MurphyA/hacker-news huggingface dataset:
by wat10000 | 2025-07-04 13:46:30+00:00
The browser having a larger attack service is an argument for the browser being more important to run in a VM, not less.

Maybe you never expose your terminal to untrusted data, but that’s not the norm. Most people occasionally do things in their terminals like clone repositories and look at their READMEs, ssh to computers they don’t own, read email, even browse the web.

Note that I’m not arguing that tmux must be rewritten in rust for security. I’m saying that C code is virtually guaranteed to have vulnerabilities, and this is a major reason why people want to rewrite things in rust.

If you want to argue that tmux doesn’t have any vulnerabilities, I find that very unlikely, but you do you.

If you want to argue that rewriting tmux in rust isn’t worth the effort, you may be right, but you’re arguing against something I didn’t say.
by bruce511 | 2025-07-04 13:47:05+00:00
I am not saying that the reality exists.

I'm saying that the blind acceptance of the status quo does not allow for that status to be questioned.

You see the welfare amounts, or retirement amounts as limited. Well then, what would it take to increase them? How could a society increase productivity such that more could be produced in less time?

Are some of our mindsets preventing us from seeing alternatives?

Given that society has reinvented itself many times through history, are more reinvention possible?
by donkeybeer | 2025-07-04 13:47:06+00:00
It's also not about sticking to what I already know for me. I don't currently know FORTRAN but wish to learn FORTRAN.

There are more factors to language use than design pattern fads. Like efficiency for example, which almost any modern garbage collected or managed language cannot meet beyond a certain level. And that usually gets worse the more "powerful abstractions" one adds. I want to learn FORTRAN because I have been told it has real benefits in terms of ergonomics for efficient code, ie normal looking FORTRAN code is faster than normal looking C/C++/Rust.

Efficiency is a real, concrete and measurable quantity. It is not subject to the fad of the day.
by corry | 2025-07-04 13:47:22+00:00
As an outsider but someone who spent a fair bit of time there in the tech scene, it seems like there's a really interesting piece waiting to be written about the juxtaposition of SF/SV culture (tech hedonism, psychedelics, affluence, utopian thinking, dislike of authority, social justice) and a seeming rise in leaders being openly religious (usually Christian).

Or maybe it was always there and now it's just more obvious since you can scroll a big name VC's IG account and see him posting Bible verses from his SoMa office.

I find it actually kind of nice that these things are mixing.

Maybe the world is poorer if people with different metaphysical beliefs completely self-segregate into closed communities, especially during these times of great change where our understanding of consciousness, physics, AI, and everything else is rapidly undermining a lot traditional positions on both sides of the aisle.
by ethbr1 | 2025-07-04 13:47:24+00:00
O_o That is insane.

We can quibble over a reasonable length of an embargo, but it's not infinite.

Snape killing Dumbledore or Leia being Luke's sister or Paul Atreides becoming God-Emperor shouldn't shock anyone.

Media is released. People consume media. At some point, everyone who is interested can reasonably be expected to have consumed it.
by tekkk | 2025-07-04 13:48:14+00:00
Just appalling. Someone publishes a post about their WIP project reaching an important milestone, and here comes the naysayers whining about the fact it's not finished yet.

Did you even the article? He clearly states his aims to convert it to safe rust. And for the code size, he clearly hasn't needed to optimize it yet and I don't think you necessarily want to code golf codebase like this.
by diggan | 2025-07-04 13:48:14+00:00
I dunno, even after considering that move, I'll continue to publish FOSS like before.

I always did it without any expectation of gains from it, and with the intention for people to use it for whatever they want. That calculation hasn't changed, even considering machines will slurp it up now.

I do agree that it sucks for people who do care about what the code is used for, and I hope these people migrate to other licenses that support their ideas about control and ownership.
by skydhash | 2025-07-04 13:48:39+00:00
> But you have to consider the task just like if you handed it over to a person with absolutely zero previous context,

Which no one does. Even when hiring someone, there's the basic premise that they know how they should do the job (interns are there to learn, not to do). And then they are trained for the particular business context, with a good incentive to learn well and then do the job well.

You don't just suddenly wake up and find yourself at an unknown company being asked to code something for a jira task. And if you do find yourself in such situation, the obvious thing is to figure what's going on, not "Sure, I'll do it".
by Trenthug | 2025-07-04 13:49:01+00:00
This paper presents a descriptive model of consciousness based on information theory

The aim is to enumerate definitely described aspects of consciousness and present them in a coherent manner,talks about both phenomenal Consciousness (seen as attention)and access Consciousness,

Some aspects described about consciousness might seem akin to karl friston's view of defining brains as Bayesian inference machines, Wittgenstein's private language argument and Tononi's IIT usage of a complexity metric(amount of information) for measurement purposes with some subtleties of of it's own to add .

The part about choosing a method of measuring complexity seems to be something that can be looked over by a logician to get it refined for the models usage, some thought experiments are there in that regard which might be worth looking into or to check their validity.
by glasscannon | 2025-07-04 13:49:17+00:00
> The problem, CBD never fixes the pain. ~8 hours later you need more.

100%, medication plays a great role in providing comfort and support but it can be ineffective (and often harmful) if relied on solely for recovery from (neuroplastic) chronic pain.

> There's no business case for solving chronic pain

It seems some parties may be incentive aligned (e.g. insurers in Australia) - though I'm still navigating this space to find an approach which makes solving the root cause viable. Keen for your thoughts.

> 1.

Sorry to hear about your friend. This is often referred to as a structural diagnosis - i.e. where a knowledgable/proficient doctor has diagnosed there is legitimate tissue (nociceptive) or nerve (neuropathic) damage.

> 2.

Yep! This is what the series will be targeting, data points to a substantial percentage of chronic pain sufferers solely (or partially in comorbidities) being impacted by psychological disorder (otherwise known as neuroplastic pain / TMS / and a few other names!). There are a lot of causes and factors which have been shown in research to date, but largely it's adverse childhood experience, stress, personality traits, and more.

Will check out that vid!

> 3.

Related to this, there is an exercise called somatic tracking which has helped many people (including myself) - during it people often notice pain shifting throughout your body. This was a big turning point for me seeing how my mind behaves in real time. https://www.youtube.com/watch?v=Lw1D_UvzIDA
by pietrushnic | 2025-07-04 13:49:36+00:00
Sovereign Boot Provisioning Wizard is a UEFI application designed to guide end users through the provisioning of UEFI Secure Boot. The objective is to offer a user-controllable mechanism for managing platform trust relationships and establishing UEFI Secure Boot infrastructure, with a primary focus on transparency, informed consent, and usability.

Unlike traditional firmware interfaces, which expose UEFI Secure Boot as a collection of loosely connected toggleable settings and unmanaged certificate stores, this application presents a coherent, wizard-like experience. Its purpose is to make the process of reviewing and enrolling platform keys intuitive for users who are not security experts.

https://docs.dasharo.com/projects/sovereign-boot-wizard/
by M4v3R | 2025-07-04 13:49:46+00:00
> the leverage you get out of it is exponentially proportional to the quality of your instructions, the structure of your interactions, and the amount of attention you pay to the outputs

Couldn't say it better myself. I think many people get discouraged when they don't get good results without realizing that for good results you need to learn how to interact with these AI agents, it's a skill that you can improve by using them a lot. Also some AI tools are just better than others for certain use cases, you need to find one that works best with what you're doing.

When it finally clicks for you and you realize how much value you can extract from these tools there's literally no coming back.
by dgacmu | 2025-07-04 13:50:34+00:00
I'm not the GP, but for my ads-b decoder, it runs on a Pi Zero 2W, which at the time cost under $15 and draws very little power. It's convenient having the computer right next to the antenna to avoid thinking about cables. Runs for a couple days on 100Wh of backup battery.

(I personally find a ton of value out of the Pico and the zero, and less out of the main main, higher powered raspberry Pi line)
by hedgehog | 2025-07-04 13:51:03+00:00
I've used Copilot a bit and found it helpful for both coding and maintenance. My setup is pretty basic, and I only use it in places where the task is tedious and I am confident reviewing the diff or other output is sufficient. Things like:

"Refactor: We are replacing FlogSnarble with FloozBazzle. Review the example usage below and replace all usage across the codebase. <put an example>"

"In the browser console I see the error below. The table headers are also squished to the left while the row contents are squished to the right. Propose a fix. <pasted log and stack trace>."

"Restructure to early exit style and return an optional rather than use exceptions."

"Consolidate sliceCheese and all similar cheese-related utility functions into one file. Include doc comments noting the original location for each function."

By construction the resulting changes pass tests, come with an explainer outlining what was changed and why, and are open in tabs in VS Code for review. Meanwhile I can spend the time reading docs, dealing with house keeping tasks, and improving the design of what I'm doing. Better output, less RSI.
I quit my job to build Finyo – convert USDT/ETH to INR same day
by sasikumardas | 2025-07-04 13:51:21+00:00
Most options today are either slow, peer-to-peer, or come with friction. Finyo is built for freelancers, NRIs, and DAO contributors who need fast, compliant crypto payouts straight to their Indian bank account or UPI.

It’s early, but I’ve opened up a waitlist. Feedback is welcome — especially around trust, compliance, or go-to-market.

Join the waitlist - finyo[dot]co
by CoastalCoder | 2025-07-04 13:51:25+00:00
> but what is described here is not a reasonable compromise between safety and producing a car

That's my intuition as well. But the questions (for me) remain:

What are the acceptable tradeoffs in this scenario? And acceptable to whom?

What ethical framework do we have for deciding that one particular solution is more acceptable than another, and why should we all agree on that framework?

And is viewing this as simply a 1D tradeoff of passenger safety vs. corporate profits the most useful way to frame the issue?
by diggan | 2025-07-04 13:51:53+00:00
I don't understand the argument, I haven't said humans act like that, what I said is how you have to treat LLMs if you want to use it for things like that.

If you're somehow under the belief that LLMs will (or should) magically replace a person, I think you've built the wrong understanding of what LLMs are and what they can do.
by chrismorgan | 2025-07-04 13:52:34+00:00
Your site talks of BunkerWeb PRO, which is, by the sound of it, not open source. But I have no idea what is actually different about it: https://panel.bunkerweb.io/knowledgebase/105/What-is-BunkerW... flatly doesn’t answer the question: “additional features and services responding to professional needs” is impressively vague.
by bruce511 | 2025-07-04 13:52:34+00:00
When you vote for a guy who plans to raise prices, when you vote for a guy who already tried to remove Healthcare, when you vote for a guy who gives tax breaks to the rich, when you vote for a guy who is a grifter, then don't complain when you get what you voted for.

People are welcome to whatever preference they like. Democracy let's them choose. But US democracy is deliberately planned to prefer the "no one wins" scenario. That's not the democracy most of the world uses.
by steppi | 2025-07-04 13:52:49+00:00
Very cool project. If you haven't already, for JAX and PyTorch support take a look at the Python Array API Standard, https://data-apis.org/array-api/latest/, and see https://data-apis.org/array-api-compat/ for how to use it. If you have or can write everything in terms of the subset of NumPy supported in the Array API Standard, you can get support for alternative array libraries almost for free.
by agentultra | 2025-07-04 13:52:57+00:00
I recently confirmed that people have been fired this year for not using AI products in their work. The exec's reasoning: it's like hiring a carpenter that refuses to use power tools.

Never mind that the analogy makes little sense. We're not in the realm of enhancing labour power with additional tools to make us more productive. We're deep into alienation and exploitation. All of this added productivity and you'll continue working the same hours or more while your colleagues are laid off and let go. No labourer will see the additional profits from this increased, "productivity." Those let go aren't going to be protected from losing their homes and careers.
by donkeybeer | 2025-07-04 13:53:28+00:00
How many users and eyes do these "low CVE" Rust, Go whatever projects have?

While I'd hardly disagree C and even C++ is lacking in memory safety compared to some newer languages, you are forgetting to normalize for sheer scale and userbase. If you have a Go project with the scale of popularity of Linux or Chrome or so on, then we can compare bug counts directly.
by t0mek | 2025-07-04 13:53:33+00:00
Not a tutorial per-se, but here are 2 slides describing how I've done it:

https://www.slideshare.net/slideshow/emulating-game-boy-in-j...

Essentially, there are 4 channels, each providing a number 0-15 on every tick. Emulator should mix them together (arithmetic average), scale up to 0-255 and feed to the sound buffer, adjusting the tick rate (4.19MHz) to the sound output rate (e.g.: 22 kHz) - taking every ~190 value (4.19MHz / 22 kHz) is a good start.

Now the 0..15 value that should be produced by each channel depends on its characteristics, but it's well documented:

https://gbdev.gg8.se/wiki/articles/Gameboy_sound_hardware

Channels 1 and 2 produce square waves, so a bunch of low (0) and high (15) values, with optional volume envelope (gradually going down from 15 to 0 on the "high" part of the square) and frequency sweep (alternating 0s and 15s slower or faster).

Channel 3 allows an arbitrary waveform, read from the memory.

Channel 4 is a random noise, generated by the LSFR.

See SoundModeX.java for the reference:

https://github.com/trekawek/coffee-gb/tree/master/src/main/j...
by mattgreenrocks | 2025-07-04 13:53:51+00:00
I’ve been dealing with chronic reflux for about 8 mos now. On PPIs and they don’t seem to do much. But once I get away from my typical routine of work/dadding then all the symptoms vanish, even to the point of being able to eat foods that are not good for reflux: spicy things, tomatoes, a bit of coffee. In my case, this is absolutely a downstream symptom of something mind-body. Already been scoped and got a diagnosis of visceral hypersensitivity, which is medical speak for “nerves in esophagus are too sensitive.”

The question of why is out of scope.

In this case, docs just don’t know why. (I think it kinda pisses them off not know, tbh). And finding out is not really in their wheelhouse.

I’ve made some life changes (new job) to see what happens here. But I also have to be prepared for the possibility that it doesn’t fix it. Been working through The Body Keeps The Score as well.

Looking forward to seeing what the author discusses here.
by sfn42 | 2025-07-04 13:54:05+00:00
I can't remember a whole route just from looking at the map once. Also maps generally don't show whether streets are one way and things like that.

I just type the address into Google maps, or place a pin manually, then hit the start button. It'll tell me every step of the way. Keep right at the fork. In a hundred meters, turn left. Turn left. Take the second exit in the roundabout. Your destination is a hundred meters ahead on the right.

It's great and it works almost flawlessly. Even better if you have a passenger able to keep an eye on it for those times when it isn't flawless.
by kadirertancam | 2025-07-04 13:54:09+00:00
Hi HN!

Over the past few months, I've been building JustDesk, a remote desktop solution that runs entirely in the browser, with no installations or plugins required.

JustDesk uses WebRTC for peer-to-peer connections and aims to offer a fast, secure, and accessible alternative to traditional remote desktop tools. It's ideal for users who need a quick and simple way to share their screen or control another device — without dealing with setup pain or security headaches.

Tech Highlights Frontend: Next.js 14, React 18, Tailwind CSS

Backend: Node.js, Express, Socket.IO

Real-time Communication: WebRTC (P2P)

Infrastructure: Docker, Redis, Nginx

Security: End-to-end encryption, JWT authentication

Current Features Instant screen sharing (browser-to-browser)

No downloads or extensions required

Low latency peer-to-peer connections

Cross-platform support (Windows, macOS, mobile browsers)

Enterprise-grade security model

Coming Soon File transfer

Voice chat (VoIP)

Session recording

Mobile app (React Native + WebRTC)

SSO integration (SAML / OAuth2)

Analytics dashboard

WebAssembly-based performance optimizations

Live Demo You can try it directly in your browser: https://justdesk-1.onrender.com

I'm actively developing this and plan to make it open source soon. I'd love your feedback, suggestions, or any questions you might have!

Thanks for reading — Kadir
by lproven | 2025-07-04 13:54:13+00:00
> GNU screen would like a word.

Screen, tmux, byobu, dvtm, mtm, Twin, and most of all Zellij, which is basically "tmux but redone in Rust".

I tried to compare them all a month ago:

https://www.theregister.com/2025/06/24/tiling_multiplexers_s...
by varispeed | 2025-07-04 13:54:18+00:00
I got RPi 5. Wanted to create a little server for my files, source code repository etc. I bought it with NVMe hat. Gone through 3 1TB drives that supposed to be compatible with it. Unfortunately none of it was stable. File system would have weird errors, but on top of that networking would go out after few hours or days and RPi would need a hard reboot.

I just threw the RPi into the drawer and bought N100. Installed WSL on Windows 11 and everything just works. It's been up for almost a year now, not a single reboot or network problem.
by daeken | 2025-07-04 13:54:24+00:00
I mean ... You're not completely wrong, but you're not completely right either. For context: I've been working full-time in security for 15 years and on the fringes (reversing) for many more.

WAFs in and of themselves provide virtually zero security. They can block naive attacks -- catching the most obvious payloads -- and act as an early-warning signal that an attack may be underway (though the SNR on this is awful). But frankly, this is far less important in practice than the fact that it just makes things more difficult and annoying for attackers. Enough so that it can make a semi-attractive target into a no-go.

This is like defense-in-depth, but instead of layering protections in place so that the holes in the swiss cheese don't like up, you're making the cheese smell awful enough to ignore the juicy apple behind it.

If you're a valuable enough target, they're gonna go for the apple regardless of how bad the cheese is. ... And this analogy may have gotten away from me.
by incomingpain | 2025-07-04 13:55:37+00:00
I havent tried claude code before, im not a paying customer.

>Gemini rarely gets the hint when I express annoyance with its output.

Ive noticed this, but you close out gemini, immediately go back in and suddenly it works great.

>- Gemini once kept using an old version of a file I had updated by hand, despite me asking it several times to re-read the file. It also sometimes proposes empty changes.

Ive had this happen several times now. Kept reverting my changes. Close out gemini, reopen fixes.

>Gemini's format for proposing changes in the terminal is such that you often can't make you out what's actually changing

For python i havent experienced this. it gives me it well every time.

>Gemini's permission systems is not as usable as Claude Code's.

I never trusted it with any permission. Im not sure id do any different with claude.

>Claude can be started with an initial prompt and still retain interactive mode. This option is useful for priming the session with instructions in a more direct way that CLAUDE.md. As far I can tell, Gemini can't anything similar.

No, i havent seen anythinglike this. Im not sure what you mean.

>I guess the thing going for it is that it has a free tier of use, and the core intelligence is probably about on par with Claude. But it's slow too.

Free for the win. Main reason I havent tried claude code. Even the claude pro, their limits are 45 queries per 5 hours? Like wow ill blow through that in minutes.
by CuriouslyC | 2025-07-04 13:55:57+00:00
There isn't any more theft in this than in artists copying the styles and techniques of popular artists to improve their craft.

This is 100% just the mechanization of a cultural refinement process that has been going on since the dawn of civilization.

I agree with you regarding how the bounty of GenAI is distributed. The value of these GenAI systems is derived far more from the culture they consume than the craft involved in building them. The problem isn't theft of data, but a capitalist culture that normalizes distribution of benefit in society towards those that are already well off. If the income of those billionaires and the profits of their corporations were more equitably taxed, it would solve a larger class of problems, of which this problem is an instance.
by glasscannon | 2025-07-04 13:56:28+00:00
Thanks for sharing this.

Very much agree it's critical to get an accurate assessment, ideally from a doctor who understands pain science to rule out a structural cause. In saying this, I recognise many practitioners are not fully across this so I'm hoping this series will help increase awareness.

This first blog is meant as a quick intro to the series - blog post #2 will break down the different categories of chronic pain (i.e. broadly including tissue, nerve damage and pain due to brain plasticity - what the series is primarily focused on).
by b112 | 2025-07-04 13:56:40+00:00
I bought a PS2 from a guy decades ago, back when a chip hack broke Sony's copy protection.

His deal was you pay him, he'd then walk across the street to FutureShop, buy the PS2, and do the hack.

So he bought the chips, had them in stock, but didn't invest capital in the rest.

You could easily do the chip hack yourself, but you risked bricking the beast, due to lack of experience.

So the $50 was worth it, chip included.

I'm sure you could do the same with TV hacks, so upfront capital costs are minimal, with reduced risk.