MurphyA/hacker-news huggingface dataset:
by LauraMedia | 2025-07-25 09:43:04+00:00
What do you do if it's too early to figure out fail2ban and need to stop crude bot attacks?

Earlier this morning, I've had to deal with a group of bots trying to hit gold by randomly searching for reverse shells on our server.

I've written a small blogpost detailling the attack and how I dealt with it while getting ready for work.
by em-bee | 2025-07-25 09:44:17+00:00
well that's a dumb thing to do. you talk to people when you are in a friendly environment, on a shared activity, where you can make friends with them. you build a friendship first. you don't confront strangers on the street. again, do take a look at what daryl davis actually did. he most certainly did not walk into the middle of a kkk rally. and you don't have to follow his example by picking out the most difficult people to work on. just making friends with people who are not the same group as you is a good start.
by nabla9 | 2025-07-25 09:44:31+00:00
This is a good example of social hysteria.

1. The P320 had a real issue with firing when dropped. Although it had passed all drop tests, when dropped at a 25-degree angle onto the rear sight, the weight of the trigger was enough to fire the gun. There is a voluntary fix available for older weapons, but no recall has seen necessary.

Now, we have many videos and widespread discussion about this. Millions of people and police officers own P320s, and sometimes they make errors. It's natural to blame the gun when freak accidents occur, especially when they result in injury. The narrative of a big, greedy company trying to hide issues is always present and can be applied to almost anything.

2. Cases where the gun fired without the trigger being touched are very questionable. From lawsuits, examples include: carrying a round in the chamber and wrapping the P320 in cloth to move it; or carrying a round in the chamber and placing the P320 into a handbag. The case where a police officer's P320 fired while holstered (and there's a video of it) was studied by the FBI. The report notes that the officer had keys in his hand when he moved it near the holster. In most such cases, it's very easy to see how something could have touched the trigger. If the P320 had a genuine systemic issue, it would show up in statistics as an above-average number of accidents.

3. Now a separate P320 "out-of-battery fire" issue that's gaining traction online. This is clearly a typical hand-loading or questionable ammunition source issue, which is relatively common with all firearm models.

Summary: Starting with real issue, social media attention attached to some thing can have it's own life. making a typical number of incidents, with a variety of causes, look like a huge trend.
by philipwhiuk | 2025-07-25 09:44:50+00:00
I'm not sure how seriously I take an organisation supposedly focused on interplanetary space where the main advertised event seems to be Raspberry Pi workshops.

There are many conferences and academic discussions that spend a long time bikeshedding while industry actually does stuff.

The lack of involvement from industry in a field where stuff is happening suggests to me this is one of them.
by CJefferson | 2025-07-25 09:46:12+00:00
Before Rust, I'd reached the personal conclusion that large-scale thread-safe software was almost impossible -- certainly it required the highest levels of software engineering. Multi-process code was a much more reasonable option for mere mortals.

Rust on the other hand solves that. There is code you can't write easily in Rust, but just yesterday I took a rust iteration, changed 'iter()' to 'par_iter()', and given it compiled I had high confidence it was going to work (which it did).
by net01 | 2025-07-25 09:46:49+00:00
Culturally, Europeans eat about twice as much bread as Americans. We also have bakeries and traditional recipes that are significantly older than the United States itself. So, it’s natural that bread in Europe tends to be better; we have more experience, higher consumption, a bigger variety of recipes, and more cultural appreciation for it.

Additionally, I believe that bread in Asian, South Asian, African, and LATAM countries to be better than in the United States.

Bread rocks!
by cess11 | 2025-07-25 09:46:57+00:00
Yeah, that's another perk. Service is typically very good as well, you can ask for advice and get decent, trustworthy answers beyond what shelf something is on.

It's a quite different experience compared to regular profit optimised mass retail.

Now, I'm very aware of the drawbacks for local producers. It's a bit tricky to get things onto the monopoly shelves, you can't have anything the least provocative or advert-like on the label and even if you're only going to sell through your local monopoly shop you still need to price in sending your bottles to a logistics hub in Örebro or wherever. This is surely annoying, but pretty much every monopoly shop has inventory from local smalltime craft brewers and distillers and the like anyway.

As I see it, this is an unexploited business opportunity, one could likely live quite comfortably skimming a margin from small alcohol producers in exchange for lower transport costs and reliable advice in product design that shortens time to market.
by pyman | 2025-07-25 09:48:01+00:00
The lesson: Don't hand out plastic cards. Give people phones with digital wallets built in, and let them pay off the phone in 12 or 24 monthly instalments. That way you control the hardware, the payments, and the ecosystem.

I know people roll their eyes when I mention China, but the truth is, lots of Chinese companies use WeChat to pay benefits, bonuses, and sometimes even salaries. Meta spent billions on the metaverse and forgot to add a wallet to WhatsApp.
by crossroadsguy | 2025-07-25 09:48:06+00:00
Goodness :D

You (all; I see couple of fledgling hners) just proved me correct in a way :/

> the world's most awarded and most popular Premier (PM Modi) and the most hard working political party (BJP) India has ever got

You forget to mention "Most UNESCO certified Best PM".

> It is poor manners to deride the visionary leaders of modern India as "authoritarian"

Hawww. You make me sad. I am sad now. Sorry?

But please answer me first - why are you addressing Him as just "Modi"? Wouldn't it be "Hon'ble Modi Ji" or at the least something like "Respected Modi Ji". You bad!

> Their vicious stranglehold has been broken, and how!

Hail!!!!! Hail!!!!
by other8026 | 2025-07-25 09:48:07+00:00
> Rossmann himself seemed to have stopped using it as his main device because of fear of retaliation given that the GOS devs could potentially target him.

But he didn't. It's clear in his later videos that he was still using GrapheneOS, I believe even for months after the video.

> Better safe than sorry.

People who are familiar with how GrapheneOS updates work wouldn't agree. No identifiers are sent to the update server, so targeted updates aren't possible that way. Also, update servers only host static files. If Rossmann was really that worried, all he'd have to do is use a VPN. But that was all just a huge dramatic act so his video would get more views, and possibly to entertain his fellow Kiwi Farms members.
by selenedyxx | 2025-07-25 09:48:36+00:00
Actually, 40 years ago, people were mainly worried about more immediate and tangible issues like poverty and economic development. Population collapse simply wasn’t a major concern back then. It’s kind of like how nowadays hardly anyone seriously worries about the Earth exploding and everyone moving to Mars — people tend to focus on the problems that feel most urgent at the time. That’s why population collapse wasn’t really on the radar back then.
by vtbassmatt | 2025-07-25 09:48:47+00:00
I had to look both of those up, and you’re right. The rule is inconsistently applied for sure. This got me curious about where the so-called rule came from. Wikipedia says:

> Auto-eponyms may use either the possessive or non-possessive form, with the preference to use the non-possessive form for a disease named for a physician or health care professional who first described it and the possessive form in cases of a disease named for a patient (commonly, but not always, the first patient) in whom the particular disease was identified.

https://en.wikipedia.org/wiki/List_of_eponymous_diseases#Aut...

This is sourced by a link to the American Association of Medical Transcriptionists, which is not a body I’d heard of but I guess have some skin in the game when it comes to the intersection of medicine and grammar. https://www.mtstars.com/word-For-eponyms-AAMT-advocates-drop...
by rurban | 2025-07-25 09:49:12+00:00
Which was the ultimate failure of Rust, because as Pony benchmarks have shown, you get safety and speed by proper security and architecture. Rust just survived by lying about the its safeties.

What kills performance are not memory copies, but locks. Parallel nonblocking IO and a non POSIX stdlib will bring you far away from C++ or Rust performance.
by gtsop | 2025-07-25 09:50:01+00:00
> Just curious, but who is muddying waters, and how ?

In the context of this whole rabbit hole, pretty much all of the parties.

When you bring someone's dirt put in the public, not to support an argument but just to attack them because you don't like them, uou are muddying the waters.

MegaLag did it for Linus

Steve did for Linus

Luis did for Linus

Linus did for Steve

Linus did for Luis

Henry did for Daniel

Luis did for Daniel

And of course Daniel pretty much does for anyone :p

These were not conversations based on logic, each had a reason to dislike the other and dag up dirt for clicks and for leverage.
by Tade0 | 2025-07-25 09:50:05+00:00
Can't agree here. Regarding gypsies it boils down to the culture and rates of stunting, as evidenced by families who broke off the former and prevented the latter.

The way people with trisomia function in society is also a product of our nurturing culture. It's only recently, when such people started living longer lives thanks to advances in medical science, that their intellectual development gained more attention and it was revealed that they can actually be more independent than commonly believed.

That being said it all requires a huge amount of effort and if a person with trisomia has siblings, they're very likely to be deprived of attention. Additionally, if they're a first child, they're the only one due to this. That is what makes it a net negative.
by sparkie | 2025-07-25 09:50:06+00:00
Well, "newtype pattern" is itself a reinvention of a decades old concept. Presumably "newtype pattern" gets its name from the `newtype` keyword in Haskell, which was introduced in Haskell 1.3 (1996).

To the best of my knowledge, the earliest specific term for the concept is painted types (Simonyi, 1976)[0], but I believe this was a new term for a concept that was already known. Simonyi himself quotes (Hoare, 1970)[1]. Hoare doesn't provide a specific term like painted type for the type being defined, but he describes new types as being built from constintuent types, where a singular constituent type is known as the base type.

Simonyi uses the term underlying type rather than base type. Hoare eludes to painted types by what they contain - though he doesn't explicitly require that the new type has the same representation as it's base type - so they're not necessarily equivalent, though in practice they often are. Simonyi made this explicit, which is what we expect from newtype in Haskell - and specifically why we'd specifically use `newtype` instead of `data` with a single (base) constituent.

If you're aware of any other early references, please share them.

---

[0]:https://web.archive.org/web/20170313211616/http://www.parc.c...

> These examples show that the idea of types is independent of how the objects belonging to the type are represented. All scalar quantities appearing above - column numbers, indices and so forth, could be represented as integers, yet the set of operations defined for them, and therefore their types, are different. We shall denote the assignment of objects to types, independent of their representations, by the term painting. When an object is painted, it acquires a distinguishing mark (or color) without changing its underlying representation. A painted type is a class of values from an underlying type, collectively painted a unique color. Operations on the underlying type are available for use on painted types as the operations are actually performed on the underlying representation; however, some operations may not make sense within the semantics of the painted type or may not be needed. The purpose of painting a type is to symbolize the association of the values belonging to the type with a certain set of operations and the abstract objects represented by them.

[1]:https://www.cs.cornell.edu/courses/cs4860/2018fa/lectures/No...

> In most cases, a new type is defined in terms of previously defined constituent types; the values of such a new type are data structures, which can be built up from component values of the constituent types, and from which the component values can subsequently be extracted. These component values will belong to the constituent types in terms of which the structured type was defined. If there is only one constituent type, it is known as the base type.
by prophesi | 2025-07-25 09:50:12+00:00
The issue isn't with NFC. It's passing the Play Integrity check that app developers optionally can use to prevent devices that don't pass the check from running their app, or remove parts of its functionality. IIRC I don't think any custom ROM's can pass the check. So you might be able to pay via NFC with a banking app if they don't implement the Play Integrity API. For Graphene's thoughts on the matter (2024):

https://grapheneos.org/articles/attestation-compatibility-gu...
by throwaway290 | 2025-07-25 09:50:20+00:00
Maybe you haven't seen a big crowd. During the day there can be such crowds going to work after 7am that bus must wait for ages then complete cutoff at 9am then some bumps around lunch then another craze at 4-6pm and this even without irregular local events like as you say groups of students

Bus lanes are good but it's driven by crowd sizes and a lot of combatting bunching can be done without adding bus lanes
Show HN: Made a boilerplate for SaaS and Freelancers to deploy in 24h
by LeoGoverG | 2025-07-25 09:50:32+00:00
Hello! I was tired of building the same things over and over that companies kept asking for: Home page, About, Pricing, Stripe integration, FAQ, etc.

So, I made a boilerplate for SaaS founders and freelancers to launch the basics of any SaaS in 24 hours.

It uses TypeScript, connected to Supabase and Stripe, so users can start selling ASAP. It's a simple boilerplate, but it has everything you need to get started. It can help save hundreds of hours and let you skip all the time it takes to set up the basics.

There's a full doc that shows how to set everything up step by step. Feel free to use the "Use this template" button on GitHub. It will be available for free all weekend.

I would love to get some feedback before launch.

Thank you!
by onli | 2025-07-25 09:51:12+00:00
Nothing I said is baseless and contrary to you, I do provide sources.

> Of course he was upset when Rossmann showed his true colors

I saw the chats. You lie. Showing his true colors = not accepting that there is an evil conspiracy and asking for proof. You are completely brainwashed and I will not continue this discussion.

If Calyx is not the next best alternative be invited to link to what you think is the best alternative. I still think it's Calyx.
by adlpz | 2025-07-25 09:51:22+00:00
Interesting article. I've also noticed the effect, just never seen it expressed and contextualized.

Not that it really needs any historical context and narrative flair to be useful:

Leave in-progress things at an interesting/engaging point so it's easier to continue later.

And the article pointed me to https://www.mirjamdonath.com/the-hemingway-challenge/ which lists 50 books-to-read (or 49 really) based on a bunch of Hemingway's quotes.

May do the challenge myself.
by ivanbozic | 2025-07-25 09:52:11+00:00
Another innovation is their line of M-series chips. I'm typing this on an M1 Max and this is by far the best combination of industrial design and physical hardware that I have used over the past 20 years. I've had it for four years, three new generations of chips have come out since then and this thing chews through anything I throw at it.

A ground-breaking, industry-changing innovation like the iPhone is like lightning in a bottle. It would be insane to think Apple can capture lightning every 5 years like clockwork.
by disruptbro | 2025-07-25 09:54:10+00:00
Language modeling is compression, whittle down graph to reduce duplication and data with little relationship: https://arxiv.org/abs/2309.10668

Let’s say everyone agrees to refer to one hosted copy of a token “cat”, and instead generate a unique vector to represent their reference to “cat”.

Blam. Endless unique vectors which are nice and precise for parsing. No endless copies of arbitrary text like “cat”.

Now make that your globally distributed data base to bootstrap AI chips from. The data driven programming dream where other machines on the network feed new machines boot strap.

American tech industry is IBM now. Stuck on recent success of web SaaS and way behind the plans of AI.
by poulpy123 | 2025-07-25 09:54:33+00:00
If there is no why it's not a theory but a recipe. The why can be as simple as most people like/dislike it, but it needs to exist and it needs to be testable.

Note that recipes are actually useful, it's just that they are not theory.

> "what if I want to change something?" It's indeed an essential step of learning and creating
by prmoustache | 2025-07-25 09:54:34+00:00
>the apps you install from F-Droid are signed by F-Droid rather than the developer.

That doesn't seem like a con if you take into account the context: F-droid is not shipping pre-build binaries from the developper, it asks for a buildable project from the developper.

If the source repo of the upstream dev are compromised, so will be hid own binaries anyway.
by mschuster91 | 2025-07-25 09:55:39+00:00
> one of the banks I'm forced to use checks for how it was installed, and Android for some incomprehensible reason is happy to report that to any application that asks

That's because apps that aren't published just on the Play Store but also on other stores or for direct sideloads (for users running Huawei for example which doesn't have Play Store) need to be able to detect the installation method to do updates on their own if there is no backing store.
by nwallin | 2025-07-25 09:56:45+00:00
Yeah. There've been a laundry list of innovations over the years that people will invent, show how it improves how a scene looks, and then for the next few years everyone turns it up to 11 and it looks like shit. Bloom, SSAO, lens flare, film grain, vignetting, DoF.

After a while people turn it back down to like a 4 and it improves things.
by kelnos | 2025-07-25 09:56:46+00:00
Couldn't agree more. And we see the continuation of this stuff today in Trumpist assertions that the 2020 election was rigged, simply because there's "no way" that Biden could have won over Trump.

Trump's entire rhetoric relies on this tactic. Anyone who disagrees with him or tries to shut him down should be impeached, jailed, whatever, because they shouldn't be allowed to exercise their power against him, no matter how legally they wield it.

It just makes me so angry to hear Vance say things like "judges aren't allowed to control the executive's legitimate power". Yes, they are! That's literally one of their jobs, specifically enumerated in the constitution! But that's the tactic: train people to believe that the judicial branch is not legitimate when it comes to executive branch decisions.
Built a "Pokemon Go alike" app to claim prepaid virtual cards
by DropCatch | 2025-07-25 09:57:26+00:00
Hey everyone, I recently launched a project called DropCatch and I’d love your feedback.

We drop prepaid virtual cards in real-world zones. If you’re nearby and quick, you can claim it and spend it instantly via Apple or Google Pay. If you miss it, it’s gone.

Each drop is:

Time-limited

Geofenced

Prepaid (not a loan, not crypto)

Shared across users in the area, first-in first-served mechanic.

It runs on a weekly subscription — users unlock access to local drops. If someone claims multiple in a day, they unlock “Power Drop Mode” — a short period where they can access bigger drops with less competition.

We’re experimenting with how finance can be behavior-driven, not balance-based.

Would love your thoughts on:

Would you try this?

What would make it more valuable?

Does the model make sense?

Let me know if you want the waitlist page or screenshots — happy to DM it.

Thanks!
by tpm | 2025-07-25 09:57:35+00:00
After I started doing moderately long and fast bike rides (200+km/week, flat and hilly terrain, averaging 70km/ride during summer, 100+ if I have enough time), I have found that:

- compared to "not much exercise" (some periods during winter), it modulates my hunger. I do not eat more, or only proportionally.

- when the rides are longer than cca. 50km, I start losing weight (not just water, weight, sustained)

- after several days with no exercise, my hunger starts to increase again. In other words, I have to exercise to not overeat. I don't understand this effect, but it works for me, and it's been like this for many years.
by throwaway290 | 2025-07-25 09:57:39+00:00
Where I lived recently the interval at peak is like 4 min most. One stop boarding can take 3 min when stop is full. My bus skipped my stop until 9am because bus after bus are full. Skipping stops is one way to reduce bunching I guess

EDIT Who said there's only buses? There are cars, taxies and subway

It's always possible to add more buses or people can just go queue at the previous bigger stop it's 2 min walk away and it always stops there.

The point is that crowds cause bunching. I don't know what is your point
by atoav | 2025-07-25 09:57:43+00:00
As an university level educator my experience is:

Copying is a good way to learn if there are no exact instructions. E.g. covering a song is learning to listen as much as it is learning to play. But if someone made you a "10 steps to cover this song" video those lessons won't really stick.

My experience is that most people will only start to deeply think about a topic once they encounter it practically themselves. I can tell people about different signal levels and impedance all I want, it seems only once they plug wrong things together and wonder why the result sounds bad the light bulb goes on.

Copying can be great if it is done on your own as you will encounter all kinds of questions that matter in practise.
by astrobe_ | 2025-07-25 09:57:54+00:00
> Forth and other similar languages write-only

If you see write-only Forth programs, that's probably because they are poorly written, or maybe you are not familiar enough with Forth to read them.

> is that you can easily lose track of the variables when you are forced to toss them all on a stack

You don't "have" to keep everything on the stack in Forth any more that you "have" to allocate everything on the heap in C/C++.

A Forth programmer who is not a dilettante will look for the data which is used throughout the program (e.g. a file or device handle, a memory address) and put it in a (global) variable.

This eliminates most of the stack juggling and your definitions generally use no more than 2 arguments, so it's easy to tell what they do by looking at them.