MurphyA/hacker-news huggingface dataset:
by consumer451 | 2025-07-16 20:00:55+00:00
> The organization was originally based on Nazzaro's off-the-grid land in Washington state, but he soon migrated to Russia and started directing the group's activities from there.

People joke "It's always Russia with you people." And yet, here we are, again.

Oh, and I just came across this in a search: [0]

> Alleged former members of an international neo-Nazi terrorist organization are claiming its Russia-based and American leader is a Kremlin spy, according to online records reviewed by the Guardian.

> The allegation that Rinaldo Nazzaro, a former Pentagon contractor and founder of the Base, listed as a designated terrorist organization all over the world, is an alleged Russian intelligence asset could bring new meaning to his group’s latest effort: sabotage and assassination missions inside Ukraine to weaken the government of President Volodymyr Zelenskyy.

[0] https://www.theguardian.com/us-news/2025/apr/24/neo-nazi-gro...
by interestica | 2025-07-16 20:01:00+00:00
I saw an example recently of a sort of “AI Codec” : A person has to send a message to a respected figure of authority. They organize their thoughts and requests into a clear and concise bulleted list with explanations. But, that seemed heavily informal and unprofessional. So they used AI to convert the bullets to paragraphs and sent it out.

The authority received the large body of text but, due to time commitments and attention, they didn’t have time to read it all. They used AI to convert the text to a concise bulleted list.
by Tiberium | 2025-07-16 20:01:15+00:00
I'm really not following -- why does the ban specifically focus on a single domain instead of attempting to solve the core issue? Do the maintainers not know that accounts for any big email provider (gmail, outlook, you name it) can be bought or created for very, very cheap. Which is obviously what the attackers will now do after this ban.

The blog post references [0] which makes it seem like the maintainers do, in fact, just ban any email providers that attackers use instead of trying to solve the issue.

[0] https://blog.pypi.org/posts/2024-06-16-prohibiting-msn-email...
by spaceman_2020 | 2025-07-16 20:01:16+00:00
Anytime the words “AI” or “crypto” show up in a thread, the collective IQ of this place drops by 50%

If you want some of the worst takes possible on emerging tech, come to HN

But if you want an obscure hack that improves garbage collection in java by 0.1%, also come to HN
by nomel | 2025-07-16 20:01:17+00:00
> I wish macOS gaming wasn't so expensive.

The ever increasing number of GPUs of the world are making the cloud PC gaming services ridiculously cheap. I only pay $12 USD/month (boosteroid, gaming only).

If I bought a gaming PC with similar specs, it would take over 7 years to pay it off (no use for a PC besides gaming). That would be 7 years of fixed hardware, where the cloud hardware specs keep improving with time, and I can pause the subscription whenever I want.

You definitely pay with some extra input latency, but not enough to impact my casual play. Definitely worth trying, if you have nice internet.
by lysace | 2025-07-16 20:01:19+00:00
Ah, I see your point.

Although: I don't think the kind of developers that use low quality email providers like that follow HN.

Edit: Remember those 7+ hours back in 1999 when all Microsoft Hotmail accounts were wide open for perusal?

https://time.com/archive/6922796/how-bad-was-the-hotmail-dis...

> Yesterday a Swedish newspaper called Expressen published the programmer’s work, a simple utility designed to save time by allowing Hotmail users to circumvent that pesky password verification process when logging into their accounts. The result? As many as 50 million Hotmail accounts were made fully accessible to the public. Now that the damage has been done, what have we learned?

> It wasn’t until the lines of code appeared in Expressen that people realized how vulnerable Hotmail really was. The utility allowed anybody who wanted to to create a Web page that would allow them log into any Hotmail account. Once the word was out, dozens of pages such as this one were created to take advantage of the security hole. Unfortunate programmers at Microsoft, which owns Hotmail, were rousted out of bed at 2 AM Pacific time to address the problem. By 9 AM Hotmail was offline.

https://www.theregister.com/1999/08/30/massive_security_brea...

https://www.theguardian.com/world/1999/aug/31/neilmcintosh.r...

https://www.salon.com/1999/09/02/hotmail_hack/
by jamest | 2025-07-16 20:01:40+00:00
I built an app (HN Clone, of course) with Instant's MCP hooked up to Claude Code.

The experience was brilliant.

Pros:

+ Fast

+ Easy

+ "Vibe coding on steroids" basically

+ The sense of 'wow' that comes very rarely with new tech

Cons:

- It used Instant as the database/backend, but I wasn't sure what it had done / how exactly it worked and had to spend a bunch of time asking Claude + reading the code to get it. It seemed reasonable, but if I were doing a prod system vs a PoC, this is where the time would be spent. ("Vibe coding lets you create tech debt 10x faster")

Net-net: This is the way for prototyping / validating. This is probably the way for production systems in N months too once the toolchain + agents get better.
by duxup | 2025-07-16 20:02:05+00:00
>The Eswatini government said Wednesday the men, which it referred to as “prisoners” and “inmates,” were being held in isolated units in unnamed correctional facilities in Eswatini but were considered to be in transit and would ultimately be sent back to their home countries.

Wouldn't it make more sense to just send them to the home countries if that's the point anyway?
by chasd00 | 2025-07-16 20:02:14+00:00
heh someone broke into a house i was staying at in Costa Rica and stole my backpack while i was working in the next room! I go back to get something and there's footprints in/out of a sliding glass door and no backpack. Fortunately, the only thing they got was my ADHD medicine. Sorta sucked for my employer for those 3 weeks I was without but it could have been much worse.

Interestingly, i did my best to follow the footsteps which led to a trail that went up through the jungle. Maybe 100 yards up a hill there was a little spot that definitely looked well used by humans overlooking the house and straight through a large window. I suspect whoever it was had been watching us for a while and when my wife/kids left, leaving me alone, just walked in, grabbed the backpack and left. (wife was not pleased as you could imagine)
by JKCalhoun | 2025-07-16 20:02:16+00:00
> Intel would sometimes cut jobs during fallow periods but it backfilled them almost immediately.

Smells like corporate bulimia.

When I worked/lived in the Bay Area there was a sense that corporations, and residents of the Bay Area, were moving to Oregon because it was cheaper … but still close enough to Silicon Valley. (Apropos of nothing really.)
by rascul | 2025-07-16 20:02:38+00:00
I've fired a .22 semi auto rifle with a sound suppressor and subsonic ammo in the past. It was maybe just a little bit louder than the Welrod in the video in the article. The noisiest part was the bolt cycling. I'm not sure how practical it was for anything more than paper targets or beer cans at near to mid range.
by ai_critic | 2025-07-16 20:02:42+00:00
As of 2024Q1, Brave had a market share of 1.27% vs Firefox's 3.97% (via Cloudflare, here: https://radar.cloudflare.com/reports/browser-market-share-20... ). As of 2025, 1.05% vs 4.10% ( https://radar.cloudflare.com/reports/browser-market-share-20... ).

Interestingly enough, right, we can see that the same CEO left Mozilla and then started Brave, and we can see the growth of Brave and the decline of Mozilla.

You can argue, sure, that market conditions are responsible for Mozilla's plight--the decreasing value as antitrust insurance for GOOG and so forth. But, Brave managed to do well in spite of that, and to my knowledge if you look at the pay, at his peak at Mozilla Eich was making in the 800-900K range while Baker made over 6M a year from 2022 to 2023 (and just a bit under 6M in 2021). So, for around 8x the price, you had worse leadership.

To restate again: the dude started a new browser company and grew it to a quarter the size of Firefox--and this without having GOOG as a sugardaddy.

It's an incredibly mid take to assume that individual competence in business is somehow not actually relevant.
by tibbar | 2025-07-16 20:02:46+00:00
I, too, walk funny. I distinctly remember an authority figure trying to teach me how to walk properly as an adolescent, and other people in my life occasionally comment on it. I guess I walk by swinging my legs from the top and placing my entire foot down evenly on the ground, which leads to very broad and shallow footprints on the beach. I am naturally a very slow walker and a bit unsteady.
by bunderbunder | 2025-07-16 20:03:06+00:00
I read it less as "Java is tiny" and more as "Java developers can be peculiarly insular and conservative, by the standards of other communities."

Considering that as recently as 4 years ago I was working on a project where we still had a hard requirement to support running in Java 7, and this kind of thing was not considered unusual, I can't really disagree too strongly with that. Yes, that was still inside of Java 7's extended support period, so there was really nothing unusual or surprising about this, from a Java developer perspective. But that's kind of the point.

It's also not really a bad thing, considering what kinds of things run on Java. Mainframe developers have a similar thing going on, for a similar and similarly good reason.
by elric | 2025-07-16 20:03:40+00:00
Human locomation is surprisingly complex. Maybe not that surprising, what with roughly 20 bones and 30 muscles in a single foot. That doesn't even include the joints needed for motion and the muscles required to move your legs or swing your arms while you walk.

Allegedly some law enforcement uses gait analysis to identify and follow individual people on CCTV recordings. Gait has diagnostic value in some neurological conditions (like multiple sclerosis). Doesn't seem far fetched that a complex disorder like autism would also affect gait.
by hollerith | 2025-07-16 20:03:42+00:00
Do you use apps built on Electron? The npm packages chosen for inclusion in the app are not sandboxed in any way IIUC (at least on Linux that is the case).

Some security people are warning against Electron (at least on Linux):

https://github.com/secureblue/secureblue/issues/193#issuecom...
by snickerdoodle12 | 2025-07-16 20:03:48+00:00
The instructions aren't all that unusual for PHP software, especially those that target shared hosting, but are unusual compared to most other software.

> Download a zip file and extract it "where you want it installed on your web server"

The requirements mention apache with mod_rewrite enabled, so "your web server" is a bit vague. It wouldn't work with e.g. `python -m http.server 8000`. Also, most software comes bundled with its own web server nowadays but I know this is just how PHP is.

> Navigate to http://your-domain.example/install/index.php in a browser to launch the installation process.

Huh, so anyone who can access my web server can access the installation script? Why isn't this a command line script, a config file, or at least something bound to localhost?

> After the successful installation, delete the install/ directory and its contents.

Couldn't this have been automated? Am I subject to security issues if I don't do this? I don't have to manually delete anything when installing any other software.
by kulahan | 2025-07-16 20:04:10+00:00
Your comment doesn’t really support its own premise well - you just say that we used to stereotype people and point out what some of those stereotypes were, but not why they’re radically incorrect. You sorta just pointed out that they exist.

I’m not of one opinion or the other, I just don’t see why it’s self evident that certain groups of people wouldn’t walk a certain way.
Show HN: I am bringing back Youtube poll cards
by yassino | 2025-07-16 20:04:15+00:00
Hey HN,

I'm 22 and shipped my first Saas ever while going to uni and being a full time AI intern.

So in 2020, YouTube chose to shutdown one of its core features: poll cards.

It allowed creators to poll their audience by displaying interactive questions at specific times.

The official reason for the shutdown was that only 12% of creators were using it — which still amounted to 6 millions (!!) users at the time. Many complained.

So I created Askk, the Chrome extension that brings them back.

I hope this will help you interact with your viewers. Would love feedbacks pls.

Yassine
by Lvl999Noob | 2025-07-16 20:04:22+00:00
FWIW, I run my browser full screen. I run most apps full screen. By full screen, I don't mean that weird macos thing where it removes everything and locks you into a single app in a single workspace but the more standard one where the window is just expanded to fill the screen space.

The only time I run an app without fullscreen-ing it is if I don't have to do much in it or it doesn't have enough content to use up all the space anyways. Like system settings. Otherwise, I am using the app -> I am focusing on it -> I want it to take all the space it wants and show me everything going on inside it. My browser and my text editor are apps where I spend 99% of my time so they are always full screen.
by olddustytrail | 2025-07-16 20:04:48+00:00
> "In condensed matter physics, altermagnetism is a type of persistent magnetic state in ideal crystals.

Real crystals have impurities so they are harder to reason about. An ideal crystal is just one where we pretend it's perfect.

> Altermagnetic structures are collinear

The structure is lined up, like the diagrams in the article

> and crystal-symmetry compensated, resulting in zero net magnetisation.

And the alternating lines are symmetrical so they "compensate" for each other and cancel out.

> the electronic bands in an altermagnet are not Kramers degenerate... (etc.)

The spin is different like in the diagram. Ok, that's a bit lame. Anyone else can give a simple but mostly accurate explanation?
by stickfigure | 2025-07-16 20:05:44+00:00
Some people like to smoke. I find it disgusting myself, but as long as people want the experience I see no reason why someone else shouldn't be allowed to sell it to them. See also alcohol, drugs, porn, motorcycles, experimental aircraft, whatever.

We can have all sorts of interesting discussions about how to balance human independence with shared social costs, but it's not inherently "evil" to give consenting adults products and experiences they desire.

IMO, much more evil is caused by busybodies trying to tell other people what's good for them. See: The Drug War.
by consumer451 | 2025-07-16 20:07:41+00:00
That is an excellent question. The best theory I've seen is that there is money and kickbacks being passed around for these "detentions."

Meta: I am finding that it is very difficult to have an intelligent discussion about deeply stupid things. This leads to many posts about important and very interesting things occurring under the current US administration, getting flagged.

This seems like a form of HN kryptonite.
by freeone3000 | 2025-07-16 20:08:15+00:00
My major problem with Swift was its error messaging. “Error: -2.” Okay, well, I suppose I’ll attach a debugger and… it’s of absolutely no help, since it crashes internally to some function and I can’t get out a stacktrace.

Function calling is irksome, with implicit parameters and mandatory parameters vaguely mixing? And the typing is appalling - there are multiple bottom types with implicit narrowing casts, one of them being NSObject, so if you’re doing any work with the Apple APIs you end up with a mess.

We got it right with Java and Rust; C++ does a passable job; why Swift had to be as incomprehensible as typescript, I cannot fathom.
by pron | 2025-07-16 20:09:48+00:00
> But the point is that native, static binaries depend only on the kernel interface

Many binaries also depend on shared libraries.

> while the other programs also depend on the language runtime that's installed on that OS

You can (and probably should) embed the runtime and all dependencies in the program (as is easily done in Java). The runtime then makes responding to OS selection/changes easier (e.g. musl vs glibc), or avoids less stable OS APIs to begin with.
by judahmeek | 2025-07-16 20:10:34+00:00
Except Trump never supported repealing the Civil Rights Act, so you're trying to use a straw-man that's too extreme even for him.

Also, you're ignoring that Andreessen opposes immigration in addition to race-conscious admissions[0].

0: https://www.thebulwark.com/p/marc-andreesen-and-the-billiona...
by googoloid | 2025-07-16 20:10:34+00:00
Ok so it does work as I understood originally.

If the CLI allows your domain to connect to it and do arbitrary DB queries, it's definitely not something I could trust. Even if I knew you to be perfectly respectable, your hosting could get hacked and then there would be a pipeline for an attacker to my DB.

It's a reasonable way to do some things, but I definitely feel this cannot be called local-first, since it explicitly allows and expects external domains to connect to it.

The bundle size is no issue whatsoever for a cli tool for devs, it's only really a problem when serving via the internet.
by callc | 2025-07-16 20:11:17+00:00
Hi rsyring, I made this comment out of experience.

As python projects grow and grow, you need to do lots of support work for testing and even syntactic correctness. This is automatic in compiled languages where a class of issues is caught early as compile errors, not runtime errors.

Personally I prefer to move more errors to compile time as much as possible. Dynamic languages are really powerful in what you can do at runtime, but that runtime flexibility trades off with compile time verification.

Of course, every project can be written in any language, with enough effort. The existence of large and successful python projects says nothing about the developer experience, developer efficiency, or fragility of the code.
by nickjj | 2025-07-16 20:11:30+00:00
I have a bunch of zero dependency projects. You can get a lot done with the standard library and single file projects which you can run on most systems without needing to do anything except curl it down and run it since Python is available.

For example here's a ~2k line Python project which is a command line finance income and expense tracker: https://github.com/nickjj/plutus/blob/main/src/plutus

It uses about a dozen stdlib modules.

About 25% of the code is using argparse to parse commands and flags. With that said, I tend to prefer code that yields more lines for the sake of clarity. For example this could technically be 1 or 2 lines but I like each parameter being on its own line.

parser_edit.add_argument( "-s", "--sort", default=False, action="store_true", help="Sort your profile and show a diff if anything changed", )
by Octoth0rpe | 2025-07-16 20:11:40+00:00
> Wouldn't it make more sense to just send them to the home countries if that's the point anyway?

The point isn't to repatriate immigrants to their countries of origin. It's to inflict as much cruelty and suffering as possible to act as an example/deterrent for future would-be immigrants, and to encourage as-yet undetained immigrants to self-deport.

(I am not defending this policy, I think it's abhorrent)
by CraigJPerry | 2025-07-16 20:11:49+00:00
i experimented with it, i’m a fan of the concept. Ironically the bit i thought id like most (swap jinja extends shenanigans for just composing functions or callables more generally) is the bit that i didnt warm to. I dont really know why, on paper it ticks boxes for me. In practice i felt slow.
by __turbobrew__ | 2025-07-16 20:11:57+00:00
The real issue in your hypothetical scenario is a single bad metrics instance can bring the entire thing down. You could deploy multiple geographically distributed metrics aggregation services which establish the “canonical state” through a RAFT/PAXOS quorum. Then as long as a majority of metric aggregator instances are up the system will continue to work.

When you are building systems like 1.1.1.1 having an alert rollup of five minutes is not acceptable as it will hide legitimate downtime that lasts between 0 and 5 minutes.

You need to design systems which do not rely on orchestration to remediate short transient errors.

Disclosure: I work on a core SRE team for a company with over 500 million users.
by StefanBatory | 2025-07-16 20:12:01+00:00
I'm not a native speaker, but I feel this isn't that hard to read? Maybe not if I was in a wrong headspace, but I can get the gist looking at it.

Question would be, what is Michaelmas? My first thought would be it's a prime minister or president, but I'd need to ask for context. If so, their term has just finished and there's a change in govt. Also, weather sucks so much and it's so muddy, the streets resemble more of some prehistoric places :P Holborn Hill is some place, part of me would say it's a street, English naming is weird.

Also I'd say that the role of those sentences is retardation to slow the reading down and to paint a dreary picture.

Unless I'm falling into a trap and overestimating my comprehension.
by jorvi | 2025-07-16 20:12:53+00:00
They aren't. Or not in the sense that it matters for traditional Linux desktop users, which is pretty much the only reason the metric gets brought up.

Following your logic, people using the old TiVo setop boxes were also Linux users.

Active Linux desktop adoption rates matter because it means companies will put money into ensuring their product works well on it. 1Password or Telegram is not going to meaningfully care about Steam Deck users. Or Android users vis a vis the Linux desktop client, because Android can't readily run Linux GUI applications :)

It's honestly kind of nuts no one here is getting that.
by Quekid5 | 2025-07-16 20:12:55+00:00
Sure, but if you're relying on the TCO, you kind of have to actually state that, regardless? (At least if you want to avoid accidental regressions.)

I don't see any way around having to state your intent (as a programmer) for this. It's just a semantic difference in behavior unless your Abstract Machine allows for just ignoring the possibility of stack overflow entirely.
by conductr | 2025-07-16 20:13:00+00:00
> Do the people who style their app actually use their app on a daily basis for long amount of time ?

yes, I'm not wasting my time customizing something unless I use it frequently.

Not a Thunderbird user, but the Outlook default looks similar to the screenshot on the linked page. Initial things that drive me crazy; 1) left pane is a complete waste of screen real estate. I have mine collapsed to just be icons, it's about 1/6th the width as what's shown. It expands if I need it to (on tap/hover). 2) I like my inbox above my message preview not next to it. On the inbox pane, I get From & Subject on line 1 and initial message text on line 2. Same real estate with more content and context. I really like having the message preview line without actually clicking on the message.

Also, by having the message preview pane wider than tall, long paragraphs do not wrap so abruptly and I get more content on the screen. This lessens my need to scroll unless the message has a lot of paragraphs or images. Same for the initial message preview that's visible in the inbox line 2, if it's wider I can see more text. For a lot of emails, I find they are short enough that I can read it all in the inbox without even looking at the message pane. This means I can scroll/scan my inbox quickly without opening each item in the message pane to view it.

Anyways, I wouldn't care if I didn't use Outlook daily. For some people, maybe the defaults work but I feel like I get a lot of productivity out of these minor customizations