MurphyA/hacker-news huggingface dataset:
by roxolotl | 2025-07-29 01:52:47+00:00
Don’t know but I’d highly doubt it’s relevant.

> The aluminum contained in vaccines is similar to that found in a liter (about 1 quart or 32 fluid ounces) of infant formula. While infants receive about 4.4 milligrams* of aluminum in the first six months of life from vaccines, they receive more than that in their diet. Breast-fed infants ingest about 7 milligrams, formula-fed infants ingest about 38 milligrams, and infants who are fed soy formula ingest almost 117 milligrams of aluminum during the first six months of life.

https://www.chop.edu/vaccine-education-center/vaccine-safety...
by rayiner | 2025-07-29 01:53:28+00:00
Most people lack the ability to understand inferences drawn from mathematical analysis. It’s not just vaccines, it’s numeric or logical reasoning of all kinds. If you can’t explain why something is true in non-abstract terms, you can just forget it. And it’s true even for somewhat smarter than average people: https://www.independent.co.uk/news/world/americas/msnbc-bloo....

I’ve become persuaded that for democracy to work successfully, you need to socialize people from birth so their gut feelings are directionally correct. And you need to cultivate trust in certain institutions, in particular public health, by targeting every segment of society on their own terms and jealously guarding the institution’s credibility.

My dad worked on maternal health programs in Bangladesh. They’d build hospitals, but women in the villages wouldn’t use them. Turns out they didn’t trust the doctors, they trusted the village midwives and traditional healers. So my dad proposed to network with the midwives to establish reciprocal trust. This worked because it reflected how human trust networks operate. Public health in a developed country shouldn’t work any differently (and certainly shouldn’t work the way it does now in the U.S.).
by jc4p | 2025-07-29 01:54:15+00:00
Hi all, i'm the security researcher mentioned in the article -- just to be clear:

1. The leak Friday was from firebase's file storage service

2. This one is about their firebase database service also being open (up until Saturday morning)

The tl;dr is:

1. App signed up using Firebase Auth

2. App traded Firebase Auth token to API for API token

3. API talked to Firebase DB

The issue is you could just take the Firebase Auth key, talk to Firebase directly, and they had the read/write/update/delete permissions open to all users so it opened up an IDOR exploit.

I pulled the data Friday night to have evidence to prove the information wasn't old like the previous leak and immediately reached out to 404media.

Here is a gist of Gemini 2.5 Pro summarizing 10k random posts: https://gist.github.com/jc4p/7c8ce9a7392f2cbc227f9c6a4096111...

And to be 100% clear, the data in this second "leak" is a 300MB JSON file that (hopefully) only exists on my computer, but I did see evidence that other people were communicating with the Firebase database directly.

If anyone is interested in the how: I signed up against Firebase Auth using a dummy email and password, retrieved an idToken, sent it into the script generated by this Claude convo: https://claude.ai/share/2c53838d-4d11-466b-8617-eae1a1e84f56

And here's the output of that script (any db that has <100 rows is something another "hacker" wrote to and deleted from): https://gist.github.com/jc4p/bc35138a120715b92a1925f54a9d8bb...
by clickety_clack | 2025-07-29 01:54:34+00:00
Strong vaccine supporter here, and I think studies like this are still worth doing. Healthy society has vocal skeptics that are occasionally correct. We also have authorities that are occasionally wrong. Scientists maintain trust in our most important systems by properly addressing claims through rigorous research rather than relying simply on authority. We’ve seen smoking and thalidomide (and I’m sure more relevant substances) scientifically ‘proven’ safe before causing massive harm. When anti-vaxx claims evolve (MMR, now aluminum), having solid population data helps counter misinformation with hard evidence. Active research helps us know which side the misinformation is actually on.
by rbongers | 2025-07-29 01:54:46+00:00
I don't have a problem with needing to memoize props passed to child components for their memoization to work.

If your parent component doesn't need the optimization, you don't use it. If it does need it, your intention for using useMemo and useCallback us obvious. It doesn't make your code more confusing inherently.

The article paints it as this odd way of optimizing the component tree that creates an invisible link between the parent and child - but it's the way to prevent unnecessary renders, and for that reason I think it's pretty self-documenting. If I'm using useMemo and useCallback, it's because I am optimizing renders.

At worst it's unnecessary - which is the point of the article - but I suppose I don't care as much about having unnecessary calls to useMemo and useCallback and that's the crux of it. Even if it's not impacting my renders now, it could in the future, and I don't think it comes at much cost.

I don't think it's an egregious level of indirection either. You're moving your callbacks to the top of the same function where all of your state and props are already.
by insane_dreamer | 2025-07-29 01:55:22+00:00
> way way way, worse that Gaza are going on right now

Yeah, all those three are bad; Sudan in particular. I wouldn't say Yemen and Syria are worse than Gaza.

> You seem to only care about Israel.

The reason I'm screaming about Israel is especially because we (the US) are aiding and abetting it. If we were funding Sudanese rebels the way we're funding the IDF, and welcoming their generals to the White House like we do Bibi, I'be screaming about that too.
by fleebee | 2025-07-29 01:55:26+00:00
You can still write simple, understandable React. All the weird, obscure hooks they have added in the recent years are opt-in and are often better left for library maintainers. You probably don't even need useMemo or useCallback. That's not to say I don't see developers (mis)using them all the time, but that's self-imposed convolution and you can only blame React as a footgun supplier.
by dckimGUY | 2025-07-29 01:55:29+00:00
I suppose clarifying on my own post shouldn't be problematic, and so I will expound.

What I have produced presents a unique method of manipulating and 'wrangling' the simplistic rectangles that are what 'really' makes up HTML.

The most interesting inclusion in the program, and a rather seldom used choice, is the tripartite selection system. It is very different to use than the far more common, and, let's face it, ubiquitous bipartite selection system.

In short, I will explain that each part that we are working with in the program is a member of one and only one of the three groups (the groups are indicated by colouration). So for the motion, we can move an entire group together without having to select each part explicitly per action.

There are so many advantages to a tripartite selection system. We can apply any function to the tripartite group. We can move focus to the first member of the next group. And three is few enough for a quick cycling.

My view (though perhaps biased as the writer) is that this system is a 'glove-fit' for HTML because it also lends expertly to the artistic standard, giving a foreground middleground and background.

The idea extended very naturally into two crucial systems (which are nearly identical in code), one for managing document ordering (manual reflow using the 'v' key, and reflow with a group preference), and secondly, for managing z-index (likewise).

Of course, we can still move things up or down in the z-index, and ceiling or floor... but then additionally those same ways within the group.

So, enough of that... What am I looking for? What do I want to get out of this post?

A little bit of exposure? Sure.

Additionally, if there is some rogue expert roaming the posts, just check it out, have a look, and see whether you might be able to distinguish what the natural branches from this foundation would be.

That's how I'm looking at this, as a foundational component upon which a GUI will be laid. Right now it's on the keys, no GUI yet.

I see the development of any prospective GUI button menu thing as being completely directed through the developmental branches which might naturally arise following careful consideration what is presented.

I'm looking to avoid the every dangerous 'pigeon-holes' that might corner my branches.

So, I'm looking for the fairest break on the branches that can go so many ways.

I will admit that I do not have the ability to know what specializations might share characteristics in a branch from this project.

Study and consideration of potential branch structure would be helpful in my further improvement and consideration of the foundational structure (aside from general code cleanup).
by joelg | 2025-07-29 01:55:55+00:00
yeah I completely agree, I think there's a whole logic of reasons to using useEffect/useCallback/useMemo that the post didn't acknowledge.

personally, I want to have a comprehensive understanding of exactly when and why each of my components re-renders, and to do that I use hooks and design around referential equality. like you said, it's a kind of documentation, more about organization than performance.

not to say that this way is intrinsically better! just that the style is appealing for its own reasons
by dubyah | 2025-07-29 01:56:52+00:00
Violations happened immediately[1]. Each phase was to be 42 days(6 weeks) not 3 months.

No, Israel & the US wanted a continuation via a modified version of phase 1 ceasefire rather than proceed to phase 2: securing exchange of Israeli captives but with the temporary cessation of military activities i.e., allowing them to resume.

Phase 2 as originally outlined & agreed would have been a commitment to a permanent cessation of military and hostile activities, withdrawal, and exchange of the remaining surviving Israeli & number of Palestinian captives[2]:

Announce restoration of a sustainable calm (cessation of military operations and hostilities permanently) and its commencement prior to the exchange of hostages and prisoners between the two sides – all remaining Israeli hostages who are living men (civilians and soldiers) in exchange for a number of prisoners in Israeli prisons and detention centers and the complete withdrawal of Israeli forces from the Gaza strip.

Moreover, Israel was supposed to send negotiators for implementation of phase 2 no later than the 16th day of phase 1(February 3rd) per the phase 1 agreement. Instead, Netanyahu met up with Trump, formulated their own agreement without any other mediators, and they delayed sending in negotiators until 2 days(February 27th) before phase 1 of the ceasefire was set to end with a "take it or else" approach.

[1] https://edition.cnn.com/2025/01/24/middleeast/gaza-israel-de... [2] https://archive.is/c82OT
by rstuart4133 | 2025-07-29 01:56:53+00:00
> e.g. was that Toyota firmware that caused acceleration developed in Japan? An audit revealed it was absolutely horrible.

It's horribleness was a line pushed by the people trying to get money out of Toyota. From their descriptions it seemed in line with proprietary code that it's owners never expected to be exposed to sunlight.

The way the code was described, it sounded like it had grown organically for a long while. Features tacked on here and there, no obvious attempt at formally ensuring deadlines in real time critical software (like braking systems) were met. Instead they tacked on features, then subjected it to what must have been a truly formidable testing regime, and fixed any failures with more hacks (like resetting the machine if invariants were violated). Well, maybe. That's a guess. It's seems be in line with the process Toyota uses for all its car engineering, from light bulks to engine rings. They applied the same engineering process to software. Given they produce the most reliable line of cars on the planet, it's hard to be too critical.

And it worked in this case too. No serious (ie, life or equipment destroying) bugs were found on Toyota's code. No one knows for sure what the problem was, but suspicion is noise caused a bit flip sending NEC MCU off the rails. But not in Toyota's code, because every variable was stored in 2 places, every read compared to two values and if they weren't equal, the MCU was reset (I think?). However, the OS Toyota used was a proprietary one from NEC. They didn't have the source for it. I think they assumed it was at robust as their code. They were wrong. And by flipping a bit in the scheduler's variables (which weren't duplicated), you could cause the exact symptoms that lead to the crashes (engine stuck at full throttle, ECU off in lala land).

I came away thinking their mistake was to treat software like a piston rod. You don't have to see a piston rod being made. You can test the materials when you get it, you can x-ray it, you can deliberately push it to destruction, and most importantly if you do that enough times you can create a statistical model about it's behaviour. But software, particularly closed source software embedded in an MCU that can change without notice anytime, isn't like that.

Still, Toyota didn't come out of this smelling like a rose. Rather than transparently investigating the problem, they hid everything for as long as they could, tied everyone up in legal knots, and counter sued. Anti-social behaviour IMO. Everyone, including them, would have benefited in the long run by an open and transparent investigation into the root cause. Still, it's hard to criticise their engineering. Them being screwed over by NEC hiding stuff from them (their customer) just as they hide stuff from their customers else is karma, baby. I hope they learnt something from it.
by defrost | 2025-07-29 01:57:23+00:00
You can check the figures yourself: https://www.acpjournals.org/doi/10.7326/ANNALS-25-00997

Thanks to a long term study over a changing schedule they were able to layer the subjects by cumulative aluminum exposure from vaccination with aluminum-adsorbed vaccines.

No adverse associations were found, from low to high levels.

This was a study on humans, not mice, and to the best of my reading neither Tomljenovic nor Shaw were involved here.
by somethingsome | 2025-07-29 01:57:56+00:00
Struggle is very good for learning, I remember as a child enjoying very difficult interfaces because I was proud of being able to navigate the software when I finally get there, becoming very efficient with it, and I learned way more about the domain. (I'm thinking for example Cubase, reason, Photoshop at the time, most linux softwares, vim,...)

While easy to use softwares are more 'enjoyable' and the dopamine reward is high for small actions, it also prevent to develop some ability and resilience in navigating harder things. When the software complexity increases, users get annoyed and don't use it correctly because they were never exposed to much complexity before. (thinking about medical softwares that require many many actions to encode a patient, finance softwares, etc..)

Now, not all softwares are made to improve one efficiency. In your case, the app allows a children to express its creativity in other ways, which is very valuable also. So I think it is good that the interface and the interaction are easy, the focus should be on the creativity and not on the manipulation.
by KittenInABox | 2025-07-29 01:58:01+00:00
> This is just one example amongst hundreds. There are loads of these male athletes with male physiological advantage taking medals in women's sports.

Then where are they in the olympics? Why didn't trans women take over all medals in all categories? Why was there only one trans woman in fucking weightlifting and her technique apparently sucked so bad that she was disqualified? I'm not like deeply into sports, again, I just tune into the most elite international sports event and I literally do not see what you're talking about.
by danbruc | 2025-07-29 01:58:23+00:00
»Does the establishment of a Jewish state [in only part of Palestine] advance or retard the conversion of this country into a Jewish country? My assumption (which is why I am a fervent proponent of a state, even though it is now linked to partition) is that a Jewish state on only part of the land is not the end but the beginning.... This is because this increase in possession is of consequence not only in itself, but because through it we increase our strength, and every increase in strength helps in the possession of the land as a whole. The establishment of a state, even if only on a portion of the land, is the maximal reinforcement of our strength at the present time and a powerful boost to our historical endeavors to liberate the entire country.«

David Ben-Gurion, 1937
by kuon | 2025-07-29 01:58:46+00:00
I should have been clearer on two behaviors. What I describe is if you are "alone". Green light often (not everywhere) don't stay green if there is no car. But if there is traffic, it is made in such a way that when you get a green somewhere, you can expect every subsequent intersection to turn green when the head of the traffic arrives. So the first vehicle will see a red light turn green as they approach, and the ideal timing is around the speed limit. Further cars will have a green light, but with no intensive to speed as they are sandwiched between cars.

Also I should say that this is empirical evidence based on about 20 intersections I pass often. I don't know how much of a rule it is country wise as I don't pay attention to that when I go places I don't routinely go.
by gerdesj | 2025-07-29 01:58:59+00:00
OP uses bold text for emphasis like an ill-advised user of a marker pen and deploys a very bizarre collection of quotation marks. Sometimes "..." and sometimes “...”.

If you are going to studiously ignore convention, please do it consistently weirdly.

The list of issues is not a list.

Oh well. In the end the message is the thing and not the medium. Ideally the medium might be a bit more conventional to enable readers to follow the argument and not have to mentally adjust the text.
by forgotpass012 | 2025-07-29 01:59:09+00:00
Speaking about this latest wave of LLMs only…

I was super pessimistic and I now recognize that there is value.

I am saving about 20% of my effort coding at work. However, coding is not exactly the main thing that takes time at work. It’s figuring out what should be done, getting everyone on board, coming up with the high level architecture.

So I’ve gone from this is terrible to acknowledging that it has limited use. I am still sick of AI slop and even when I use it for code at work AI has a tendency to generate mountains of garbage.
by skybrian | 2025-07-29 02:00:17+00:00
Well, maybe not. Did the UN send peacekeepers when Russia invaded Ukraine? Do they send peacekeepers to stop the war in Sudan? Intervening in an active war is not what peacekeepers are for.

Why are Palestinian refugees still in Gaza when the whole place is a war zone? Certainly some would stay, but mostly they are trapped.

Under the circumstances, for Gaza, having Israel as a neighbor is worse than having Russia as a neighbor. Even if enough food is shipped in to temporarily resolve the current crisis, people in Gaza won't be safe where they are.

So, here's a question that's rarely asked: which countries will accept refugees from Gaza? Obviously not the US with the current administration. Why not France, Germany, or other European countries?

According to Wikipedia, since 2022, Europe took over five million Ukrainian refugees due to the war. [1] This is more than twice the population of Gaza.

[1] https://en.wikipedia.org/wiki/Ukrainian_refugee_crisis
by zahlman | 2025-07-29 02:00:22+00:00
I don't know whether you are being sincere or sarcastic, but either way this is not a productive mode of discourse. If sincere:

> Please don't use Hacker News for political or ideological battle. It tramples curiosity.

If sarcastic:

> Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
by thegrim33 | 2025-07-29 02:00:23+00:00
To preface this, I'm not saying anything about vaccines, efficacy, safety, or my positions on them.

But how can you expect to convince doubters when a claim like "no link between vaccines and autism" is made, and all you have to do is click your left mouse button twice to pull up the actual research, and see that what was actually studied was "did a certain amount of increase in aluminum content in vaccines create more negative health effects than the vaccines with the previous aluminum content?". That's what was studied here, that is the source for this article.

Yes, these things are related, but intentionally removing that context and misrepresenting the actual result does not convince people to believe you, it just drives them further away. It's so easy for a reader to see for themselves that the claim that's being made in this case is not remotely what the source research is actually claiming. How does that increase trust?
by jauntywundrkind | 2025-07-29 02:02:01+00:00
The zero copy dmabuf work getting tx too is cool to see.

AMD Workqueues is probably the neatest feature here, to me. Some really new GPU programming models, where userspace can fill up the queue as it pleases. Neat shift. https://lore.kernel.org/amd-gfx/20240909200614.481-1-shashan...
by Bjartr | 2025-07-29 02:02:04+00:00
Yes, yes they can. What would ever make you think otherwise?

Not even when "Don't be evil" was still their motto did Google not only have the ability to read all communication that was routed through them, they actively used those messages to develop their offerings.

The only system or organization you should trust to not read your messages is one that never gets to see your messages unencrypted. In all other cases, assume the organizations involved in relaying your message can read them, and will do so if they (or any of their employees, or contractors, who happen to have access) think of a reason.
by cyphar | 2025-07-29 02:03:07+00:00
I mean, you describe this as a "hit piece" but then go on to agree with most of the points (perhaps disagreeing that it is a problem, but not disagreeing with the factual basis of the statement) or point to incredibly recent developments which you say resolve those issues.

Matrix has been in development since 2014 (which is around when I first started using it) so pointing to solutions only just implemented in 2024 or "still being addressed" in 2025 as proof that this is a "hit piece" seems disingenuous to me (especially since this blog post is from 2023, and thus was correct at the time of writing according to your own comment). I understand that you are protective of your project, but having read your comments over the past decade, it seems that you feel the need to reply somewhat dismissively to any criticism.

I don't want to rehash the entire E2EE history here, but that decade-long saga has always bothered me.
by phibz | 2025-07-29 02:05:03+00:00
Excellent write up and great real world review. You mentioned wanting to become a generalist.

The missing applet for tuxedo-rs would be a great opportunity to "scratch an itch" and learn some new technology.

You have some options on the language you write the applet in if you're not ready to jump in to Rust or C.

Might be a great way to learn some stuff outside of web development.

Good luck.
by woodruffw | 2025-07-29 02:06:33+00:00
A thought-provoking argument that I read recently was that Israel's relationship with the diaspora has undergone a fundamental shift in the last 20 years, largely tracking with demographics: it's no longer the case that Jewish life is primarily diasporic in nature, and Israel's growing impatience (and sometimes open disdain) for the diaspora tracks with that demographic reality.

I think this is an underrepresented factor in why Israel feels unilaterally emboldened in this conflict: there's no longer a statistically more liberal, secular, identifiably Jewish majority outside of the country that serves as a check on its actions.