MurphyA/hacker-news huggingface dataset:
by rcruzeiro | 2025-07-25 12:03:37+00:00
Systems like these are very common in Europe. Here in Norway, you can pay for almost anything, anywhere with Vipps. It works very similarly to Brazilian Pix. Another system I have used in the past is the Portuguese MBWay which although similar to Pix and Vipps, doesn’t seem to be as widely adopted as the former.
by sparkie | 2025-07-25 12:03:54+00:00
Arguably, you can get rid of "primitive types" entirely. xtc-lang's "Turtles type system" does so, where all the built-in types are defined in the standard library, where the definitions are infinitely recursive, but we have a fixpoint which we can use as if it were "primitive".

> The Ecstasy type system is called the Turtles Type System, because the entire type system is bootstrapped on itself, and -- lacking primitives -- solely on itself. An Int, for example, is built out of an Array of Bit, and a Bit is built out of an IntLiteral (i.e. 0 or 1), which is built out of a String, which is an Array of Char, and a Char is built out of an Int. Thus, an Int is built out of many Ints. It's turtles, the whole way down.

[1]:https://xtclang.blogspot.com/2019/06/an-introduction-to-ecst...
by joyeuse6701 | 2025-07-25 12:03:57+00:00
Too many examples of the discharge happening in YouTube and Sig gaslighting the public about it and blaming liberals made it even worse. The gun had a recall after fighting the public and then there were still problems. I hear the issue may be tolerance differences between part versions that can lead to the safety failures when mixed together.

The brand damage has been significant, but for the most part isolated to this pistol. Now, if another Sig model has a similar issue in the future and a similar response comes from Sig, the loss in trust will be immense and potentially unrecoverable.

As far as not keeping a round in the chamber, yeah, some people still do that, though that method has fallen into disfavor amongst the CCW types. But even when not ready to fire, there is a lot of time when that pistol could be loaded and go off, I.E. holding the pistol at low ready. Pistol on the bench facing down range as you check something or take a pause, unloading and reloading etc.

Pistols are already incredibly easy to accidentally hurt oneself and others that adding in this variable is just intolerable for most I think.

The gun community wants that gun to work reliably, that means it must fire when intended to fire, and only then.
by jjcob | 2025-07-25 12:04:29+00:00
In austria QR codes for sharing payment info are getting popular. Many invoices have a QR code on them. You can then use your banking app to pay the invoice.

Banking apps can also generate a QR code for receiving payments.

They are not quite as seamless as tap-to-pay, but they work with pretty much every bank in the Austria, which is neat.
by dathinab | 2025-07-25 12:05:02+00:00
> discriminating against Mastercard and Visa

how can you discriminate against a duopoly ;)

> It also highlights how desperately the EU is behind other countries in this space,

(you seem to be drifting into the server center topic but I will take "this space" as payment processing)

It's complicated, EU has many payment standards which 1) are required between banks, and 2) theoretically allow integration with new payment processing methods needing only the end-users agreement not the banks. So you can relatively easily send money between people (and to company accounts, too) without touching visa/mastercard at all (how easy that "relative part" does still vary a lot tho. (Also if you are willing to pay a fixed up price (commonly free or 15ct) also fast, like in seconds).

At the same time when it comes to 1) banking cards, 2) payment terminals, pretty much everything is build on Mastercard/Visa (where I live mostly Visa). Like there is no competition when it comes to the secure chips this systems use. (But then both PayPall and pretty much all of China have kinda shown you don't really need them as long as you have internet, which payment terminal often need to for any non very small payment amounts). Also because people are so used to a well working reasonable secure card payment system many tries to push for app based alternatives kinda fail, sure due to their dominant position in online shopping Paypal is still a thing, but also commonly relegate to at most one of multiple options in online shopping. Just to be clear the exact dynamics differ _vastly_ between country in the EU.

Any I really don't like the generic pay in rates functionality, it's a trap which really can fuck up peoples life (similar to using the dipso all the time/not getting out of it, or large credit boundary or however it's called for credit cards; to be honest dispo tends to be worse tho).
by arrufat | 2025-07-25 12:05:20+00:00
I've been working on Zignal, a zero-dependency image processing library that we use in production for virtual makeup try-on at Ameli (https://ameli.co.kr/)

What makes this library especially useful to me is the terminal rendering support - you can output images directly to your terminal using Sixel, Kitty graphics protocol, ANSI colors, or even braille patterns. This makes debugging image processing much nicer when you can see results right in your terminal.

It has the basics you'd expect: color space conversions (RGB, HSL, Lab, etc.), image I/O, transforms, and filtering. There's also a canvas API with many drawing primitives. Python bindings are available too, though very incomplete at the moment.

Fair warning: it's not feature-complete. I add features as I need them or when I'm curious about how something works (for example, when I wanted to understand SVD, I ported dlib's implementation). But what's there is solid, and the API is designed to be consistent as it grows.

The library is heavily inspired by dlib but written from scratch in Zig. MIT licensed.
by homeonthemtn | 2025-07-25 12:05:27+00:00
This is a relic mindset from the start of the Internet. The website itself even visually reflects that.

Is there a marginal grey area around adult content? Yes. But beyond that margin is a vast ocean of explicit, intentional adult content.

As someone who grew up in both the decentralized "new" era of the Internet, and now lives in the hyper localized algo driven version of it... It's all shit. And I'd never want my kids to be exposed to it.
by rescbr | 2025-07-25 12:05:33+00:00
> Apple is irrelevant in 3rd world countries. It is a luxury brand for millionaires. Doesn't have mass appeal.

Apple has 9% market share in Brazil. This is not irrelevant. It’s not a luxury thing for millionaires, but rather a status symbol for the middle class.

There’s this whole market of iPhone leasing plans where you get a new phone whenever Apple releases a new one, banks offering 21x installment payment plans to purchase iPhones, and a vibrant secondhand and refurbished market.

This 9% segment of the population can’t be ignored, specially considering the income inequality in the Brazilian society. They might not have a high credit card limit or due to lack of financial literacy, they want to avoid using credit cards, so they might prefer to use debit and PIX for daily transactions.
by okasaki | 2025-07-25 12:05:43+00:00
Cool story from an alcoholic traitor

> On 2 January 1992, Yeltsin, acting as his own prime minister, began a major economic and administrative reform ordered the liberalization of foreign trade, prices, and currency. At the same time, Yeltsin followed a policy of "macroeconomic stabilization", a harsh austerity regime designed to control inflation. Under Yeltsin's stabilization programme, interest rates were raised to extremely high levels to tighten money and restrict credit. To bring state spending and revenues into balance, Yeltsin raised new taxes heavily, cut back sharply on government subsidies to industry and construction, and made steep cuts to state welfare spending.

> In early 1992, prices skyrocketed throughout Russia, and a deep credit crunch shut down many industries and brought about a protracted depression. The reforms devastated the living standards of much of the population, especially the groups dependent on Soviet-era state subsidies and welfare programs.[108] Through the 1990s, Russia's GDP fell by 50%, vast sectors of the economy were wiped out, inequality and unemployment grew dramatically, whilst incomes fell. Hyperinflation, caused by the Central Bank of Russia's loose monetary policy, wiped out many people's personal savings, and tens of millions of Russians were plunged into poverty.[109][110]
by giantg2 | 2025-07-25 12:05:51+00:00
There shouldn't be a reason for these mistakes, but they keep happening. Do a little digging and you'll see. I've already mentioned the XDS and we all know the P320. The FNS had a similar issue too. I'm sure there are more if we dig. So while there are millions of safe striker fired guns, it appears there are also millions of unsafe ones in the past decade or so.
by rchaud | 2025-07-25 12:06:41+00:00
$10 million sounds like peanuts in an information environment where discussion is dominated by talk of billionnaires. When I was growing up, I remember Bill Gates and Warren Buffett's wealth being touted as a measly $40 billion or something. Today the numbers tossed around for Bezos, Musk etc are minds numbingly massive, 200 to 300 billion.

Meanwhile most people in "rich" countries will have to reach mid-career status to even reach $100k.
by Joker_vD | 2025-07-25 12:07:04+00:00
> who knew how many scripts just haphazardly hand programs random file descriptors, that's surely not a problem.

Oh for fuck's sake! Why are you using random file descriptors nobody told you about? Those open fds are there for a reason, thank you: I've put an end of an open pipe specifically so I could notice when it will become closed.

If the user set up the environment of your application in a specific way, that means he wants your application to run in such an environment. If you were invoked with 10 non-standard file descriptors open and two injected threads — you'll have to live with it. Because, believe it or not, your application's purpose is to serve the user's goals. So don't break composability that the user relies on, please.
by techpineapple | 2025-07-25 12:07:41+00:00
This seems like a bad sign.

I listened to this podcast last night: https://www.lastweekinaws.com/podcast/screaming-in-the-cloud...

And one of the things mentioned is that like Cursor is the only company making money in tech. If everyone is attacking the coding space and not finding unique product market fit elsewhere.

We might be in a bubble.
by lvl155 | 2025-07-25 12:07:58+00:00
I am just gonna say it. This is not something Kiro came up with. People were already using this workflow. Perhaps they should’ve added more features instead of spending time making promo videos of themselves. I fail to see any add value here especially considering it’s Amazon. Sonnet 4 is effectively unlimited for many MAX users so giving that away to work out their list of bugs is a non-starter.
by mvATM99 | 2025-07-25 12:08:40+00:00
Not sure, i can't run it since i can't install Node.js on my work environment. What is your experience with Context7 like?

As for GitMCP: I think the url fetching tool of the docs it does is not great, but the code searching tool is quite good. Regardless, i remain open to alternatives, not stuck to this yet.
by nchmy | 2025-07-25 12:08:44+00:00
Im a fan of manticore and promote it when I can, but this doesn't seem like an approoriate response. It appears generous on the surface, but has various unnecessary and subtle digs in it - all while it would be easy to show how manticore is a more appropriate choice.

They're surely not using a 20-year-old version of Sphinx - it appears that the latest open source version on Github is 8 years old. They have a closed source version which appears to be maintained, though has infrequent releases.

Why not just say these things, which make manticore self-evidently a better choice?

https://github.com/sphinxsearch/sphinx https://sphinxsearch.com/downloads/current/
by ralfj | 2025-07-25 12:09:55+00:00
PLT has used the term "type safety" for a very long time -- so "safety" does not imply a security perspective. And yes it is indeed very different from correctness. But the article doesn't claim that memory safety should imply correctness -- that would be ridiculous, obviously you can write buggy programs in memory-safe languages. The article claims that Go is not memory-safe.
by 71153750 | 2025-07-25 12:10:08+00:00
I think you are being voted down but I disagree. I opened the article before the tag was added and although I very much appreciate the author's point, I think the added tag is necessary. Would be hard to argue any form of nudity appearing on my computer screen even it were an artwork I feel. The tag has been added. Society is tricky, nudity on the internet more so.
by wzdd | 2025-07-25 12:10:40+00:00
The output is not of high quality. It is extremely verbose for what it is trying to say, and I found myself skimming it while dealing with

1. The constant whiplash of paragraphs which describe an amazing feature followed by paragraphs which walk it back ("The shift is subtle but significant / But I want to be clear", "Kiro would implement it correctly / That said, it wasn't completely hands-off", "The onboarding assistance was genuinely helpful / However, this is also where I encountered", "It's particularly strong at understanding / However, there are times when");

2. Bland analogies that detract from, rather than enhance, understanding ("It's the difference between being a hands-on manager who needs to check every detail versus setting clear expectations and trusting the process.", "It's like having a very knowledgeable colleague who..."); and

3. literal content-free filler ("Here's where it got interesting", "Don't let perfect be the enemy of good", "Most importantly / More importantly"), etc etc.

Kiro is a new agentic IDE which puts much more of a focus on detailed, upfront specification than competitors like Cursor. That's great. Just write about that.
by ralfj | 2025-07-25 12:10:59+00:00
> It reads 42h because that address is hardcoded,

It is trivial to change this example into an arbitrary int2ptr cast.

> Go (or Python, or any of the other mainstream languages that do shared-memory concurrency and don't have Rust's type system),

As the article discusses, only Go has this issue. Python and Java and JavaScript and so on are all memory-safe. Maybe you are mixing up "language has data races" and "data races can cause the language itself to be broken"?

> If people want to make PLT arguments about Rust's correctness advantages, I will step out of the way and let them do that. But this article makes a security claim, and that claim is in the practical sense false.

This article makes a claim about the term "memory safety". You are making the claim that that's a security term. I admit I am not familiar with the full history of the term "memory safety", but I do know that "type safety" has been used in PLT for many decades, so it's not like all "safety" terms are somehow in the security domain.

I am curious what your definition of "memory safety" is such that Go satisfies the definition. Wikipedia defines it as

> Memory safety is the state of being protected from various software bugs and security vulnerabilities when dealing with memory access, such as buffer overflows and dangling pointers.

My example shows that Go does not enforce memory safety according to that definition -- and not through some sort of oversight or accident, but by design. Out-of-bounds reads and writes are possible in Go. The example might be contrived, but the entire point of memory safety guarantees is that it doesn't matter how contrived the code is.

I'm completely fine with Go making that choice, but I am not fine with Go then claiming to be memory safe in the same sense that Java or Rust are, when it is demonstrably not the case.
by edwin2 | 2025-07-25 12:11:33+00:00
people forget why users search - to find what they are looking for. as the saying goes, “No one wants a drill, they want a quarter inch hole.”

the first time i realized Google had a problem was when i used ChatGPT to search for Youtube videos, and compared to Youtube’s search, it was an order of magnitude easier to find the exact videos i was looking for.

Hallucinations are not a problem in a query like this, because i have what i need to evaluate the results: did i find interesting Youtube videos to watch? did i find what i was looking for?

generally speaking, users seek to minimize the effort required to achieve their goals.
by nulld3v | 2025-07-25 12:12:22+00:00
Yeah, POSIX made choices that looked sane and even elegant at the time, but nowadays I think it is fair to say that they have not aged well. Like it's not just FDs getting inherited by default, almost everything gets inherited by default:

Working dir, env vars, uid/gid, socket handles, file descriptors, (some) file locks, message queues. AFAIK the only exception is the argv, everything else is inherited on fork or exec.

Sometimes this makes sense, but programmers always forget about this, resulting in security incidents. Eventually most programming languages gave up and updated their stdlibs to set CLOEXEC when opening files and sockets, knowing that it would break POSIX compatibility and API compatibility on their stdlibs. Python is one example: https://peps.python.org/pep-0446/

The "inherit by default" behavior also makes it very difficult to evolve the shell interface. The nushell devs are looking for a reliable way to request JSON output/input on processes spawned by the shell (if supported by the program). Naively passing env vars or FDs to the process causes problems because if the process spawns any children of it's own, they too would also inherit those env vars or FDs.
by tptacek | 2025-07-25 12:12:40+00:00
The problem isn't that you couldn't hardcode a scarier value; it's that you have to demonstrate a plausible scenario in realistic code where an attacker controls both the value and the address it's written to.

While you're wondering why I keep claiming Go is a memory-safe language, you can also go ask the ISRG, which says the same thing I am at (checks notes) https://www.memorysafety.org/.
by nabla9 | 2025-07-25 12:13:21+00:00
As you must understand, bible is free to interpret because Christianity is based on faith and guidance from magical entities, and cultural tradition, not reality based facts. "Studied the bible properly" is completely subjective statement.

If you "pray and live the truth of Christ and follow his guidance", The Christ does not guide everyone to the same place. If he did, he might be real. I think it's your unconscious urges speaking, but if you believe in God that's not how you think.

In any way, there is strong correlation: https://www.pewresearch.org/short-reads/2019/02/06/how-highl...
by pjmlp | 2025-07-25 12:13:22+00:00
You see it as appeal to authority, I see it as the community of frontend developers, based on Swift and Rust integration experience, and work done by Chris Lattner, while working at Google, feedbacking into what the evolution of LLVM IR is supposed to look like.

Mojo and Flang, were designed from scratch using MLIR, as there are many other newer languages on the LLVM ecosystem.

I see it as the field experience of folks that know a little bit more than I ever will about compiler design.
by sparkie | 2025-07-25 12:13:46+00:00
In F#, which has measure types, the types are checked at compile time but erased at runtime, so they have no additional runtime cost. Measures are a kind of painted type.

[<Measure>] type degC; [<Measure>] type K; let degrees_to_kelvin (degrees : float<degC>) : float<K> = degrees * 1<K/degC> + 273.15<K> let d = 10.0<degC> let k : float<K> = degrees_to_kelvin d

The .NET runtime only sees `float`, as the measures have been erased, and constant folding will remove the `*1` that we used to change the measure. The `degrees_to_kelvin` call may also be inlined by the JIT compiler. We could potentially add `[<MethodImpl(MethodImplOptions.AggressiveInlining)>]` to force it to inline when possible, then constant folding may reduce the whole expression down to its result in the binary.

The downside to adding the SI into the type system is the SI is not a sound type system. For example:

[<Measure>] type m [<Measure>] type s [<Measure>] type kg [<Measure>] type N = kg*m/s^2 [<Measure>] type J = kg*m^2/s^2 [<Measure>] type Nm = N*m let func_expecting_torque (t : float<Nm>) = ... let x = 10.0<J> func_expecting_torque x

The type system will permit this: using torque where energy is expected, and vice-versa, because they have the same SI unit, but they don't represent the same thing, and ideally it should be rejected. A potential improvement is to include Siano's Orientational Analysis[1], which can resolve this particular unsoundness because the orientations of Nm and J would be incompatible.

[1]:https://www.doc88.com/p-9099799188322.html
by anthk | 2025-07-25 12:14:20+00:00
I think EMWM it's a better MWM. It even has options to make the menu sticky, a la Window Maker.

https://fastestcode.org/emwm.html

It's not CDE, but close. And some author wrote a tool to pin WindowMaker dockapps in a window, perfectly usable in a corner.

https://web.archive.org/web/20250105005119/https://luke8086....

I wouldn't mind using it on my n270 netbook, but a customized OpenBSD base's FVWM it's close enough to EMWM, minus the XFT fonts.
by SOLAR_FIELDS | 2025-07-25 12:15:04+00:00
In general the NA game of Sweden (and Denmark) is incredible compared to many other countries. My understanding is that there is a law in Sweden that indicates that bars must offer non-alcoholic options and as such there's a pretty large market demand and opportunity for the popular craft breweries like Mikeller to come in and make awesome NA beer that the whole region gets to enjoy.
by closewith | 2025-07-25 12:16:05+00:00
> Credit cards give me cashback, worldwide acceptance and peace of mind.

That's because you (and everyone else in Switzerland, even those paying cash) is eating a 2-3% merchant fee markup. In the civilised world like the EU, where credit card interchange fees are capped of 0.3%, those cashback benefits (which is, again, your money you've just paid) don't exist.

> worldwide acceptance

For now, at a huge economy-wide cost. That skimmed 2-3% is what Trump is trying to protect.

> peace of mind

That's also country-dependent. In many countries, credit card transactions have no additional protections and chargebacks aren't the magic bullet they are in some.

> more convenient, safer, faster.

Pix is more convenient, safer (much, much safer and lower risk of fraud), and faster than credit cards. Cheaper too.
by henry700 | 2025-07-25 12:16:27+00:00
The cashback you are given back is taken from a fraction of the fee levied on merchants by the Payment Processing company they use. The only thing holding this system together is the lobby (also funded by a part of the aforementioned fee on merchants) by the Payment Processing industry to uphold laws that prohibit more expensive payments for more expensive payment methods, and also the extensive marketing (funded by guess what). It's an extremely simple yet ingrained system, and the only way to topple it and stop paying hidden costs thinking you're getting an extremely good deal on cashback, is to peel back the curtains and realize it, and make most of the politically-active part of the country's population to do so too.