MurphyA/hacker-news huggingface dataset:
My Cybersecurity Research on Red Lion G3 Web Server Vulnerabilities
by hacker_might | 2025-07-14 19:05:23+00:00
Checkout my latest research on Red Lion OT device

https://medium.com/@hacker_might/when-industrial-iot-devices-are-left-open-my-cybersecurity-research-on-red-lion-g3-web-server-a910d242d6b0
by mindslight | 2025-07-14 19:05:40+00:00
One of the big ones is the calling to naively eliminate government regulation, imagining that will always make things "more free", while ignoring that corpos are perfectly willing to create private regulations on their own. This often ends up amounting to facilitating de facto government, despite some epsilon of choice.

There are many more-specific examples of this, but maybe a straightforward and less-partisan one is how the (incumbent) electronic payment networks ban a whole host of types of uses, and do so basically in lock step, despite those uses not actually being illegal. That is private regulation, not even accountable to the democratic process by default. And it avoids becoming accountable by fooling people with narratives of "avoiding regulation".
by freedomben | 2025-07-14 19:07:28+00:00
That's a bit more than I have (Starlink), but anytime a kid is downloading a big Steam game or big ISO file or something, everything else slows to a crawl. I also occassionally rsync large directories to/from cloud storage and that can also saturate. I've tried setting rules/priorities but it's a constant game of whack-a-mole
by kevindamm | 2025-07-14 19:07:47+00:00
I'm just speculating but you'd get to use the IP without needing to negotiate overmuch about it, if they're using GCP or can be retrofitted to then you could set prices at a discount but claim a market rate when discussing growth of usage, which is great at quarterly earnings report time.. or even just as an ease-of-transition to expand into Windsurf's existing user base? There are plenty of reasons, including negotiation leverage, optics, or even just appeasment to the founders or board that the original project doesn't get immediately destroyed.
by hellojesus | 2025-07-14 19:07:55+00:00
Those smaller tribes were continuously at war over resources... It's exactly the behavior we observe in nature whenever resource scarcity presents.

A world without private property leads to a world of pure lawlessness. Sure... We could do that, but it would quickly devolve into forever warfare where only might wins, and even that for only fleetingly small timeslices.

History's progression has proven that exploited workers still prefer to exist in that system vs one of continual peril.
by jgalt212 | 2025-07-14 19:08:23+00:00
reverse discrimination under the guise of DEI is a real thing.

> not a single white American man born after 1984 has published a work of literary fiction in The New Yorker (at least 24, and probably closer to 30, younger millennials have been published in total).

I have friends in academia who had in the recent past been told not to hire any more "white guys".

Examples abound to justify DEI phobia.
by mattmanser | 2025-07-14 19:08:36+00:00
What's with the body shaming mate?

I literally have no feeling of 'full'. I used to. I have no idea when it stopped working, but it definitely stopped working.

You can't know what I feel. I can't know what you feel. I'm fit, I have zero appetite control.

If I stop doing tons of exercise, boom, problems. I got old, I stopped moving as much, boom, problems.

People like you are part of the problem, not the solution.

Honestly, you wouldn't say this shit to someone's face.

It was honestly hard enough posting this here in the first place and then a dick like you comes along.

Cheers thanks for ruining my day you prat.
by troupo | 2025-07-14 19:09:00+00:00
> The problem is that you pass DMA,

Doesn't apply to your medium-sized company

> DSA,

Basically says "customers have the right to not be profiled and are entitled to not be shown algorithmic feeds"

> GDPR

Costs about 0 to implement as long as you only user data as intended, and not sending it off to 2763 "partners" who "respect your privacy".

What "insane regulatory burden" are you talking about?

> can fight for years in court and if they have to pay a few billion, so be it.

The only reason these poor poor innocent trillion-dollar supranational corporations fight these laws in court is because they really don't want anyone competing with them, or to respect such minor things as user privacy. Not because the laws are somehow bad or complicated.

Even DMA, the most complex of them all, can be understood by anyone.
by Imustaskforhelp | 2025-07-14 19:09:03+00:00
After you said that google login didn't work, since I had also used github login, I wanted to tell that github login had worked for me, but you beat me to it!

I think Auth can be a bit of mess, but yes Its still absolutely great that I can just login with github and it just works, I am trying out Kiro right as we speak!
by rayiner | 2025-07-14 19:09:11+00:00
I’ve been hearing about “captured government” with respect to fiber deployment for two decades now and the folks on that soap box have made absolutely zero progress on improving deployment of fiber infrastructure in that time. Tilting at that windmill isn’t working, because for the most part that’s not the real problem.

Why isn’t the Bay Area a hot bed of fiber deployment? You think Comcast in Philly has more pull with Cupertino and Mountain View than Google and Apple? No! Internet in the Bay Area is shit for the same reason all the infrastructure in the Bay Area is shit. The government makes it slow and difficult to build anything.

Comcast installed fiber to my house back in 2018 or so. The permitting took months. And this was to run Comcast fiber on poles where Comcast already had their own cable lines. And my county is actually pretty efficient with permitting. It’s just that American municipalities absolutely hate it when anyone builds anything.
by mrweasel | 2025-07-14 19:09:11+00:00
> I've had less than 0.5% of customers ask for IPv6 from my fibre ISP

How many ask for IPv4? I understand your situation, it's a lot of work, for something that many won't notice. It's just that saying there's no demand because your average consumer, who also doesn't know what IPv4 is, isn't asking for it, is the mentality that keeps IPv6 from being implemented.

On the funnier side of things, we've also sometimes run into the opposite problem that we can't reproduce an issue, because it's only on IPv4 and 95% of the time everything we do is IPv6. But we're also not serving home users.
by trey-jones | 2025-07-14 19:09:17+00:00
Doing my own post-mortem of a recent project (the first that I've leaned on "AI" tools to any extent), my feeling was the following:

1. It did not make me faster. I don't know that I expected it to.

2. It's very possible that it made me slower.

3. The quality of my work was better.

Slower and better are related here, because I used these tools more to either check ideas that I had for soundness, or to get some fresh ideas if I didn't have a good one. In many cases the workflow would be: "I don't like that idea, what else do you have for me?"

There were also instances of being led by my tools into a rabbit hole that I eventually just abandoned, so that also contributes to the slowness. This might happen in instances where I'm using "AI" to help cover areas that I'm less of an expert in (and these were great learning experiences). In my areas of expertise, it was much more likely that I would refine my ideas, or the "AI" tool's ideas into something that I was ultimately very pleased with, hence the improved quality.

Now, some people might think that speed is the only metric that matters, and certainly it's harder to quantify quality - but it definitely felt worth it to me.
by ploxiln | 2025-07-14 19:09:34+00:00
> mega funds and giga corps throwing ridiculous cash for pay to win

> This is just M2 expansion and wealth concentration

I actually think "throwing ridiculous cash" _reduces_ the wealth concentration, particularly if a chunk of it is developer talent bidding war. This is money that had been concentrated, being distributed. These over-paid developers pay for goods or services from other people (and pay income taxes!). Money spent on datacenters also ends up paying people building and maintaining the data-centers, people working in the chip and server component factories, people developing those chips, etc etc. Perhaps a big chunk ends up with Jensen Huang and investors in NVidia, but still, much is spent on the rest of the economy along the way.

I don't feel bad about rich companies and people blowing their money on expensive stuff, that distributing the wealth. Be more worried of wealthy companies/people who are very efficient with their spending ...
by troupo | 2025-07-14 19:10:00+00:00
> user-initiated activity isn’t really anything they can control.

> Once the user takes over, all tricks for efficiency go out the window. The user could run anything.

Erm. In case of the start menu and task bar, where they are pretending that showing servings is an issue, they do have control of a lot of things.

Somehow they split hairs over showing seconds, but are perfectly okay with web views in the task bar and in the start menu, and are perfectly okay with components in React Native.

> I agree that using web tech to render things in the OS is silly, but Microsoft has been doing it

Yes, they have been doing it. Somehow the "power team" that supposedly had ultimate control over what gets displayed had no issues with that
by Expurple | 2025-07-14 19:10:01+00:00
> Also, why hedge everything you're about to say with a big disclaimer?:

Because her previous (Telegram-only) post on a similar topic has attracted a lot of unfounded negative comments that were largely vague and toxic, rather than engaging with her specific points directly and rationally.

She even mentions it later in this post (the part about “worse is better”). Have you not read that? Ironically, you're acting exactly like those people who complain without having read the post.

> What does this have to do with AI?

It's literally explained in the same sentence, right after the part that you quote. Why don't you engage more specifically with that explanation? What's unclear about it?
by dmitrygr | 2025-07-14 19:10:27+00:00
Are you seriously suggesting that becoming more regulated like bridge/building builders is GOOD for software?

You sure you are ready to freeze all innovation forever? Cause there is a well documented inverse relationship between regulation and innovation. (Small teams cannot afford compliance officers and other such dross. Big ones do move fast, and, without competition from the smells, do not need to)
by troupo | 2025-07-14 19:10:38+00:00
> The road to hell being paved with good intentions and all.

Why are we assuming good intentions from a company who for years has increased places and amounts of data it collects and tracks, and removed more and more ways to opt-out of this?

The intention of "search web first before searching local computer even if the user never asked for it" didn't appear from the intent of "let's create a keylogger", but it never came from a good innocent intention either.
by gosub100 | 2025-07-14 19:10:50+00:00
> Please don't use Hacker News for political or ideological battle. It tramples curiosity.

This is the core of the problem. Political posts should be prohibited on here, because each one of these discussions turns into political battle. It wasn't nearly this bad a decade ago. Now there is just no seeing eye to eye with anyone. It's full on "my tribe vs their tribe. My tribe better!". This place would be a lot better for everyone with a "computers or GTFO" rule.
by nailer | 2025-07-14 19:10:59+00:00
> Existing law prohibits the department from selling the data or from making the data available to an agency that is not a law enforcement agency or an individual that is not a law enforcement officer.

Seems like the law was explicitly written to allow sharing data with other law enforcement agencies then narrowed down by Code, § 1798.90.5, subd. (f). https://codes.findlaw.com/ca/civil-code/civ-sect-1798-90-5/
by uniqueuid | 2025-07-14 19:11:35+00:00
The causal links in this analysis are very heterogeneous.

Some causes for accelerated aging seem relatively direct and plausible with causal models that have supporting literature, i.e. air quality.

On the societal level, it's much more complicated. For example, there will be an immense number of paths how education affect aging, some positive and some negative.

I wonder how much of those effects boil down to a few highly influential (unobserved?) covariates, such as physical activity, drug consumption and crime rate.

[edit] by the way, look at the replication materials - I've rarely seen such clean code. Kudos!

https://github.com/euroladbrainlat/Biobehavioral-age-gaps/bl...
by logicchains | 2025-07-14 19:11:45+00:00
Any biological effect on the relative speed at which individuals age would be far dominated by the actual huge increases in average population age that countries are seeing (e.g. the mean age in Germany is now over 45 years). Not only does an older population mean a more conservative population, because people on average are more conservative when they're older, but an aging population also means each young person has to support more and more retirees, putting an increasing burden on the living standards of Gen Z that causes some to doubt the fairness of the system they inhabit.
by SyrupThinker | 2025-07-14 19:12:01+00:00
That sounds too good to be true, and it seems like they are indeed introducing a usage system similar to their competitors next month?

> Starting August 1, 2025, we’re introducing a new pricing plan for Amazon Q Developer designed to make things simpler and more valuable for developers.

> Pro Tier: Expanded limits $19/mo. per user

> 1,000 agentic requests per month included (starting 8/1/2025)

- https://aws.amazon.com/q/developer/pricing/

Previously agentic use was apparently "free", but with a set deadline in June, so it seems like this was just for a testing phase?
by Buttons840 | 2025-07-14 19:12:35+00:00
Hello Cognition AI,

My name is Devin; it has been for many decades now. I'm embarrassed to see you've named your product after me. It has already prompted uncomfortable jokes at my expense, and I'm sure there will be more. I now have newfound empathy for people named Alexa.

For instance, people have made jokes about my name in interviews, and it's embarrassing for me, and thus awkward for everyone, and awkward interactions make it objectively less likely that I will get job offers.

I don't think any product should be named after people. Please change the name of Devin.
by williamcotton | 2025-07-14 19:12:37+00:00
Just this past week I've been working on a toy/experimental web DSL [0] that uses dynamically loaded shared libraries as middleware that pass per request arena-allocated Jansson json objects between steps in a pipeline. It's extensible in that new middleware can be created. Influenced by bash and OCaml/F#, here is some kind of demo of the syntax:

POST /api/users |> validate: ` name: string(3..50) email: email age?: number(18..120) team_id?: number ` |> jq: `{ sqlParams: [.body.name, .body.email, .body.age] }` |> pg: `INSERT INTO users (name, email, age) VALUES ($1, $2, $3) RETURNING *` |> result ok(201): |> jq: `{ success: true, user: .data.rows[0] }` validationError(400): |> jq: `{ error: "Validation failed", field: .errors[0].field, rule: .errors[0].rule, message: .errors[0].message }`

I'm generally curious as to how jyn thinks this would fit in to their box-based framework.

[0] https://github.com/williamcotton/webpipe
by servercobra | 2025-07-14 19:12:45+00:00
Same experience. I was using Windsurf for a couple of weeks, but felt like the editor wasn't as nice to use as Cursor, so features an agent could handle went to Windsurf and pair coding was more with Cursor. Once Cursor got agent mode, I haven't really touched Windsurf.

Feels like a new SOTA tool every couple weeks. Heck, the post below this is about a new agentic IDE.
by kubb | 2025-07-14 19:12:48+00:00
Unpopular, controversial take: there should be an LSP extension that lets CLI agents, like Claude Code show diffs in the editor, and also one for completions, and sending snippets back to the CLI.

That, by itself, would obliterate the entire value of Windsurf or Cursor or whatever. The fact that Google has this kind of money and spends it on dubious "talent" (though none of these people are known in the community) is a testament to how overfunded tech companies are compared to the value that they provide.
by sharma-arjun | 2025-07-14 19:13:08+00:00
That's a fair critique, although I think you could mitigate that by decreasing the desired arclength - reducing Del S to 0.5 from 0.85 in your example mostly fixes the problem.

In the context of the game described in the post, the main variable we were concerned about was u_x, because we scaled difficulty by increasing it over time. This in fact results in flatter parabolas, so I actually had quite the opposite concern of what you outlined and might have over-optimized in that direction!

Thanks for taking the time to read and try out what's described in the post. It's my first time working on a technical blog, and I'm extremely grateful for any constructive feedback / criticism :)
by bcrl | 2025-07-14 19:13:10+00:00
Fibre is orders of magnitude better than DSL or cable as entire classes of problems are eliminated. Water shorting out copper pairs? Not a problem unless the water gets inside a splice and freezes causing significant bends that lower signal levels. Water getting into a cable is generally not an issue as most cables are either gell filled or have water blocking tapes. Lightning strikes are generally a non-issue since the cable isn't going to conduct a damaging charge into the ONU/ONT.

With careful selection of the customer ONU/ONT, the incidence of support calls means that it can be weeks between customer issues on smaller networks. These days my biggest support headache is in house wireless coverage. It's also the one part of internet service that most people are unwilling to invest even small amounts of money to improve. The worst are the folks that install outdoor wireless security cameras without thinking ahead to putting them on a dedicated network to avoid driving up airtime usage and congesting the main wireless AP.
by hellojesus | 2025-07-14 19:13:18+00:00
My life, yes, but my genetic lifeline exists up to and including eternity if luck and good decision making are on the side of my generations of offspring.

Let's consider the most basic form of ownership: that over one's body. By your logic, my life is a spec on the eternal timeline, so why make it a crime to harm or murder my physically?
by leoqa | 2025-07-14 19:13:29+00:00
The use was audited and is now being investigated. The claims were for various local and federal investigations. ICE also contains HSI, the second largest federal law enforcement agency, which prior to their recent mandate has been tasked to solve sex trafficking, import fraud etc. SF has multiple large inter-agency task forces that run multi-year long investigations into all types of crimes. HSI is part of those investigations. Querying flock to establish a suspect’s presence during the commission of a crime seems like it’s within the bounds of reasonable use.
by Expurple | 2025-07-14 19:14:11+00:00
> the sheer volume of capital behind this tech is enough to roll over all the feeble cries of impotent rage.

This part is true. But at the same time, it's fairly easy to filter only real, established personal blogs and see that the same type of "practical" AI discourse (that the author dislikes) is present (and dominates) there too.
by freeplay | 2025-07-14 19:14:15+00:00
> healthy food should be more affordable and readily available

I think there's more than one way to achieve that. It doesn't have to be bans or subsidies. A lot of it has to do with education and competition. Unfortunately, they are kind of a circular dependency.

- There's so much cheap, highly processed food out there. The companies pay for prime real estate on the shelves and expensive marketing. It is chemically engineered to exploit your pleasure senses when you eat it. That is a hard beast to fight without proper education. And not just the food pyramid, but in depth explanations on why you should avoid it and what to eat instead. There are large groups of the population that have no idea that pop tart or cereal are not a healthy breakfast option.

- If there were more companies creating and promoting healthy, less-processed food options, the price would naturally comedown due to competition. But without the education, these products just do not sell as well. If I gave you some natural peanut butter or almond butter (just almonds or peanuts - 1 ingredient) and I gave you a jar of a more common peanut butter like JIF (sugar + hydrogenated oil for better consistency) and you had no other information at all, you're choosing JIF 10 out of 10 times. It's cheaper, it taste better, and you don't have to stir it. These megacorps prey on that lack of knowledge.

More education -> make better choices when buying -> more companies selling those choices -> cheaper prices on those choices.
by gruez | 2025-07-14 19:14:17+00:00
>We filtered out all spatiotemporal edges in the entity graph with an implied speed of <300 kilometers per hour or <200 kilometers distance, IIRC. This was the proxy for "was on a plane". It also implicitly provided the origin and destination.

Sounds like the bigger issue is that you're able to get "spatiotemporal" data in the first place? Otherwise it's like saying "we can figure out all stores you've been to, if we have your credit card transaction history". Sure, it's kinda creepy that you can figure out which stores I went to, but the bigger problem is that you can get the transaction data in the first place. Moreover whatever "spatiotemporal" data needed to reconstruct such flight history is probably more valuable than the flight history itself. Who cares if you know Joe flew on United 8340 when you have hour-by-hour updates on his rough location?
by ben_w | 2025-07-14 19:14:47+00:00
> In my humble opinion, left-wing means being against the hegemonic status quo.

Originally it was literally just a seating plan. The left wing was the wing of the assembled politicians that were *physically on the left*.

But if that's your definition, it would make capitalists the "left wing" of Cuba.

> The actions of many Trots is and was to collaborate with the right, collaborate with western hegemony, attack the left, and trash actual existing leftism in the world.

That far left is a circular firing squad, IMO.

(I assume the same about the far right, except the bits of the far right that get in the news seem to have "circular firing squad" less metaphorically and more literally).

But her actions were, and continue to be, doing everything in her power against the right wing. I think she even managed to get arrested for some protest or other against, IIRC, a US defence sector company. She happens to find the left of the Overton Window to be too right wing. As do I, but then, I moved from the UK to Germany to get away from the politicians and politics I can't stand, while she works in a trade union (in the UK) to support the workers who need help and make a positive difference.

> If your ex is a Nazi leftist (Strasserites etc) or a communist Zionist who loves apartheid you’d presumably understand how useless political labels can be and not wonder “Sooooo… who's the in-group?”

The British SWP, not the American SWP:

https://en.wikipedia.org/wiki/Socialist_Workers_Party_(UK)#A...

The US one is reportedly pro-Israel, the UK one appears to be pro-Palestine: https://socialistworker.co.uk/news/swp-conference-2024-pales...