MurphyA/hacker-news huggingface dataset:
by PaulHoule | 2025-07-25 01:35:13+00:00
As a pythoner one of the things that drives me crazy is that none of the concurrency control mechanisms are completely x-platform; different aio loops have different strengths and weaknesses in Windows and if I want to use gunicorn well I better do it in WSL2. I used aiohttp for my YOShInOn RSS reader [1] and Fraxinus image sorter and gave up on it when Fraxinus was serving images and other content with a high concurrency count, it was getting hung up on something and I could either try to debug it with an X% chance of succeeding or just go to gunicorn and I know I can use all the cores on my machine. It is still fronted by IIS and IIS serves the images because that's even better for performance. If I wasn't on my Frankstack it would be nginx.

The real problem in web crawlers and such is supporting "one-thread per target server and limited request rate per target server" which is devilishly hard to do with whatever framework you're using on a single machine and even harder when you have a distributed crawler. I think some the rage people have about AI crawlers is the high cost of bandwidth out of AWS, but some of it has to be that the AI crawlers don't even seem to try anymore.

[1] https://mastodon.social/@UP8/114887102728039235 really!
by nine_k | 2025-07-25 01:35:52+00:00
PostScript is a bit like .Net CLR or WASM: while widely used, it's basically never written by humans directly.

Forth is a wonderful way to build a high-ish level self-contained programming environment on very low-resource hardware, like a 8-bit MCU. But thinking in terns of the stack is useless mental gymnastics, this is something a machine should do instead.
by benreesman | 2025-07-25 01:35:56+00:00
Extremely happy GrapheneOS user here. Thank you so much for the work you and your colleagues do. Speaking for myself, the adoption of a mobile communication and computing choice that both put me in control of what information I interact with and respects my agency enough to present me with the hard choices about what I do and don't want for myself has been a life-altering upgrade in something midway between "peace of mind" and "outright mental health".

Much like you don't hear the sound of a busy city until you go somewhere truly quiet, you don't remember owning your own brain until you evict all of the entities who have been living rent free in it.

Keep doing the great work you're doing: it's making people's lives better in dramatically more significant ways than most software.
by barbazoo | 2025-07-25 01:38:49+00:00
> Donald Trump’s Environmental Protection Agency (EPA) labeled the grant a “wasteful DEI program”, though advocates say the move is an act of cruelty. Drinking water in some parts of the Monterey county region, which largely produces strawberries, has not been safe for decades because it is contaminated with staggering levels of highly toxic pesticide ingredients that threaten the health of agricultural workers and others.
by gottorf | 2025-07-25 01:39:11+00:00
Technically, a "safety" describes designs and mechanisms by which a firearm discharges if and only if the trigger is pulled.

Colloquially, the word is often used to describe an external safety that must be manually disengaged (otherwise there is no bang even if the trigger is pulled). However, in modern firearms, even those with external safeties also have internal safeties that mean that even with the external safety disengaged, if you dropped the firearm or hit it with a hammer or something, it would not fire.

As others commenters have said, in the case of the P320, the claim is that it would fire without the trigger being pulled; and in the specific case of the airman, it is further claimed that there wasn't even a precipitating physical shock like it being dropped or hit.
by bigstrat2003 | 2025-07-25 01:39:48+00:00
> Checked exceptions, in contrast to unchecked, means that if a function/method deep in your call stack is changed to throw an exception, you may have to change many function (to at least denote that they will throw that exception or some exception) between the handler and the thrower.

That's the point! The whole reason for checked exceptions is to gain the benefit of knowing if a function starts throwing an exception that it didn't before, so you can decide how to handle it. It's a good thing, not a bad thing! It's no different from having a type system which can tell you if the arguments to a function change, or if its return type does.
by Jensson | 2025-07-25 01:39:51+00:00
> You can't return something like Result<CorrectObject,ConstructorError> to handle the error gracefully

Throwing an error is doing exactly that though, its exactly the same thing in theory.

What you are asking for is just more syntactic sugar around error handling, otherwise all of that already exists in most languages. If you are talking about performance that can easily be optimized at compile time for those short throw catch syntactic sugar blocks.

Java even forces you to handle those errors in code, so don't say that these are silent there is no reason they need to be.
by cxr | 2025-07-25 01:40:05+00:00
Is there a good reason for one's Apple Notes to be turned into a "website"? (NB: there's something more meant here than notes-as-a-website, since that implies little more than than "your notes, but with URLs". "Website" is being used here as a euphemism for something else—something more than that alone.) Is that better than your website being a collection of notes?

It seems that the note is the preferred form of interaction, following straightforwardly from the concept of revealed preference—else those in the target audience wouldn't actually be choosing the notes every day, when they could be choosing not-notes.

So that's the value proposition here: taking the thing that its users like more and exchanging it for something that they like less.
by okanat | 2025-07-25 01:40:11+00:00
There are safety recommendations / best practice standards like CERT. None of them will prevent you from making intentional looking but logically unsound memory unsafe operations with C and C++. The code can be very indistinguishable from safe code. The things that C and C++ allow you to do basically makes code written in those languages impossible to fully formally prove. Although there are subsets, the basic integer operations and primitive types are messed up with C. So without uprooting how basic integer and pointer types work, it is impossible to make C and C++ safer. Such change will make all C and C++ programs invalid.

C and C++ always defaults to minimum amount of safety for maximum allowance of the compiler interpretation. The priority of the language designers of them is keeping existing terrible code running as long as possible first, letting compilers interpret the source code as freely as possible second.

That's why many military and aerospace code actually uses much safer and significantly more formally verifiable Ada.
by hn_acc1 | 2025-07-25 01:40:33+00:00
Agreed with the other response to you - this "reverting to buttons" is a response to the outcry after they all went towards a tesla-like "everything is controlled via the center console" dystopia. Yes, the VERY NEW VWAG models are thankfully reverting back. That doesn't mean they didn't go the other way first.

It's COSTING them $$ to switch back - and they were losing a LOT of buyers over it. If you read any car magazines, people were constantly talking about this. Car makers are finally starting to listen - after several years of failure.

Couple a "slow-to-respond" GUI with a "everything is done via the GUI" and it's horrible.
by stockresearcher | 2025-07-25 01:40:41+00:00
One of the analytics leads for the Red Sox came to Harvard to give a presentation. I asked if he could quantify the effects analytics was having compared to the conventional wisdom developed over the course of 150 years of pro baseball.

He thought that analytics was changing the probabilities of discrete events by single digits. Essentially, nobody was doing anything wrong, there were just optimizations that were/are available.

Remember that the book/movie is about the A’s, who were eliminated in the first round of the baseball playoffs.
by alganet | 2025-07-25 01:41:08+00:00
> I'm currently working in consultancy.

Please, clarify. How does this is supposed to influence the answer? (In other words: how is this relevant to what you're asking?)

> multiple teams distributed across various domains and timezones

Hire someone experienced in that (not me).

> script locations, set up instructions, caveats for specific executions etc.

Are you sure you work on tech? These are mostly solved problems.

> I'm looking for any advice to optimize cross-team information distribution

Be more specific! That's good advice.

> Are there best practices or tools that you could recommend?

Nothing that you couldn't find and try for yourself. Perhaps you can give more details on what you're asking. It is very unlikely that whatever you're working on is a big secret, so share it.
by toss1 | 2025-07-25 01:42:06+00:00
>>the dynamics like that are abstracted away in EVs (i.e. dumbed down) or buried in menus and not readily accessible.

Exactly, they already do regen first, then mechanical braking, and just hide all the details.

I would like to see those details available so I can tune them (it'd be ok if they put safety limits on where they know the capabilities of the batteries, electronics, etc. far better than I ever could). Just a nice to have...
by yregmi | 2025-07-25 01:42:06+00:00
Hey everyone, Yathartha here, I/m the solo founder of Kodec AI, and I'd love your feedback on a POC I’ve been heads-down building.

The idea came from a simple observation: AI agents are getting smarter, but the web wasn't built for them. It's like dropping a robot into a kitchen with no labels causing them to fumble, hallucinate, or fail entirely. That's why we see stories like the "one-hour cupcake order" from ChatGPT agents.

I believe the fix is a smarter, machine-readable web.

So I built a prototype for a new open protocol: 'kodec.txt'.

Its like robots.txt, but instead of saying "what bots cant do" it says what they can do. A sitess /kodec.txt file defines actionable intents (like 'OrderAction', 'ScheduleAction', 'EmailAction') and specifies what inputs are required to perform them. It’s a structured, declarative instruction manual for agents, no need for scraping or guessing.

You can check out the demo (kodec.net/blog/showhn) of a single agent completing 3 tasks using just this protocol:

* Ordering a product

* Sending an email

* Booking a consultation (with Kodec itself)

Below the video, I've included the full unedited log of the agent's step-by-step reasoning.

It's very early, and I know there are edge cases everywhere — but I'd love your thoughts on:

1. Decentralized vs centralized: Does this make sense as a decentralized standard (like robots.txt), or would developer adoption require a centralized registry (like OpenAI plugins)?

2. Security & abuse vectors: What attack surfaces or pitfalls do you foresee if this became widely adopted?

3. Great-fit use cases: What other kinds of actions would benefit from this protocol?

Thanks in advance for taking a look. I'll be around all day and would love to discuss more.
by cubefox | 2025-07-25 01:42:11+00:00
Related breaking news, Intel openly contemplates exiting further cutting edge node development:

> "If we are unable to secure a significant external customer and meet important customer milestones for Intel 14A, we face the prospect that it will not be economical to develop and manufacture Intel 14A and successor leading-edge nodes on a go-forward basis," a statement by Intel in a 10Q filing with the SEC reads. "In such event, we may pause or discontinue our pursuit of Intel 14A and successor nodes and various of our manufacturing expansion projects."

https://www.tomshardware.com/tech-industry/semiconductors/in...
by aussieguy1234 | 2025-07-25 01:42:39+00:00
The one thing that prevents me from switching my Pixel over is the lack of support for emergency services to see your location if you call the emergency number. I know this because I called twice while having GrapheneOS installed.

I do some watersports and always take my phone with me, so letting emergency services see my location is good for my safety in case I ever got into trouble on the water. I also have a PLB, but I like to have two devices for redundancy, as is best practice.
by why_at | 2025-07-25 01:45:34+00:00
I'm familiar with the idea of "brandishing" being illegal, but I looked it up anyway. I found https://en.wikipedia.org/wiki/Menacing which says "Self-defense is often explicitly given as an exception."

It seems like then it would be legal to draw a gun without firing if it was in self defense? I have a hard time believing that there are any cases where shooting someone in self defense would be legal, but scaring them away wouldn't.
by habinero | 2025-07-25 01:45:43+00:00
Really? It's not difficult.

Visa doesn't give a single shit about porn, porn generates a lot of fraud and chargebacks that cost them money.

Most people I see complaining about how "unethical" it is are the ones who got kicked off the card networks for very good reasons like fraud or money laundering, or they got themselves on the MATCH list.
by lotyrin | 2025-07-25 01:46:24+00:00
Those sound like capitalism problems, not medical ones, to be probably too honest (HN doesn't generally vibe with class consciousness because so many tech bros sell out or dream of selling out one day, but). Society can afford to have support systems for people with disabilities and their supportive family, as evidenced by the fact that it is currently doing so indirectly (by paying enough for the husband's labor that he can make finances work for the three of them). The fact that the husband in your scenario bears all of that for everyone else (and it creates an unhealthy dependency in their relationship) because we only value the under classes for their contribution of labor is the problem, and is solvable.
by monero-xmr | 2025-07-25 01:46:26+00:00
There are some homeless people, screaming all day, addicted to drugs, defecating in their pants and in the street. These people do not deserve to live in the street. Having the “freedom” to do this where children walk on the sidewalk is actually completely insane. We live in a society. They need to be forcibly removed, put into asylums, given 24/7 care, and if they recover they can re-enter society.

Alternatively I would be amenable to putting them in, say, national parks, where they are given a tent and free food so they can scream all day there. Maybe it would be far enough away from transport that drug dealers wouldn’t bother to drive out there. But not in a major metropolis where normal people need to live and work. It’s absurd
by samplatt | 2025-07-25 01:46:27+00:00
>Are you sure you didn't just see a sales meeting?

Considering how much the sales division of many medium and large companies dictates the direction of the whole company, "sales meeting" and "business collusion" is often the same thing.

I've worked for FAR too many companies that have lost $60million in support and maintenance on a sub-par product that sales managed to sell for $30million gross... and then the sales division (and upper management) leave the company for something better. What a surprise.
by hn_acc1 | 2025-07-25 01:46:40+00:00
Do you mean via credit cards, or on the whole, including a mortgage? We have a mortgage, but have made all but 1 or 2 credit card payments in 20+ years - we forgot to pay a $50 bill once, IIRC. Outside of the mortgage, we've never spent money that wasn't already in our bank account - not even "it's coming in our next paycheck". Our credit scores are fine.
by bcrl | 2025-07-25 01:46:51+00:00
Mikrotik has not (yet?) gone down the path of shipping sector radios supporting massive MIMO (Multiple Input Multiple Output -- an 8x8 array can deliver 8 times as much data as 1 stream within the same channel size) as vendors like Cambium have. The additional capacity on tower sectors from additional streams combined with MU-MIMO (Multi-User MIMO that transmits to multiple subscriber radios at the same time based on the number of streams the transmitter supports combined with client radios that are typically 2x2) is a great way to gain capacity where spectrum is exhausted. Higher order QAM support like the new 12 bits per symbol modulation in 802.11be tends not to be so useful for WISPs as getting the SNR to the level required to support it tends to be is challenging, especially in 6 GHz spectrum where transmit power limitations require much higher gain antennas for client radios (at least here in Canada where EIRP is limited to 36dBm).

Mikrotik is still quite heavily used for their routers and switches among WISPs. They are the most affordable vendor for 100Gbps switches. Pity we don't have a better open source software stack for their hardware.

Ubiquiti is also actively neglecting the WISP market. Anything that isn't UniFi seems to be mostly abandoned these days.
by Alupis | 2025-07-25 01:48:32+00:00
I'm still very curious why the P320 beat out the venerable Glock 17 & 19 combo in the Army's recent selection. It would seem being able to change from duty to compact is more of a gimmick than practical. I'd wager most P320's will spend their service life in exactly one configuration.

Sig does have a way of making every pistol feel like it was custom molded to your hand - but Glocks "Just Work".
by tptacek | 2025-07-25 01:49:03+00:00
It's a contrived type confusion bug. It reads 42h because that address is hardcoded, and it does something that ordinary code doesn't do.

If you were engaged to do a software security assessment for an established firm that used Go (or Python, or any of the other mainstream languages that do shared-memory concurrency and don't have Rust's type system), and you said "this code is memory-unsafe", showing them this example, you would not be taken seriously.

If people want to make PLT arguments about Rust's correctness advantages, I will step out of the way and let them do that. But this article makes a security claim, and that claim is in the practical sense false.
by okanat | 2025-07-25 01:49:23+00:00
It depends on what threads can do. Threads share memory with other threads and you can corrupt the data structure to force the other thread to do an unsafe / invalid operation.

It can be as simple as changing the size of a vector from one thread while the other one accesses it. When executed sequentiality, the operations are safe. With concurrency all bets are off. Even with Go. Hence the argument in TFA.
by transpute | 2025-07-25 01:50:31+00:00
MTE is an Arm v9 feature subset of CHERI, https://news.ycombinator.com/item?id=30007474 | https://armor.ch/mte/hw

https://discuss.grapheneos.org/d/8439-mte-support-status-for...

> Hardware memory tagging is going to provide a massive increase to protection against remote exploitation for GrapheneOS users. It's the biggest security feature we'll be shipping since we started in 2014.
by jofla_net | 2025-07-25 01:50:47+00:00
Its merely a personality contest, a sociological phenomenon. Humans band around (and more easily listen to) individuals bearing certain personality traits. These traits have very little to do with actual problem solving, and finding the most ideal path forward for an organization. Alot of times they go hand and hand but I'd wager, from the CEOs ive personally met, there are alot of them with just the charismatic set.
by rcxdude | 2025-07-25 01:50:55+00:00
I don't think Alan Turing would have predicted the full sentence that I wrote there. The first half is not the interesting or surprising part! And of course it's not magic, but mathematics does in fact contain a lot of things we don't actually understand yet, and system like LLMs are in general something we don't have particularly robust mathematical frameworks for relating their structure to the observed behaviour (compared to other, much simpler, structures).
by cjcenizal | 2025-07-25 01:51:42+00:00
I’m a visual person so having something I can see and experience typically helps me understand someone’s idea better than if they’re describing something and I’m trying to imagine it. It also helps to have a concrete artifact because we can methodically catalogue its characteristics and define which ones are exactly what the person means, kind of what they mean but they still need help refining it, or completely up for grabs. This is why I find prototypes, wireframes, and sketches to be useful tools for defining the solution space.
by gruez | 2025-07-25 01:53:27+00:00
>counterintuitive to place your trust in a community who will probably cannot be held into account once some bad actor slips into their ranks

Open source software is everywhere. Do you think Microsoft or Redhat going to be held to account if they accidentally added some backdoored OSS code? Moreover all of the development happens in the open and you can build it yourself. I'm not sure what the alternative is. Just trust Apple has their shit together with iOS?
by PaulHoule | 2025-07-25 01:53:35+00:00
Part of the hard-right turn is that center left parties since 1990 have conceded to the Reagan-Thatcher-Merkel consensus that "we can't afford the welfare state" whereas hard right parties are saying "we can afford the welfare state if we throw out migrants"

In the big picture though it really should be the world vs the New China and not the US vs the world. When Japan was beating us in cars in the 1980s we got them to build cars here. We should be getting China to build state-of-the-art factories here: the biggest advantage they have is that they build "lights out" factories that need hardly any human labor -- like a mushroom factory in Shanghai where they stack them up hundreds of feet high and only handle them with forklifts. Thankfully they are building one of those in Texas:

https://mushroombusiness.com/news/finc-and-ocm-invest-in-us-...
by Art9681 | 2025-07-25 01:54:48+00:00
Does the Central Bank of Brazil publish data on the cost of running the network and how it is funded? Or is there a hidden tax that eventually makes its way to the customer in order to keep it going? Nothing is totally free. Who pays for the infrastructure costs, not to mention the legion of humans that it surely takes to maintain the network? Pretty sure that no matter what is published publicly, someone is paying for it, and that cost is being passed around the logistics chain and ends up on the prices of the products you buy. Sure, it may be much cheaper, but it's not totally free.
by ethbr1 | 2025-07-25 01:54:48+00:00
> Some customer agency or small claims court should be more fitting? Perhaps you're in a place where that just wouldn't work, fair enough, but the issue should be on why you don't have these laws or institution, not why there's no private middle-men fixing the deals.

In the US, this is effectively non-existent these days.

Best case, now rare, there isn’t an arbitration clause in the EULA, so you have individuals suing companies in small claims.

The problem there is scale.

A company can screw over a lot more people than people will spend time pushing back against a company. Because fundamentally, a company doesn’t give a shit about maintaining a relationship with an angry customer.

The benefit of using payment intermediaries to run arbitration is that the company does want to continue having a relationship with them and is therefore incentivized to care more about the case than they would otherwise.

Granted, there are a lot of ills from payment processors too! But waving a wand and suggesting bank to bank transfers alone fixes the issue is naive.
by throwaway-0001 | 2025-07-25 01:55:04+00:00
The main missing feature is password under duress that would open a different “user”. So even if you’re forced to give away your password they won’t get to the real account (some hidden profile or similar).

At least hidden profiles would be good enough for basic protection.

They have this which wipes your device, but you can get killed under duress. https://discuss.grapheneos.org/d/14722-using-duress-password...