MurphyA/hacker-news huggingface dataset:
by morserer | 2025-07-25 09:09:35+00:00
It's not all grim. GrapheneOS utilizes IOMMU to isolate the baseband and sandbox the wireless components. Even with binary blobs, the wireless radios cannot read encrypted traffic.

https://grapheneos.org/faq#baseband-isolation

Sure, it's not perfect, but it's still really, really good. Even with the binary blobs that are on it, Graphene phones have been impossible to unlock via commercial cracking tools since 2022.

https://osservatorionessuno.org/blog/2025/03/a-deep-dive-int...
by tsimionescu | 2025-07-25 09:09:58+00:00
No, SEGFAULT means you're lucky and your corrupted memory caused you to access something the OS knew you can't access. But every SEGFAULT means that you have a memory safety violation, and so if you get unlucky, the exact same code that SEGFAULTED once will read oe write random objects in your memory (which might include code areas, GC data structures, etc).

Inconsistent data is pretty bad, but it's not as bad as memory corruption.
by Ygg2 | 2025-07-25 09:10:10+00:00
Sure. It can be. In the same way, a C program can be provably correct. I.e., for all inputs it doesn't exhibit unexpected behavior. Memory safety and correctness are properties of the program being executed.

But a memory-safe program != memory safe language. Memory safe language helps you maintain memory-safety by reducing the chances to cause memory unsafety.
by rolandog | 2025-07-25 09:10:15+00:00
I don't agree; portraying it as an opinion has the risk of continuing to erode the world with moral relativism.

The tech — despite being sometimes impresaive — is objectively inefficient, expensive, and harmful to the environment (excessive use if energy and water for cooling), to the people located near the data centers (by stochastic leeching of coolants to the waterbed IIRC), and the economic harm done to hundreds of millions of people whose data was involuntarily used for training.
by roryirvine | 2025-07-25 09:10:20+00:00
The original SSH server was daemonized by default, but inetd operation was always supported. The INSTALL file said this in 1995:

The server is not started using inetd, because it needs to generate the RSA key before serving the connection, and this can take about a minute on slower machines. On a fast machine, and small (breakable) key size (< 512 bits) it may be feasible to start the server from inetd on every connection. The server must be given "-i" flag if started from inetd.

And, of course, SSH was designed to replace rlogin and rsh - both of which ran from inetd as standard. As you say, socket-activation of sshd is simply following very long-standing Unix practice: it's not at all novel, and there's no reason to believe that it's any more risky than any other method of running it.
by isaacremuant | 2025-07-25 09:10:31+00:00
If you're so scared then you were probably too sheltered thinking you'd have "guaranteed security" in a shitty unfair world.

Some of us weren't that lucky and always had to stay creative, even when we lacked resources that privileged 1st world people had.

It's a shift. Exciting and also, yes, dangerous one, but the if you focus on being able to produce true value you are bound to be able to make a living out of it. Whether you're employed by someone or create a company yourself.

Find something you love and be scared at times, but don't let it stop you and you'll succeed.
by lotsofpulp | 2025-07-25 09:10:32+00:00
From wikipedia:

> On June 27, 2006, the sale of Intel's XScale PXA mobile processor assets was announced. Intel agreed to sell the XScale PXA business to Marvell Technology Group for an estimated $600 million in cash and the assumption of unspecified liabilities. The move was intended to permit Intel to focus its resources on its core x86 and server businesses.

So they got out of the world’s biggest new market 1 year before iphone came out.

https://www.reuters.com/technology/rise-decline-intel-2024-1...

> 2007 - Apple launches the iPhone, helping kick off a mobile phone boom that Intel mostly missed. Under CEO Paul Otellini, Intel turned down a deal to make iPhone processors because it did not stand to profit enough from the arrangement. Instead, Apple used chips based on designs from Arm Holdings , whose tech now dominates the mobile market.

The leaders from 20 years ago made the bed that Intel now has to sleep in.
by junon | 2025-07-25 09:10:37+00:00
I can see why you think that but Asciinema's whole original purpose was to share quick recordings. IIRC you actually had to go out of your way to just save locally, as it's main advertised and very obvious functionality was that it was uploaded. They've since made things a little more flexible, but I don't perceive it as being shady. If you used it you were most likely after that functionality.
by vee-kay | 2025-07-25 09:11:48+00:00
You really need to up your game if you think the world's most awarded and most popular Premier (PM Modi) and the most hard working political party (BJP) India has ever got, can be tarnished by someone snidely taking political potshots at Modi+BJP's most famous and incredible achievement yet: UPI.

It is poor manners to deride the visionary leaders of modern India as "authoritarian" when they ensured India remains world's biggest & most vibrant democracy and swiftly scaled the nation to a $5Trillion economy! That's why Modi has been democratically elected as PM for third time in a row!

Now back to the main topic at hand..

First and foremost, UPI is India's most popular real-time unified payments system and it is completely dominating the digital payments scene in India, because it is instantaneous, free for consumers (marginal fees applicable only for high value transactions, and where Interchange conversion is involved). UPI is so good and versatile, that its managing organisation NCPI is able to license the technology stack to other nations, who are then able to promptly launch their own branding of this versatile and powerful digital payments system.

Secondly, sheer scale of UPI is mind-boggling indeed.

In June 2025, UPI (Unified Payments Interface) recorded 18.39 billion transactions, with a transaction value of ₹24.03 lakh crore. The daily average for June 2025 was 613 million transactions and ₹80,131 crore. UPI has shown strong year-on-year growth of 32% in volume and 20% in value compared to June 2024.

Thanks to UPI, the payments situation has changed so drastically in India, that most banks are accounting for 85%+ payment transactions volumes through UPI itself!

Even the poorest people in India are using UPI ubiquitously and safely, it is that trustworthy, instantaneous and seamlessly easy to use.

No wonder Visa, MasterCard, and their ilk are terrified and desperate in India. Their vicious stranglehold has been broken, and how!
by the_third_wave | 2025-07-25 09:12:15+00:00
Certainly XMPP is not perfect but then again, nothing is. The extensibility does make it a bit of a gamble whether any specific server - which can be used for all kinds of purposes, many of which not related to human communication - offers everything a client program expects it to. Then again if your communication/discussion partners all make sure to use servers which support the essentials for the type of use you want to make of it - usually that'll mean those XEPs need for OMEMO, muc and maybe Jingle, the Conversations project publishes a list of what is needed [1] - things work just fine and you'll be communicating without the need for centralised (monetised, censored, monitored, ...) services. I've been running it for decades now, first as a backup "just in case" communication channel but for the last 7 years or so as my main channel to family and friends. We're using mostly the Conversations (-derived) client(s) on mobile, Gajim on desktop and Converse.js on web with servers running on different types of hardware ranging from SBCs (RasPi etc) to ex-lease enterprise hardware. The maintenance burden on the server software is close to zero with Prosody, it hardly takes any resources and has never crashed on me.

[1] https://codeberg.org/inputmice/Conversations#xmpp-features
by cadamsdotcom | 2025-07-25 09:12:37+00:00
Very good write up. This is indeed a qualitative change in the work of software engineering.

What they’re describing can also be done with Claude Code, and it’s way too broad in scope to get any benefit at all from approving code before it’s written. These tools are the way for now.

Cursor is in my opinion not geared for this level of hands-off.
by Karrot_Kream | 2025-07-25 09:12:38+00:00
I find the same kind of behavior on bigger Bluesky AI threads. I don't use Mathstodon (or actively follow folks on it) but I certainly feel sad to see similar replies there too. I speculate that folks opposed to AI are angry and take it out by writing these sorts of comments, but this is just my hunch. That's as much as I feel I should write about this without feeling guilty for derailing the discussion.
by refactor_master | 2025-07-25 09:13:51+00:00
This is [...] a series examining techniques used in game graphics and how those techniques fail to deliver a visually appealing end result

All I see is opinions though. And the internet is full of them. You just have to Google "why does this game look so ...". At least if the author had compared the search stats of "good/bad/beautiful/washed out" it would've carried some weight.

The GTA 5 screenshot is a terrible example. It looks like a cheap, dead, video game environment, reminding me how far we've come.
by callamdelaney | 2025-07-25 09:14:44+00:00
I don't think it's individualism, perhaps that is the case for a small percentage of people.

I think it's the fact that 2 workers per household (or family unit) is now common.

More people working in general, generally, reduces the value of labour, people are now paid relatively less.

If people are working and have career goals, plus are struggling to pay their own way, having children is less of an attractive prospect.

The costs of childcare here in the UK are also very prohibitive. We also have some other significant factors I won't go into.

It looks like generally, the more two worker households in a society, the lower the birthrate.

There are multiple ways to address this but I believe these are the main reasons.

Some numbers (courtesy of claude 4 research):

Japan 1925 - 5.4 children per woman - ~20% women working

Japan 1950 - 3.6 children per woman - ~35% women working

Japan 1980 - 1.8 children per woman - ~47% women working

Japan 2000 - 1.4 children per woman - ~56% women working

Japan 2025 - 1.2 children per woman - ~74% women working
by ta1243 | 2025-07-25 09:15:10+00:00
From various monitoring points I have on multiple internet connections.

One of the promises of starlink was it would stay in space as long as possible before being downlinked, giving far lower latency, alas that hasn't happened yet, and traffic will run thousands of miles in the wrong direction before being downlinked. For example from one location to another I have 360ms via Starlink but just 200ms rtt via local provision (5g p2p wireless then optical). On another it used to downlink in Lagos, but now it downlinks in Nairobi, meaning traffic to Lagos routes Nairobi -> Marseille -> Lagos, taking far longer than it used to. A shame really.
by sneak | 2025-07-25 09:16:42+00:00
I’m fine with a brandishing charge if it defuses the situation and ends the threat and I don’t have to kill anyone.

I would take almost any criminal charge over being forced to kill somebody.

If I hadn’t been willing to brandish at least once, I would have had to shoot to kill, and that sucks bad. Being in a gunfight is the last thing that I want besides being dead or severely injured.
by homebrewer | 2025-07-25 09:17:00+00:00
Non-system software, which is what often gets installed with this method, typically does not get root privileges on my systems, or at least is not expected to write anything into directories like /usr.

These scripts are often written by people who only know one OS well (if any), and if that OS is macOS, and you're on Linux (or FreeBSD, or whatever), you can expect them to do weird shit like sticking binaries into /usr/bin in circumvention of the package manager, or adding their own package repositories without asking you (and often not whitelisting just their packages, which allows them to e.g. replace glibc on your system without you noticing), etc.

It's not comparable to simply using the already installed software.
by isaacremuant | 2025-07-25 09:17:05+00:00
I think there's just droves of people who came to software thinking it was the new stable, solid, good reputation way to make money sitting in front of a computer.

I saw so many people who were not following what they liked but "a good choice".

Now many are scared instead of excited and/or skeptical because they don't trust their own self and ability to reinvent all the time. We do change a lot of practices in short periods of time. This is similar to an extent. Learning and guiding this new world is extremely interesting. You don't need to lie like a CEO either. Just solve, guide and build the new challenges.
by laurent_du | 2025-07-25 09:17:07+00:00
It's no less arbitrary than deciding that gypsies, who engage in petty crime and mistreat their children, forcing them to become beggars and thieves themselves, should not reproduce. If anything, Down kids probably bring more good to society than gypsy kids. And forced sterilization is arguably more ethical than forced abortion. Same things goes for alcoholics and drug users. Privately, most people agree with this position. The idea that eugenics is inherently bad is very unsound and doesn't withstand scrutiny.
by Someone | 2025-07-25 09:17:18+00:00
> A segfault is not guaranteed, it’s just one of the more likely possibilities.

Is it? It will depend on the code, but my gut feeling is that you typically would get a few (if not lot of) unnoticed non-segfaulting issues before you get the segfaulting one that tells you straight in your face that you have a problem.
by kelnos | 2025-07-25 09:17:21+00:00
China has wanted Taiwan long before they fabbed semiconductors. It's a matter of ego and nationalism, not economics.

It's also political: China hates that there's a Western-style democracy full of "Chinese rebels" on an island 80 miles from their doorstep. They also don't like the cozy relationship between the Taiwanese and US militaries.
by other8026 | 2025-07-25 09:17:49+00:00
The swatting attacks are public record, and can be confirmed through Toronto police records.

> another hallucination by the Graphene developer

I'm going to assume that by you saying "another" you mean that there were hallucinations before this one.

What you are doing here is repeating baseless claims that they're crazy, which is complete nonsense. This is exactly the kind of problematic stuff that shows up on Kiwi Farms. Again, Rossmann has an account there and some of his videos seem to be made to appeal to Kiwi Farms users.
by trhway | 2025-07-25 09:17:51+00:00
>But I’m gay, and while there are pros and cons to it, I wouldn’t trade it for anything in the world.

Having Dawn syndrome is severe impairment.

Being gay isn't an impairment. At least nowadays in US. I'm not sure you would feel the same if you were gay in Chechnja ... where supposedly gays just don't exist, and when something like gay happens the family deals with him themselves (the rule there - either the family deals with their own member, or the society will deal with the whole family). Especially if it were about your children.
by lollobomb | 2025-07-25 09:17:53+00:00
I am a long time GrapheneOS user, amazing project. One thing that is not clear to me is the support for NFC payments. Las time I checked, NFC payments on Graohene didn't work at all, but I am reading on this thread that some users do manage to pay via NFC? Did Iget this right? Mind explaining how?

I do not use banking apps (I only use banks that allow me to log in via browser using a 2FA which is not a proprietary app, like a FIDO key or other physical dongle), but do I get it right that Revolut would allow me to pay via NFC in this case? Is this something geo-dependent?
by tsimionescu | 2025-07-25 09:18:26+00:00
Not sure what you mean about F# - being a CLR language, it has the same runtime issues as C# (and IronPython, managed C++, etc).

The article you quote is a toy example - if you write a C# or F# web API server, you'll see that it takes up way more space than a Go one with similar functionality (and has way higher memory overhead as well). A Go API web server is maybe 10MB on disk, with no dependencies (that is, you can run it perfectly in a container that is defined as `FROM scratch; COPY my-go-exec /my-go-exec `). The equivalent Java or .NET container is somewhere around 2-400MB at the minimum.

As for the syntax and constructs, I don't care so much. If OCaml or SML had comparable support and a comparable ecosystem to Go, I'd bet plenty of people would have chosen them instead.
by jtrn | 2025-07-25 09:18:47+00:00
So if I say "No, I didn't," and offer as proof a direct conversation, and in that conversation, I articulated myself almost exactly like the text in question, would that support my claim—that it's just me?

And another thing. Is this the new and modern way of discarding opinions? “You didn't write that.” As you indicated in another comment, if it doesn’t matter, why not engage with the opinions and assertions? It might not be a smear, but it sure does live on the same street as a smear.

Maybe I can avoid this by not using spell-correction. Du u beliv me now?
by Mawr | 2025-07-25 09:18:48+00:00
If I understood the problem correctly, you should try calculating each format of the data once and reusing it. Something like:

type ID { AsString string AsInt int AsWhatever whatever } function new type ID: return new ID { AsString: calculateAsString() AsInt: calculateAsInt() AsWhatever: calculateAsWhatever() }

This does assume every representation will always be used, but if that's not the case it's a matter of using some manner of a generic only-once executor, like Go's sync.Once.
by n4r9 | 2025-07-25 09:19:09+00:00
> How is it possible that, in the era of global competition, such a large market niche is completely dominated by only two players?

This is far from atypical! If you're interested in the prevalence and impact of market consolidation, Matt Stoller talks about it a lot in his BIG newsletter: https://www.thebignewsletter.com/
by Karrot_Kream | 2025-07-25 09:19:25+00:00
For the claim to be objective then I believe it needs objective substance to discuss. I saw none of that. I would like to see numbers, results, or something of that nature. It's fine to have subjective feelings as well but I feel it's important to clarify one's feelings especially because I see online discussion on forums become so heated so quickly which I feel degrades discussion quality.
by BigJ1211 | 2025-07-25 09:19:57+00:00
This is why I strongly adhere to WET¹, you discover so much about the domain the first time you write something. By the time you have it 'working' you realize you should've written vastly different code to solve or cut-off edge cases.

That's why these days I just start writing code, get it to 'it works!' level. To then throw it all away and start again. Takes a little more effort, but the payoff is far less problematic code and tech debt.

¹: Write Everything Twice
by sunrunner | 2025-07-25 09:21:34+00:00
I've not read Gladwell's Outliers but I'm assuming it references the 1993 paper 'The Role of Deliberate Practice in the Acquisition of Expert Performance'?

The original paper is very interesting and while I think it's good that ideas around deliberate practice has permeated into people's awareness I do find that some of the nuance from the paper has been lost, namely the _conditions_ of that practice that the paper describes (immediate informative feedback, practice at the current boundary of skill, etc.)

Of course 10000 hours is a lot to build up to, so I also like the 100/1000/10000 hour breakpoints idea I've seen elsewhere, that just 100 hours with a subject can yield some basic level of proficiency, 1000 hours for 'good' level of skill (subjective, of course), and 10000 is the sort-of-unattainable gold standard which it's nice to strive for without worrying too much about.
by astrange | 2025-07-25 09:22:11+00:00
> The easiest way of solving math problems with an LLM is to make sure that very similar problems are included in the training set.

An irony here is that math blogs like Tao's might not be in LLM training data, for the same reason they aren't accessible to screen readers - they're full of math, and the math is rendered as images, so it's nonsense if you can't read the images.

(The images on his blog do have alt text, but it's just the LaTeX code, which isn't much better.)
by arianvanp | 2025-07-25 09:22:32+00:00
I've seen a similar attack in my inbox recently where people do the same trick by sending an email to yourgoogleaccount@google.com instead of Gmail.com and then forwarding the bounce from Google's mail servers to yourgoogleaccount@gmail.com with a spam message smuggled at the end.

Passes all checks. Just kinda weird that a postmaster error is intertwined with a phishing campaign. But easy to gloss over as a non-technical user.

In my case the phishing campaign told me I won some construction tools or something.
by netfortius | 2025-07-25 09:22:41+00:00
Interesting you're saying that, because my usage model is: US credit cards w/reward points, in Europe. The cards I use have no currency exchange fees, and very good transaction rates (€ to $), so other than the unavoidable (majority of my money being in the US) ups and downs of value of $ vs € (great up to six months ago, degrading since the arrival of the new admin in the US) I get the best of both worlds, i.e. European lower COL, and rewards and services (e.g. car rentals and insurance, flights, hotels, etc.) from use of US credit cards.
by simon_void | 2025-07-25 09:23:09+00:00
at the (semi-state owned) company (in Germany) I work at, Kotlin is a first-class language also for backend. It depends on the teams wheather they prefer Java or Kotlin. I'm firmly in the team-Kotlin camp and Java code that becomes my responsibility has the strong tendency to suddenly become Kotlin code. By the way, I never worked on Android, so all my Kotlin work (since 2019) was server-side Kotlin.

Java is getting better, so maybe in 10 years it'll be a less ergonomic Kotlin variant.

PS: Jetbrains - the company behind Kotlin - started a strategic partnership with the Spring team, to make the combo Kotlin-Spring even better: https://blog.jetbrains.com/kotlin/2025/05/strategic-partners...

PSS: Jetbrains is actually working on an official Kotlin-lsp server: https://github.com/Kotlin/kotlin-lsp So devs in the near future won't be locked into the IntelliJ ecosystem, if that is a concern of yours.
by 0_____0 | 2025-07-25 09:24:43+00:00
I'm excited for ML's effect on weather forecasting, even as a general skeptic in the AI/LLM space. I use Windy to get my forecasts and have taken to comparing the outputs of the various models, and it's interesting to me that some of the models consistently get things wrong for my region - ECM for example consistently over-predicts precipitation when you push it past a few days. I'm not exactly sure what this looks like on the backend (I think it's still a physics based model?), but I think it's pretty likely that a model trained on weather data directly would not make that type of error.
by ehnto | 2025-07-25 09:25:07+00:00
Totally anecdotal, but you see in Sim Racing versus Real Racing, the best sim racers are very regimented and analytical, and whilst it's mostly true of Real Racing, the confluence of death, consequence and mechanical failure lends some advantage to "characters" that can ride their waves better than others.

In both, it's way more interesting to watch a bunch of less talented people with personality and style duke it out, than it is to watch perfect, best of the best execution go toe to toe.