktok, Apple Vision Pro, AI).
by vorpalhex | 2025-06-13 13:33:20+00:00
This is science, not religion. Nothing is owed to any researcher beyond the truth of the matter as supported by the best available evidence to us. Your pastor can request you go easy on him, your research team may not. (Please don't use this as an excuse to be rude.)

This contradicts several reasonably large high quality studies using a low grade substitute for human testing. The burden of proof is on the researchers making a surprising claim in contrast to existing evidence.
by staticman2 | 2025-06-13 13:33:27+00:00
I doubt the distinction between depressed and not depressed is all that clear.

I know scales like BDI 2 assign a number and use terms like:

– BDI-II scoring:

0-13 is considered none or minimal range depression;

14-19 mild depression;

20-28 moderate depression;

29-63 severe depression.

https://strokengine.ca/en/assessments/beck-depression-invent...

There is no objective cutoff point is what I'm saying.
by raxxorraxor | 2025-06-13 13:35:21+00:00
Not out of reach if you get very close to light speed. Time would advance very slowly for you, so counterintuitively it is possible to travel 5000ly in your life time.

Although for everyone else at least 5000 years will pass, so better say goodbye to family and friend.

Hm, not sure if that is really less depressing...

Also light isn't slow. A photon instantly travels to the end of time and yet it still takes a few minutes from the surface of the sun to us. Or about 100000 years from the center of the sun to its surface.
by londons_explore | 2025-06-13 13:35:29+00:00
35mm of silica glass would do the trick.

Since the ferrite core isn't a good insulator, the glass would need to fully encase either the primary or secondary winding.

At the sort of scales this transformer would likely be built, an extra 35mm would make the whole thing a little bigger and more expensive, but not massively so.

The glass tank could also double up as an oil bath for cooling the coil - the first 500 millimeters or so of the piping needs to be glass, but after that you can use a typical cooling radiator with no extra concerns.
by jakderrida | 2025-06-13 13:37:01+00:00
I think more often you'll find it's the mediocre coders (like myself) that have trouble using AI. The software developers and CS majors just know exactly what to tell it to do and in the *exact* language it could best be understood. That's just my experience.

Also, I get caught up in multiple errors that will never go away and, since I'm stepping out of my wheelhouse with libraries or packages I'm completely unfamiliar with, I'm completely helpless but to diagnose what went wrong myself and improve upon my code prompting skills.

Don't get me wrong. AI makes possible many things for me. However, I think professional coders probably accomplish much more.
by acdha | 2025-06-13 13:37:47+00:00
There’s something to that but it is victim blaming if you’re not acknowledging the larger trends. There are a lot of places whose MBAs are attending the same conferences, getting the same recommendations from consultants, and hearing the same demands from investors. The push against remote work, for example, was all driven by ideology against most of the available data but it affected a huge number of jobs.
by saberience | 2025-06-13 13:38:12+00:00
None of the tools that existed before created entire complete works with tiny amounts of effort.

E.g. "Write an amazing story for kids about a bear". ChatGPT writes a whole story for you. That's not "augmenting" your workflow, that's just doing all the work for you. And don't tell me, "writing the prompt is the new form of art", the reality is that writing these prompts doesn't require a tiny fraction of the talent required to write a novel from scratch.

The printing press is a horrible example also, it didn't write anything for you, it just literally prints already written content. Photoshop just let you edit already taken photos.

Cameras require you to go to places, take trips, put massive effort into actually making content from scratch.

A better analogy would be an automated flying camera that just goes off by itself to a destination, takes its own photos, edits them, and sends them to you, processed, edited, finished. All you did was say "go to Victoria falls and take photos."

Yes artists have used tools, pens, then a typewriter, a word processor i.e. the implements for the process, but the tools didn't ever replace the most important part of the artist, the actual creative work and imagination in the brain. The AI tools are just replacing the brain AND the actual implements.
by Kon-Peki | 2025-06-13 13:38:12+00:00
This is the second or third article I’ve seen that has mentioned retreating to a safe place, and implied that it was a good thing.

So let’s assume that this is what they are doing, and also that it is the right thing to do. They should start spinning things off, no? The core business, when adjusted for the spinoffs, should continue to show solid financial results. Many executives that have no business being in the organization can fail upwards as leaders in the new companies. They can ease the burden that regulators are putting on them. Etc.
Tell HN: GitHub gists are great for private/public bookmarks
by smusamashah | 2025-06-13 13:38:54+00:00
I am using gists for keeping lists of things as markdown documents. Being plain text markdown docs makes it way more flexible then dedicated bookmarking solutions.

Gists can be made public and people can leave comments to contribute or otherwise. I don't know of anything more convenient with these features. There is even http://gist.new/ as a shortcut domain.

Some examples:

https://gist.github.com/SMUsamaShah/fd6e275e44009b72f64d0570256bb3b2 P2P file sharing tools

https://gist.github.com/SMUsamaShah/71d5ac6849cdc0bffff4c19329e9d0bb JavaScript immediate GUI libs

https://gist.github.com/SMUsamaShah/6379649c0cbade9abc02b2427bd33210 All In-browser VMs

https://gist.github.com/SMUsamaShah/301994b39334ac2515224b92afb72403 All Hirens BootCD Versions

Can see all my public "List of X" gists here https://gist.github.com/search?o=desc&q=user%3Asmusamashah+%22list+of%22&s=stars
by TheFreim | 2025-06-13 13:39:17+00:00
> Someone please build an RDF triple store on top of XTDB to get the immutability and easy time travel.

What do the current XTDB across-time queries lack in this regard? I am under the impression that XTDB already supports what you're asking for, from the release notes:

> Full, across-time queries: using SQL:2011's bitemporal primitives and/or 'XTQL' to answer "what did we know, and when?".

> No history/audit tables, triggers required: use it as a regular update-in-place database (you're free to UPDATE and DELETE normally again!), safe in the knowledge that your history is there when you need it.

> Zero-cost, full database snapshots: immediately go back to any point in time without needing to schedule or store periodic snapshots/copies.
by idiotsecant | 2025-06-13 13:39:34+00:00
I get that this is partly HN devils advocacy and partly a very human bias towards thinking all brains are your brain, but it's like saying that everyone has creaky joints so people with arthritis are just complaining too much.

Inattentive type ADHD makes you physically incapable of concentration. Procrastination is a symptom of the underlying problem, which is that the attention mechanism in your brain is chemically broken. People with this disorder are forced to 'manually' drive executive functions in a way that people with fully functioning norepinephrine synthesis systems can't really understand.

It is surmountable, but it's very hard and it's an 'invisible' condition. The sad thing is that most people with this (actual, real, chemically identifiable) condition spend most of their lives internalizing that they are lazy and worthless and desperately wishing they knew how to not be that. I have vivid memories of thinking those things when I was in elementary school. I am relatively high functioning now because I understand that my mind needs external control loops to keep me halfway productive but it comes with a whole lot of constant anxiety and shame that I can't do anything about.

It's a real thing.
by vanschelven | 2025-06-13 13:39:58+00:00
OP here

I got the idea for this blogpost well before I started working on Bugsink; it's always surprised me how many developers/teams are perfectly happy to marinate in a proverbial sewer of bugs and then act all surprised once the phone rings and everyone has to be in "all hands on deck" mode. Clean up your working environments people...

"conditions apply" as per the article though :-)
by lapcat | 2025-06-13 13:40:30+00:00
Passkeys are basically the same as ssh keys. What the big tech corporations have "added" is a walled garden. Apparently you can now transfer from one walled garden to another walled garden, Apple iCloud Keychain to 1Password or Google or whatever, but they completely distrust users and refuse to allow users to get directly to the private keys. In other words, they've added paternalism.

I personally don't want to use any "cloud" syncing service, no matter whose it is. I just want to manage my own credentials and back them up myself, like I do with my passwords. Local-only, with offsite backups controlled only by me, is my principle for almost everything. I don't object to the existence of cloud syncing services, as an option for users, but I do object to the forced paternalism on everyone.

One of the great things about passwords is that they are completely device-independent. You can write a password down on a piece of paper. You can do that with an ssh private key too, by the way. It's the ultimate backup that resists all vendor lock-in.
by gpm | 2025-06-13 13:40:30+00:00
Yes, they are: https://assets.bbhub.io/professional/sites/24/battery11.jpg

China's LFP battery packs, as of 2022, have a density of 160 Wh/kg [1], which matches the NMC battery pack in a Model Y from the same year [2] (Note: The Model Y battery pack was no doubt designed and built earlier given that it was already in a product). I.e. is isn't really the case that the batteries they are putting in are less efficient than the earlier iterations. Though you could have even high energy density batteries if you didn't switch to LFPs.

I'm not sure we are racing towards 1000 mile cars, because I'm not sure it's the case that there's a huge market for 1000 mile cars, and there's limits on density short of technological leaps that would make such vehicles heavy. I think we're rather more likely to see 600km cars just keep dropping in price instead.

[1] https://insideevs.com/news/576870/catl-third-generation-ctp-...

[2] https://www.batterydesign.net/2022-tesla-model-y-4680/
by woodruffw | 2025-06-13 13:41:05+00:00
I think it’s already probably a mistake to think that a source distribution consistently references a unique upstream source repository state; I don't believe the crate distribution layout guarantees this.

(I agree that source is easier to review and establish trust in; the observation is that once you read the upstream source you’re in the same state regarding distributors, since build and source distributions both modify the source layout.)
by JodieBenitez | 2025-06-13 13:41:08+00:00
"Nous distribuons notre infrastructure sur plusieurs hébergeurs dans chaque État membre de l'Union européenne. Notre pile logicielle sur mesure a été testée au combat pendant plus de 3 ans, répondant à des billions de requêtes et servant des centaines de milliers d'utilisateurs chez NextDNS."

Claims it's 100% european, can't even have proper french. :-/
by jazzypants | 2025-06-13 13:41:25+00:00
This article never mentions React. This has nothing to do with React. There's a reason people say "react is not reactive"[1].

Signals are derived from Observables[2] which were first used in Adam Haile's S.JS[2] and made popular in JavaScriptLand by Ryan Carniato's SolidJS[3].

[1] - https://dev.to/this-is-learning/how-react-isn-t-reactive-and...

[2] - https://dev.to/this-is-learning/the-evolution-of-signals-in-...

[3] - https://www.solidjs.com/

[4] - https://github.com/adamhaile/S
Show HN: curlmin – Curl Request Minimizer
by noperator | 2025-06-13 13:41:26+00:00
curlmin is a CLI tool that minimizes curl commands by removing unnecessary headers, cookies, and query parameters while ensuring the response remains the same. This is especially handy when copying a network request "as cURL" in Chrome DevTools' Network panel (Right-click page > Inspect > Network > Right-click request > Copy > Copy as cURL).

I use Chrome's "Copy as cURL" _a lot_ (so much, in fact, that I wrote https://github.com/noperator/sol partially just to help me auto-format long curl commands). I often have this problem where the copied curl command contains a bunch of garbage (namely, extra headers and cookies for tracking purposes) that isn't at all relevant to the actual request being made. After years of manually trimming out cookies in order to see which ones are actually necessary to maintain a stateful authenticated session, I finally decided to make a tool to automate the minification of a curl command.

curlmin will take a big ol' curl command like this:

curl \ -H 'Authorization: Bearer xyz789' \ -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36' \ -H 'Accept: text/html,application/xhtml+xml,application/xml' \ -H 'Accept-Language: en-US,en;q=0.9' \ -H 'Cache-Control: max-age=0' \ -H 'Connection: keep-alive' \ -H 'Upgrade-Insecure-Requests: 1' \ -H 'Cookie: _ga=GA1.2.1234567890.1623456789; session=abc123; _gid=GA1.2.9876543210.1623456789' \ -H 'Cookie: _fbp=fb.1.1623456789.1234567890' \ -H 'Cookie: _gat=1; thisis=notneeded' \ -b 'preference=dark; language=en; theme=blue' \ 'http://localhost:8080/api/test?auth_key=def456&timestamp=1623456789&tracking_id=abcdef123456&utm_source=test&utm_medium=cli&utm_campaign=curlmin'

And reduce it to the minimum necessary elements to satisfy the request:

curl -H 'Authorization: Bearer xyz789' -H 'Cookie: session=abc123' 'http://localhost:8080/api/test?auth_key=def456'
by kenjackson | 2025-06-13 13:41:29+00:00
But I feel like the evaluator should generally be stronger/better than what its evaluating. Otherwise you risk it evaluating at a lower level, while the better LLM is writing with more nuance that the lower LLM doesn't pick up on.

I've seen some places, e.g., NY Times, use expert panels to review the results from LLMs. For example, getting the author of a book/essay to evaluate how well the LLM summarizes and answers questions about the book/essay. While it's not scalable, it does seem like it will better evaluate cutting edge models.
by exDM69 | 2025-06-13 13:41:40+00:00
Thanks for the words of encouragement. I need more time to turn this prototype into a practical piece of software and/or a publication (blog post or research paper). Unfortunately there are only so many hours in a day.

To actually render text I would still need to add text shaping to get from strings of text to pixels on the screen.

But a bigger problem is how to integrate it into someone else's software project. I have the rasterizer GPU shader and some CPU preprocessing code and the required 3d API code (I'm using Vulkan). I'm not sure how people usually integrate this kind of components to their software, do they just want the shader and preprocessor or do they expect the 3d API code too. Packaging it into a library that has the Vulkan code too has its own problems with interoperability.

You need to hope that it rains during my summer vacation, maybe this project will see some progress :)
Ask HN: How do I give back to people helped me when I was young and had nothing?
by jupiterglimpse | 2025-06-13 13:42:45+00:00
Throughout my career, I've received incredible kindness and inspiration from experienced people - professors, and strangers who invested time in me when I feel like I had little to offer in return. While I always express gratitude and try to pay it forward, I often feel there's still an imbalance. I feel like I owe something more direct to the specific people who shaped my life.

How do you meaningfully give back to people who helped you early on (when you literally have nothing...haha)? What forms of gratitude have you found most meaningful?

Appreciate any comments.
by imzadi | 2025-06-13 13:42:52+00:00
The problem with this is that many older people are reluctant to use web browsers that actually support true ad blocking. They are used to Chrome and don't want to use anything that is even remotely different. I have this argument with my mom on almost a daily basis. She is always messing up her phone or computer by clicking on something she shouldn't. I have installed firefox for her, but she refuses to use it.
by zozbot234 | 2025-06-13 13:43:15+00:00
> However, they still lack an actual operational semantics in MIR -- and the way they are represented in MIR doesn't lend itself to a sensible semantics

That's an issue with how the MIR for this feature has been defined, not with the feature itself. The claim that the implementation should be reworked from the ground up is one that I might agree with, but the recent proposal to back out of an existing RFC suggests that the devs see alloca itself as problematic. And that's bad news if you intend to use alloca throughout as a foundation for your Swift-like ABI support...
by gwbas1c | 2025-06-13 13:43:17+00:00
Reverse acquisition? IE, similar to how Disney "bought" Pixar, but much of Pixar's IP overshadows Disney's IP; or how Apple bought Next and the current MacOS is basically NextOS under the hood.

It's a technique that companies do to avoid disruption: Buy early stage startups, and by the time they could "disrupt" the parent company, the parent company's management is ready to retire, and the former startup's management is ready to take their place.