MurphyA/hacker-news huggingface dataset:
by perching_aix | 2025-07-19 12:12:19+00:00
The original claim was clearly actually just an opinion; I don't think there's merit to treating it as a series of logical statements, or at intricate depth in general.

Evidence for this is in the very words used: unnecessary, complex, bloated, convoluted. These are very human terms that are thus subject to personal interpretation and opinions.

It shouldn't be surprising then that their "claim" thus fails scrutiny. All they actually meant to say is that HTML and CSS are both verbose standards with a lot of particularities - still something subjective, but I think page / word / character counts are pretty agreeable attributes to estimate this with in an objective way. Hence why I brought those up exactly.
by mxmlnkn | 2025-07-19 12:12:25+00:00
The "gold" would not be radioactive as far as I understand. The reaction is 198Hg (stable) -> 197Hg (65h half life) -> 197Au (stable). You would end up with a mix of radioactive 197Hg and stable 197Au. It should be easy to separate these with established processes because you can easily refine 99.99% gold via various chemical and electrolytic processes. But I doubt any established refinery would touch radioactive inputs because it would contaminate the whole processing chain.
by rickcarlino | 2025-07-19 12:13:00+00:00
Unbelievable that YouTube has not made this feature configurable. I am a language learner and use YouTube to find target language content. It’s very difficult now because you can no longer trust the title of the video to tell you what language it was intended for. Would have been very simple to add a settings toggle. This is one of the worst app inconveniences I’ve come across in recent years.
by xg15 | 2025-07-19 12:13:27+00:00
> Also HTTPS requires two additional round trips before it can do the first one — which gets us up to 1836ms!

Doesn't this sort of undo the entire point of the article?

If the idea was to serve the entire web page in the first roundtrip, wouldn't you have lost the moment TLS is used? Not only does the TLS handshake send lots of stuff (including the certificate) that will likely get you over the 14kb boundary before you even get the chance to send a byte of your actual content - but the handshake also includes multiple request/response exchanges between client and server, so it would require additional roundtrips even if it stayed below the 14kb boundary.

So the article's advice only holds for unencrypted plain-TCP connections, which no one would want to use today anymore.

The advice might be useful again if you use QUIC/HTTP3, because that one ditches both TLS and TCP and provides the features from both in its own thing. But then, you'd have to look up first how congestion control and bandwidth estimation works in HTTP3 and if 14kb is still the right threshold.
by jimjimwii | 2025-07-19 12:14:37+00:00
This is what i settled on as well. I maintain a side project that is completely legal and above board but i refuse to go through the nonsense i was forced to go through the last time i had to integrate with a credit card payment gateway (another side project that went belly up).

If someone wants to buy something from me badly enough, they'll figure out how to get some bitcoin.

I don't have the time and energy to deal with their arbitrary bullshit anymore.
by donatj | 2025-07-19 12:14:39+00:00
This undervalues how much it depends on context, how and where you ride. Cycling is varied.

My casual rides to the shop on my beach cruiser in my sleepy little town? Both my wheels could come off and I'd probably be fine. I'm rarely hitting 10mph.

Downhill mountain biking? Yeah, basically everything is important.

Aside, I was expecting an article comparing good software to a bicycle. Every part of good software being important and well maintained.
by lioeters | 2025-07-19 12:15:49+00:00
I just learned that Bun supports "autoimports" similar to the above.

> If no node_modules directory is found in the working directory or higher, Bun will abandon Node.js-style module resolution in favor of the Bun module resolution algorithm.

> Under Bun-style module resolution, all imported packages are auto-installed on the fly into a global module cache during execution (the same cache used by bun install).

https://bun.sh/docs/runtime/autoimport
by jiggawatts | 2025-07-19 12:16:38+00:00
Everyone uses 10% of the features of complex software... it's just not the same 10%, which is why the other 90% needs to be in there and included in the file formats.

It's also not sufficient to find that "perfect" lean and mean application that happens to cover precisely the 10% that you need for yourself, because now you can't interchange content with other people that need different features!

I regularly open and edit Office documents created by others that utilise features I had never even heard of. I didn't know until very recently that Power Point has extensive animation support, or that Excel embeds Python, or that both it and Power BI can reach out to OData API endspoints to refresh data tables or even ingest Parquet directly.

You might not need that, but the guy that prepared the report for you needed it.
by whatarethembits | 2025-07-19 12:17:01+00:00
I can’t read any text on homepage with iOS Safari as first few characters/words of each sentence is cut off. Text justification is different on different pages. Vertical spacing and images are uneven across the site. FAQ accordion animation is jittery and the hamburger menu doesn’t open actual menu from any other page other than homepage. Going back to homepage from FAQ page renders homepage in previous state, such as with sidebar open, momentarily before resetting to expected state. Focusing on input on sign in page zooms in on email field, but half of it is off page.

I’m assuming this is work in progress and currently it’s been vibe coded to MVP stage?
by tialaramex | 2025-07-19 12:17:06+00:00
String interpolation is one of those features like inference where if you've had it before then going without is very annoying, and so you add some and that's nicer, then you add more, each step seems like it's an improvement, and then one day you realise you're looking at unintelligible nonsense and you say "Oh no, what have we done?"

This is unusual, often CS would love to have as much of whatever as we can, but mathematics says no that's literally or practically impossible - but here both none and lots are awful and shouldn't be permitted.

One option, which Python and C# both picked is, well, leave it to taste. You can write sixteen pages of layered expressions in the uncommented interpolated string and it'll work, but your colleagues will curse your name and plot your destruction. Or at least you'll fail code review if you enforce such things.

Another option, in standard C++ 23 today for example, is refuse to take even the first step. You can have rich formatting, but standard C++ does not provide interpolation at all, if you want to format six parameters then pass them as parameters.

I'm happy with Rust's "Only a tiny bit of interpolation" where you can interpolate only identifiers, not any other expressions, but that's definitely more interpolation than some will be happy with, yet of course in some cases it's not quite enough.
by saagarjha | 2025-07-19 12:17:38+00:00
It's slightly easier because native code is typically faster but I would not say that it would cause it to be the case where you can only do the attack by handwriting assembly. Rowhammer involves hitting memory locations which is generally easy to do from any context (most languages have arrays…). It's not like you need to do weird branch prediction stuff which might require specific gadgets to be present.
by jeroenhd | 2025-07-19 12:17:56+00:00
With half of the web using Let's Encrypt certificates, I think it's pretty safe to assume the intermediates are in most users' caches. If you get charged out the ass for network bandwidth (i.e. you use Amazon/GCP/Azure) then you may be able to get away with shortened chains as long as you use a common CA setup. It's a hell of a footgun and will be a massive pain to debug, but it's possible as a traffic shaving measure if you don't care about serving clients that have just installed a new copy of their OS.

There are other ways you can try to optimise the certificate chain, though. For instance, you can pick a CA that uses ECC rather than RSA to make use of the much shorter key sizes. Entrust has one, I believe. Even if the root CA has an RSA key, they may still have ECC intermediates you can use.
by hardwaresofton | 2025-07-19 12:18:11+00:00
> The downside is, of course, that more and more of the linux userland depends on systemd. That is bound to become a problem sooner or later.

This is the main problem. Systemd has the most eyes, and the most active development, and I just don't want to spend innovation tokens on that as well.

> My biggest gripe is that I would like to have a simpler way to install it onto my computer. I need nonguix to even boot on one of my computers, but I really really hate doing that because doing a system install from nonguix has a tendency to break things for me later on.

That's a huge issue. Which also reminds me, this kind of requirement is dead in the water for the GPU era, at least until there are sufficiently F/OSS high quality drivers (which may be never).

Maybe the answer here is to just use only guix the package manager
by hardwaresofton | 2025-07-19 12:19:25+00:00
> Does it matter if it translates to systemd services under the hood or not?

I think so, because that's what most people are familiar with maintaining/configuring. Systemd at this point is quite robust, and it's sprawling ecosystem has a lot of functionality. Perhaps more importantly, this is the stuff you'll find the most support/integrations for.
by ogogmad | 2025-07-19 12:19:35+00:00
In related news, OpenAI and Google have announced that their latest non-public models have received Gold in the International Mathematics Olympiad: https://news.ycombinator.com/item?id=44614872

That said, the public models don't even get bronze.

[EDIT] Dupe of this: https://news.ycombinator.com/item?id=44614872
by jeroenhd | 2025-07-19 12:21:25+00:00
Without cached data from a previous visit, 1-RTT mode works even if you've never vistited the site before (https://blog.cloudflare.com/rfc-8446-aka-tls-1-3/#1-rtt-mode). It can fall back to 2-RTT if something funky happens, but that shouldn't happen in most cases.

0-RTT works after the first handshake, but enabling it allows for some forms of replay attacks so that may not be something you want to use for anything hosting an API unless you've designed your API around it.
by acdha | 2025-07-19 12:22:07+00:00
Of course it’s an opinion: the point is that it’s neither persuasive nor internally inconsistent. They haven’t given any reason to believe they have enough domain knowledge to compare the two authoritatively. It’s also inconsistent to criticize OOXML for being difficult to implement without extra knowledge and then to criticize a truly open spec for being detailed enough to implement without extra – the entire HTML5 process was intended to reduce the number of cases where people were relying on things which required implementers to know how a specific engine like IE worked.
by benjiro | 2025-07-19 12:22:16+00:00
Also not in the US, i am using the term IRS because people are very used to it on the internet.

Banks in the US and EU are legally required to report large transactions. I know for a fact that in Europe, that cash handeling over 10.000 euro gets reported.

That includes withdrawals and deposits. The later gets even more questions asked regarding the "origins" of the money.

There are other fun events that we have seen, like transferring 15.000 euro from my wife to her brother (between countries), that had the money blocked as the bank needed to investigate the origin of the money. So the bank starts calling you to figure out what the money is, what is it used for, where does it come from, bla bla bla...

Why are you giving 15.000 to your brother. Is it a GIFT!!! Translation: Can we TAX it! I suspect that banks in some EU countries get a cut from reported money that can be taxed by the tax office (that is just my speculation).

No, it was his money that he loaned to us for a house buying, and that we returned, but they really tried to push the "gift" narrative. Large money transfers (above 10k), triggers investigations.

And as you can guess, large cash deposits or withdraws get even more questions.

Here is a fun tip: Just transfer or deposited money in small amounts, whenever you feel like it. Avoids the questioning like your some kind of criminal.

So ironically, you perform actions like a criminal (will do to avoid detection), just to avoid getting questioned like your a criminal. Hahahaha...

I feel like we have no more privacy in our lives with everything being monitored and checked. Your browser spies on you, your OS spies on you (W11 Recall even worse), your smartphone, you get tracked by Wifi signal in the streets, your customer store card (that they push and push) is to track your buying habits, the banks track your every movement for the tax office, you can not even freaking sell stuff on ebay and get reported.

Like 3000 Euro is nothing. You sell a few piece of PC hardware and you hit that limit. And Amazon/Ebay/... report your behind. And now its about backdoors in encryption because you may be hiding something. What, you do not want to share your talks on XYZ platform to your wife, family. What are you saying, illegal stuff????

We are really moving to a dystopian world and have been for a long time.
by lioeters | 2025-07-19 12:24:02+00:00
The presentation was recently discussed at:

https://news.ycombinator.com/item?id=44596554 [video] (37 comments)

This current posted link is an article by Casey Muratori with supplementary material on topics to explore further.

- Early History of Smalltalk

- History of C++

- Development of the Simula Languages

- Origins of the APT Language for Automatically Programmed Tools
by thomascountz | 2025-07-19 12:24:32+00:00
I have no stake in being right or wrong, which I think leads to sounding confident. But, I believe the incentives are there for privatization.

Those opposed to the current administration will see restoration of gutted services as a win. Talent (researchers, scientists, and anyone with knowledge of processes) is being made available to the private sector. The private sector makes significant contributions to political campaigns and will want contracts in return. Therefore, a campaign can be sold as:

"We will fix what has been broken, and bring back jobs to the critical areas of our sovereignty. We will make good on the promise of increasing efficiency and reducing waste by opening up opportunities across all areas of industry, both old and new.

What we've witnessed over the past four years was the dismantling of the American dream. What we endured was "an honest day's work" being turned into "work a day and a half for half the pay".

But now, we will rebuild. And as we do, we will no longer be vulnerable to the whims of ivory tower bureaucrats. We are taking the power back. We are keeping our taxpayer dollars focused where they should be. You are getting the respect you're owed and reminding Washington that they work for you."
by steveklabnik | 2025-07-19 12:26:05+00:00
Rust was also made specifically for the purpose of writing code like this.

Nobody is trying to “push and shape a favorite tool.” Take it from greg-kh:

https://lore.kernel.org/rust-for-linux/2025021954-flaccid-pu...

> The majority of bugs (quantity, not quality/severity) we have are due to the stupid little corner cases in C that are totally gone in Rust. Things like simple overwrites of memory (not that rust can catch all of these by far), error path cleanups, forgetting to check error values, and use-after-free mistakes. That's why I'm wanting to see Rust get into the kernel, these types of issues just go away, allowing developers and maintainers more time to focus on the REAL bugs that happen (i.e. logic issues, race conditions, etc.)

> Rust isn't a "silver bullet" that will solve all of our problems, but it sure will help in a huge number of places, so for new stuff going forward, why wouldn't we want that?
by sardor_ubaydiy | 2025-07-19 12:27:16+00:00
Hey HN, For a while now, I've been a little annoyed by the workflow for creating favicons for new projects. It always felt like a slightly-too-fiddly task involving multiple tools, manual resizing, or signing up for a service just for a few simple icons. I wanted to see if I could build a tool that was the complete opposite of that: zero-install, zero-dependencies, and as fast as humanly possible. The result is this little app: https://emo2fav.netlify.app/ It’s a single index.html file with no build step. The core idea was to make the entire experience client-side: Rendering: The emoji previews are rendered directly to HTML canvases in real-time. I learned a bit about font metrics to get the vertical centering right across different browsers. The sharp previews are rendered at a fixed 128px and then downscaled with CSS, while the final ZIP generation uses an offscreen canvas to render each icon at its true, full resolution. File Generation: The .zip file, with all the selected .png files and the manifest.json, is created entirely in the browser using JSZip.js loaded from a CDN. No data ever leaves your machine. Payment Model: I also wanted to experiment with a "supermarket" model: you can use every single feature of the app for free, see the final product, and a one-time payment is only required at the final "checkout" step to download the files. I'm using a simple Buy Me a Coffee redirect for this, where a middle success.html page checks the document.referrer to grant a localStorage token. I know this isn't Fort Knox, but for a micro-tool like this, it felt like a reasonable trade-off to avoid a server-side setup. It was a fun weekend project built with vanilla JS and Tailwind CSS (also from a CDN). I’d genuinely love to get your feedback, especially on the user flow or any technical implementation details. Thanks for taking a look!
by jeroenhd | 2025-07-19 12:27:28+00:00
Anything non-standard will kill shitty middleboxes so I assume spamming packets faster than anticipated will have corporate networks block you off as a security thread of some kind. Mobile carriers also do some weird proxying hacks to "save bandwidth", especially on <4G, so you may also break some mobile connections. I don't have any proof but shitty middleboxes have broken connections with much less obvious protocol features.

But in practice, I think this should work most of the time for most people. On slower connections, your connection will probably crawl to a halt due to retransmission hell, though. Unless you fill up the buffers on the ISP routers, making every other connection for that visitor slow down or get dropped, too.
by susam | 2025-07-19 12:27:44+00:00
> You could try replacing KaTeX with MathML: https://w3c.github.io/mathml-core/

I would love to use MathML, not directly, but automatically generated from LaTeX, since I find LaTeX much easier to work with than MathML. I mean, while I am writing a mathematical post, I'd much rather write LaTeX (which is almost muscle memory for me), than write MathML (which often tends to get deeply nested and tedious to write). However, the last time I checked, the rendering quality of MathML was quite uneven across browsers, both in terms of aesthetics as well as in terms of accuracy.

For example, if you check the default demo at https://mk12.github.io/web-math-demo/ you'd notice that the contour integral sign has a much larger circle in the MathML rendering (with most default browser fonts) which is quite inconsistent with how contour integrals actually appear in print.

Even if I decide to fix the above problem by loading custom web fonts, there are numerous other edge cases (spacing within subscripts, sizing within subscripts within subscripts, etc.) that need fixing in MathML. At that point, I might as well use full KaTeX. A viable alternative is to have KaTeX or MathJaX generate the HTML and CSS on server-side and send that to the client and that's what I meant by server-side rendering in my earlier comment.
by regularfry | 2025-07-19 12:28:24+00:00
It turns out that if all you want is to package a bunch of files to get copied into the filesystem, the bit of the debian tooling that you actually need is tiny. Basically just a DEBIAN file, your file tree, and dpkg-deb, from memory. But figuring that out from the docs is terrible, because they want to funnel you into source packages and the higher-level (more complex, obscure) tooling.
by ath3nd | 2025-07-19 12:29:54+00:00
I wholeheartedly disagree. We have already for some time plateaued both in terms of LLM model usefulness and in terms of efficiency.

You can already see some of the bigger players trying to squeeze out more money out of their victims, pardon, users, in order to maintain at least the illusion of a future where they are profitable. We also see some players eg Apple give up on the race, and some other players, eg Microsoft, Google and OpenAI switch personnel and positions in the race, which should be a good signal it's a mined out field and they are scrapping to be the one that gets the few remaining spoils before it all crumbles down. Very bearish on LLMs.
by beala | 2025-07-19 12:30:02+00:00
This applies to so many other things. Who in your house does the taxes? If it's you, would your SO be able to pick up the slack in the event of your death? Can they access all the accounts? Do they even know what all the accounts are? I keep telling myself I need to put together a "what to do if I'm dead" Google doc, but haven't gotten around to it.
by mobeets | 2025-07-19 12:30:07+00:00
I’m with you—-I think you did a good job of summarizing all the places that LLMs are super practical/useful, but agreed that for prose (as someone who considers themselves a proficient writer), it just never seems to contribute anything useful. And those who are not proficient writers, I’m sure it can be helpful, but it certainly doesn’t contribute any new ideas if you’re not providing them.
by Herring | 2025-07-19 12:30:17+00:00
I’ve been all around the world. Only in America do people insist on doing evil things and still want to be praised for it.

It’s the stupid brand of evil too, like killing millions AND pissing away trillions of dollars in useless Middle East wars (god forbid you say anything against American foreign policy). Or ICE destroying lives AND hurting your own economy. It’s not like republican states are the richest! But the poorer they get the angrier and more dug-in they get.
by djhworld | 2025-07-19 12:31:34+00:00
I've been tempted to use NixOS for my self hosted setup but I just can't bring myself to do it.

My setup is quite simple, it's just a few VMs with one docker compose file for each. I have an ansible playbook that copies the docker compose files across and that's it. There's really nothing more to it then that, and maintenance is just upgrading the OS (Fedora Server) once the version reaches EOL. I tend to stay 1 version behind the release cycle so upgrade whenever that gets bumped.

I do use nix-darwin on my macs so I do _see_ the value of using a nix configuration, but I find it difficult to see if the effort in porting my setup to Nix is worth it in the long run, configuration files don't get written in a short time. Maybe LLMs could speed this up, but I just don't have it in me right now to make that leap
by ndespres | 2025-07-19 12:33:14+00:00
Oh, that’s quite alright, the way I do it is to browse the site on my phone which lists the file names for each download, then just type them in to the FTP program. You really need to browse the site to know what everything is, anyhow, as there are multiple downloads for each program- demos, different languages, patches etc. Thank you though!