MurphyA/hacker-news huggingface dataset:
by operator-name | 2025-07-24 23:24:23+00:00
Certainly an interesting approach compared to asgiref or synchronicity but I have doubts about the approach.

Does this not add further function colors - that of a transfunction, tiddle superfunction and non-tilde superfunction? Now every time you call one from another you need to use both the context managers and know what variant you are calling.

asgiref provides the simple wrappers sync_to_async() and async_to_aync(). Easy to understand and to slowly transition. Caveat is the performance impact if overused.

synchronicity uses a different approach - write 100% async code and expose both a sync and async interface. async def foo() becomes def foo() and async def foo.aio().

https://github.com/django/asgiref https://github.com/modal-labs/synchronicity
by realaaa | 2025-07-24 23:25:21+00:00
so if this game is so horrible and indeed promotes rape etc - surely we (this shout collective specifically) can go after the actual creator(s), right?

otherwise indeed it's a lot of extra work & red tape for everyone else because of some ultimate dickheads, better to and bash them directly I'd say

of course still need to have checks and publishing rules etc
by egypturnash | 2025-07-24 23:27:26+00:00
I have been using an iPad for years and every fucking time I accidentally trigger the creation of a second window I have to flail around for a while before I can figure out how to get rid of it. Presumably there are people who deliberately create multiple windows on these things and actually do serious enough work on them that this is useful, "my experiences with trying to ditch my lappy for 100% ipad" is definitely a genre of blog post.
by andy99 | 2025-07-24 23:27:47+00:00
Management. All automation creates more vacuum for bureaucratic nonsense to take over. IC will be worked to the bone, maximizing utilization on whatever precise task still can't be fully automated (grasping arbitrarily shaped and positioned objects) and more management will be added to culture teams or whatever useless functions companies can spend the freed up money on to signal their prowess.
by wyldfire | 2025-07-24 23:28:21+00:00
I don't know if it's the case for folks with Down Syndrome (I suppose it's likely not), but hearing-impaired folks have their own culture to the point that in the past it was seen as some as a betrayal to the community to seek out cochlear implants. I think having their own language does a lot to create unity among them.

All that above is to say that I wonder if some folks in Down Syndrome might actually prefer their status quo abnormal development?
by twoodfin | 2025-07-24 23:28:35+00:00
I suspect high-end merchants get that the financially well-off potential customers who hold high-fee rewards cards expect to be able to use them. Worth the 3% on a high-margin purchase to attract the customer vs. annoying them.

The fee ends up split between the cardholder, bank, Visa/MC, maybe the card brand sponsor… everyone’s happy.
by avalys | 2025-07-24 23:28:39+00:00
Plenty of people spend time and money preparing for low-probability but highly catastrophic events. Purchasing insurance that covers your home for fire damage is one such example.

The fact that the chance of a well-maintained home burning down is vanishingly small doesn’t make this an imaginary risk.

Thinking about how to protect yourself from violent crime and deciding to purchase and carry a gun doesn’t seem fundamentally different.
by ameliaquining | 2025-07-24 23:29:21+00:00
I looked at the code, and unless I've misunderstood it, this bug can't corrupt the slice in the sense of allowing accesses outside the designated allocation or anything like that, because the slice variable is only written to once, when the writer is initialized, so there can't be racy accesses to it. The contents of the slice can potentially be corrupted, but that's just arbitrary bytes, so not a memory safety violation.

The line I'm not quite as sure about is https://go.googlesource.com/go/+/refs/tags/go1.13.1/src/bufi.... That assignment is to a variable of interface type, so in theory it could cause memory corruption if multiple goroutines executed it concurrently on the same receiver, which was possible until the bug was fixed. That said, I cannot immediately think of a way to exploit this; you can only write error values corresponding to errors that you can make occur while writing to the socket, and that's a much more constrained set of possible values than the arbitrary bytes that can occur in a buffer. And for that, you only get confusion among the types of those particular errors. It might be possible but it at least looks challenging.
by Coffeewine | 2025-07-24 23:29:25+00:00
> Across client and data center, I’ve directed our teams to define next-generation product families with clean and simple architectures, better cost structures and simplified SKU stacks. In addition, I have instituted a policy where every major chip design is reviewed and approved by me before tape-out. This discipline will improve our execution and reduce development costs.

One would hope they would figure out if a design was a good fit for the company well before tapeout. Ideally before they were done with the rtl.
by marcusverus | 2025-07-24 23:30:06+00:00
I think it's a mixed bag. It seems like they were genuinely concerned about contamination that could harm the astronauts or others on the team, but not particularly concerned about other biological contamination. From the article:

> For example, the Apollo spacecraft hadn't been designed to prevent potential lunar contaminants from being exposed to Earth's environment; once it splashed down in the Pacific Ocean, the capsule's cabin had to be fully opened in order to let astronauts Neil Armstrong, Buzz Aldrin and Michael Collins out.

Another obvious "oversite" was that the "biological isolation garments" (BIGs) they wore were tossed into the open capsule door, and donned by the potentially contaminated astronauts! It's true that they were sprayed down with disinfectant afterwards, however the spray and whatever it washed off were drained directly into the ocean.
by tonymet | 2025-07-24 23:30:07+00:00
windows has had ACLs and security descriptors for 20+ years. Linux is a super user model.

Windows Store installs, so about 75% of installs, install sandboxed and no longer need escalation.

The remaining privileged installs that prompt with UAC modal are guarded by MS Defender for malicious patterns.

Comparing sudo <bash script> to any Windows install is 30+ years out of date. sudo can access almost all memory, raw device access, and anywhere on disk.
by vimy | 2025-07-24 23:30:10+00:00
For standard credit cards in EU it’s mandatory to pay the full balance every month. And it doesn’t cost anything, there are no interest rates. Not sure how much banks profit on it, if there’s even a profit.

I think most banks only offer if because customers needed credit cards to order stuff on the internet. Before that they were very rare here.

Edit: I meant the credit is free but I pay like € 2 / month to have my card. So maybe that’s their profit.
by jmcphers | 2025-07-24 23:30:39+00:00
You can in fact get something "pretty close" to Positron by adding and configuring a whole bunch of VS Code extensions, adjusting the layout, etc. However it's fiddly and time-consuming work (and quite challenging for novice users); the resulting UX can be pretty disjointed, too.

Positron provides a batteries-included experience that lets you work with Python and R out of the box; it's easier to get started, everything's already set up for data work, and the tools all work together smoothly. At least, that's the goal. :-)

(disclaimer - I work on Positron)
by specproc | 2025-07-24 23:31:08+00:00
I've been mucking around with a friend's old laptop this week and have gone through the install process for both EndeavourOS and Windows 11. I've been blown away by how much easier Linux (and Arch-based Linux to boot) has become compared to Windows.

With EndeavourOS, I'm asked a few basic questions about my keyboard, language, timezone, DE and where I want it put. With Windows, I'm clicking through endless pages asking it not to do a whole load of hostile crap, before having to spend the next hour or so carefully removing bloat and checking settings.

Same playing with my nephew yesterday. He's 8 and has just got his first laptop (also Win 11). He complained about how confusing it is, and I'm not surprised because his screen is full of junk. The poor kid had a stock ticker on his bar!

EndeavourOS just works out of the box and gives a simple, clean starting point to build on. I was amazed by how much more usable a supposedly beardy distribution is than the normie offering.
by goku12 | 2025-07-24 23:31:11+00:00
> What exactly are you arguing?

This part:

> ... to install the rust development toolchain (because it changes too rapidly to effectively be in any repos)

Rust toolchain is installed using rustup, not curl bash. It's rustup that's installed using curl bash. And while the site does recommend it, installing rustup alone securely is far easier than the entire toolchain.

> How is that helpful to the vast majority of the people on Mac/Linux trying to install Rust from scratch and reading the instructions on the website?

If you're concerned about running a remote script, just check how much work the script actually does. If it's not much, it may be worth exploring the alternative ways for it. For example, the rustup package in Arch Linux [1] does the same thing as what you get from curl bash.

I have mise installed - another package which recommends installation using curl bash. But I don't use it, because it's really easy to install it manually. And when some other tool recommends curl bash, I check if it's supported by mise. As it turns out, rustup can be installed using mise [2].

[1] https://wiki.archlinux.org/title/Rust#Arch_Linux_package

[2] https://mise.jdx.dev/lang/rust.html
by TMWNN | 2025-07-24 23:31:22+00:00
> Sometimes you get travel insurance, with the card that charges 200 EUR annual fee

Why would someone pay EUR200 each year for that credit card, then? Why does it exist at all? The only US credit cards I know of that have fees have fees because of their (huge) benefits.

You, of course, pretended to not see my pointing out your laughable math regarding fees versus cashback even though I said up front that I get 2-5% back.
by recursivecaveat | 2025-07-24 23:31:27+00:00
> saw a video where someone 3 yards away draws a machete and runs at the other person.

It's probably best to be realistic about what is possible. If somebody tried to whack you on the sidewalk with a machete, they would win 100% of the time, because you're not living 24/7 in a hyper-alert paranoid state keeping an incredibly close eye on everyone 360° around you. Unless you've drawn your weapon 100s of times in near-miss scenarios on people who look like they might be grabbing a weapon because their phone is in a coat pocket or something, it's just the truth. If you're going to live in a society you just kind of have to accept that you could hypothetically be killed in broad daylight by a very-motivated someone with no real opportunity to defend yourself. Happens to organized crime members all the time, and obviously they have way way more reason to be paranoid than regular people.
by astrange | 2025-07-24 23:31:32+00:00
America's homeless population is because of America's land use policy, which is pretty communist. Or rather, it runs on "economic democracy" - no matter how much money you have, you can't do what you want with your land unless all your neighbors agree with it enough to change the local zoning policy. Which means you can't build low-cost multi-family housing on it.
by PaulHoule | 2025-07-24 23:32:19+00:00
For an http API (say something like boto3 or a client for arangodb) you might want to use the API from either a sync or async application. Since the code is almost all the same you can code generate a version of the API for both sync and async which is particularly easy if you use

https://www.python-httpx.org/

since you can use basically the same http client for both sides. One way to do it is write code like the sample I showed and use

https://docs.python.org/3/library/ast.html

to scan the tree and either remove the maybe_await() or replace it with an await accordingly. You could either do this transformation when the application boots or have some code that builds both sync and async packages and packs the code up in PyPi. There are lots of ways to do it.
by juliasilge | 2025-07-24 23:33:31+00:00
I work on Positron, and I would say that it isn't a clone of Spyder, but rather a fork of VS Code that is very inspired by RStudio (also built by our company). Spyder takes a lot of inspiration from RStudio, and I would say that Spyder can be a great choice for someone doing data science who uses Python only. I would argue that Positron is a better choice for people who use more than one language during their regular work (Python + C, Python + Rust, Python + JavaScript, etc) or who want a more customizable, extensible IDE.
by stillpointlab | 2025-07-24 23:33:33+00:00
It's about not putting the cart before the horse. Theory is a guide to the songs, not a set of rules to be mastered in isolation.

In philosophy there is a test of necessity and sufficiency. Theory is definitely not sufficient to become a proficient musician (let alone a composer). I think it is arguable whether or not it is necessary (I would argue not and handwave towards the list of musicians who are literal legends despite 0 theory). So as a strict answer to your question: maybe not.

However, practically, learning some theory is obviously beneficial to many learners and can speed up the process of acquiring the skill. But again, beware of cart before horse.

Take one famous legend who is infamous for his insistence he know no theory: B.B. King. I mean, anyone who analyses his music can point out a laundry list of complicated theoretical things he is doing in his playing. He just doesn't know the "book names" for it since he learned those things in a different way. He definitely know what a "6" chord is, when to use it, what scales to use with it, etc. But if you asked him to explain it to you he'd probably show you 4 or 5 songs instead of writing you an essay.
by Alupis | 2025-07-24 23:33:40+00:00
The US is vastly larger and more populated and more diverse (in terrain, culture, life, etc) than any other 1st world country. There is no meaningful comparison.

Only criminals engage in crime, by definition. You are essentially asking why the US has more criminals than other 1st world nations. Making a law that prohibits a specific tool (ie. a firearm) does nothing for the crime rate.

Regardless, the constitution specifically affords citizens a right to defend themself using a firearm. That's not going to change because criminals illegally obtain firearms and illegally use them on other people.
by mopenstein | 2025-07-24 23:34:24+00:00
How does that scenario alter free and open source software?

The software is still open and free.

But in your scenario you're just super angry you didn't figure out to make money off your work.

I'm gonna go out on a limb and suggest that you never, ever contribute to FOSS and instead just buckle down and focus on selling your blobs.
by SL61 | 2025-07-24 23:35:11+00:00
Remember that executives answer to the board of directors. The board's job is to make sure execs do things that make the company money, or in practical terms, "things the board thinks will make the company money".

A sensible, sober CEO would still need a lot of political capital to push back against a boardroom that's hounding them to jump on the latest hype train. You certainly won't get that from a CEO who just took that position a few months ago.

A sensible, sober boardroom that doesn't push their execs to jump on the hype train would need to answer to angry shareholders. It's almost certain that >50% will support the latest fad and would vote out a board that they perceive as being behind the times.

That's where startups and privately owned companies get their natural advantage of being able to go against the grain.
by yawaramin | 2025-07-24 23:35:29+00:00
Well...yeah. That's the point. We want there to be a layer of indirection to prevent mistakes. Otherwise you get things like this: https://www.columbia.edu/~ng2573/zuggybuggy_is_2scale4ios.pd...

> There is a UI for memorialising users, but I assured her that the pros simply ran a bit of code in the PHP debugger. There’s a function that takes two parameters: one the ID of the person being memorialised, the other the ID of the person doing the memorialising. I gave her a demo to show her how easy it was....And that’s when I entered Clowntown....I first realised something was wrong when I went back to farting around on Facebook and got prompted to login....So in case you haven’t guessed what I got wrong yet, I managed to get the arguments the wrong way round. Instead of me memorialising my test user, my test user memorialised me.
by fsckboy | 2025-07-24 23:35:50+00:00
>Many passengers are irrational about forcing their way onto already overcrowded trains.

the train that leaves first gets there first

----

although, entering a station once with a friend, we ran for an arriving subway train with a friend. they got on but I did not. however, I was familiar with the station we were in, and the destination station and I realized....

so I ran down the platform, continuing in the same direction, and before I reached the other end of the platform, as I expected, the follow-on train arrived. I boarded it, and now I was ahead of my friend schedulewise: blew their mind when I was waiting for them to exit at the destination station.
by jhanschoo | 2025-07-24 23:36:19+00:00
I don't see prima facie how this reason holds up for Valve which also faced similar pressure. Valve has robust internal refund processes, that I suppose many people use instead of chargebacks because it is more convenient. Perhaps it also suffers from the same problem as adult content and service operators with respect to just its adult content, but I would need more proof of that.
by PaulHoule | 2025-07-24 23:36:24+00:00
IC. AI is best at high-social status bullshitting where it doesn't matter to you if you get the right answer or not. No wonder the likes of Eric Schmidt and Satya Nadella think it is such a big deal, because it can do their jobs. Did Copilot write this?

https://blogs.microsoft.com/blog/2025/07/24/recommitting-to-...

It's hard to see how human intelligence could be behind GAME PASS and the Activision acquisition (Did you know King Games is part of Microsoft?)
by cyanydeez | 2025-07-24 23:37:05+00:00
As far as I can tell, the flow of cheap money stopped when inflation started. This means all their portfolios of free stocks inflating the market stopped. These people all live in a world of 6 months to profit, and thus the market forces at work mean for them to demonstrate anything for their next fleecing of shareholder value, they need to trim budgets.

Prior to this, they could just get low interest loans to do whatever financial engineering they wanted to demonstrate growth and get their bag. That is over, now the only way to get the bag is firing people.

So, it's not just that they're all in a capitalist polycule, but is is that they all just live in the same bubble of irrational short term reasoning.
by CodePoint | 2025-07-24 23:37:10+00:00
"I spent the past year building this in my spare time because I got tired of enterprise security tools that cost $50K/year and don't understand Linux." You should have written it as a learning opportunity. To think you can replace such tools seems rather arrogant -- Experienced professionals with decades of experience worked on them. You're just 1 person, and it seems like you may be new.

"TheProtector is a comprehensive security monitoring tool that actually runs on the systems we use (Linux) instead of being a Windows-first afterthought. Built it entirely on a $500 laptop because I believe good security shouldn't require unlimited budgets." After reviewing the code it doesn't seem very comprehensive. As some others have pointed out it appears to be mostly AI-generated. Again, as a learning opportunity this isn't a bad exercise, but I also probably wouldn't brag about it being comparable to tools that were made by teams of people who are likely far more knowledgeable when it comes to designing such tools.

"Been running it on my own systems for months. Catches the stuff that matters and doesn't flood you with false positives. If you hate expensive security theater as much as I do, might be worth a look." I should also probably address the elephant in the room: Your github account is only 2 days old (as of this writing). Additionally the initial commit to the repository was made on July 23rd, 2025. Based on the commit history (and based on the files that were committed) it looks like this was created with AI in the span of a couple days.

I'm sure a 'security-minded' individual such as yourself sees the problem here: a monolithic script from some random person on the internet purporting to have developed something to help secure my system... I wouldn't touch it with a 10-foot pole.

Something about this post stinks to me. Smells like somone trying to phish for installs. Seems like something an intelligence agency would do: post something like this in several places hoping somone runs it.
by BeetleB | 2025-07-24 23:37:29+00:00
Completely agree.

But let's extend the distance to 5 yards. Or 8 yards. Or whatever. There is a distance threshold where racking vs not racking makes a difference. It's not a thin threshold. You probably gain a decent number of yards by not having to rack.

Lots of things can go wrong while carrying a handgun (with or without a round in the chamber). I don't recommend people do it unless they are aware of a specific threat. But once you are under a specific threat, then it doesn't really make sense to carry it without a round in the chamber.
by aerostable_slug | 2025-07-24 23:38:20+00:00
The problem at hand is antisocial behavior, not how garbage service is handled in Oakland. Giving my neighbors effectively free garbage service wouldn't meaningfully address it.

You can't just keep giving them free things and hope they'll magically turn into productive citizens, especially when 'free' really means "paid for with someone else's money." They just laugh at you and take the handouts, just like they laughed at me for being such a sucker that I paid my bills every month. This is the reality of dealing with antisocial behavior, and it would behoove more commentators (and policymakers) to familiarize themselves with it.
by cyanydeez | 2025-07-24 23:38:51+00:00
I agree that this definitely is labor suppression, but it has a real cause: the end of low interest rates and inflation. They can no longer "grow" their way into their 6 month bonuses, so they basically have to trim fat and if they all collude on doing it, it _can_ work. If they dont all collude, someone gets cheap engine for growth.