MurphyA/hacker-news huggingface dataset:
by wutwutwat | 2025-07-26 14:52:25+00:00
A properly configured load balancer is going to drop this header if the client sends it, and then set it itself, with the request connection's ip being first, then the proxy ip being second. Every proxy after that should append its own ip to that header, then finally when the request reaches your app server, you should filter out your known proxy ips to be left hopefully with just the ip address of the connection the request was forwarded for, which was not set via any client header, and not able to be spoofed.

I'm sure plenty of lbs/reverse proxies and app servers don't set things, establish trust, or filter the header properly though, because, people, but it is easy to lock down.
by karolinepauls | 2025-07-26 14:53:06+00:00
I'll go further and elsewhere at once: APIs should not present nested objects but normalised data. It enables clients to easily to lay out their display structure independently of API resource schemas and eases out tricks like diffing between subsequent responses, pulling updates or requesting new data by passing IDs and timestamps of already known data, etc. API normalised data obviously shouldn't correspond to DB normalised data. Nested objects are superior only for use with jq.
by Aurornis | 2025-07-26 14:53:57+00:00
Dopamine is not the catch-all, explain-everything chemical he believes it is.

He has rolled up his personality characteristics and learned behaviors and decided to blame it all on dopamine, then took it a step further and decided it must be all genetic and external to his actions.

But then he goes even a step further than that, and decides that his condition is not his fault, but everyone else who is in a similar position has done this to themselves through lifestyle choices.

> I fault him only for his youth.

From reading his post titles he’s a plus or minus 30 year old man, not a youth.
by ecshafer | 2025-07-26 14:54:52+00:00
There is a great podcast, The History of the Germans, that have a season on the Hanseatic League. Its a great podcast if you enjoy history in general, the host isn't a professor or anything, but he does a great job with research and also makes interesting connections with how certain events were interpreted by German Nationalists, Fascists, Modern Day, etc. which is interesting.

https://historyofthegermans.com/hanseatic-league/
by DocTomoe | 2025-07-26 14:54:53+00:00
Ironically, that text itself reads a lot like slop.

At the same time, thanks to anti-AI-snobs like this distinguished gentleman, I have started spending significant amounts of time to deliberately not sound like an LLM (foreign-language speaker, analytical writer, typographical nerd who used em-dashs unironically), which makes me do double the work (and ironically makes the workflow of 'think yourself' -> 'rewrite to sound more human' more expensive than 'let the LLM do the thinking' -> 'rewrite to sound more human' in a business setting).

And yet - on the other hand - this absurdity has given rise to a strange, decadent joy: I've begun to write in florid, fanciful style simply to lampoon the process itself. A mockery wrapped in velvet. A jest dressed in brocade. If one must dance for the algorithmic (or anti-algorithmic) court, why not do so with powdered wig and fan in hand?
by fallinghawks | 2025-07-26 14:56:49+00:00
Inflation is probably why the number is higher now.

A year ago I picked up a 1ct hearts and arrows (D/E. VVS1/2, IGI certificate) from AliExpress for $360. I can see the hearts and arrows and it tests as diamond. A few months later an article came out about how lab diamonds stack up against mined, and the author had also bought one with similar characteristics from AliExpress for even less.

I just checked the same store and they're (not H&A but same other stats) running around $125 plus a $14 tariff.
by mantas | 2025-07-26 14:57:19+00:00
A lot of website-in-spa break basic web stuff that simply works in old school HTML. It’s possible to do all that stuff correctly in react, but vast majority of people working on those simple websites seem to not give a damn.

Vast majority of information/portfolio websites have best UI/UX with classic HTML with some JavaScript sprinkled on top where it matters. Nothing says competitive-in-the-industry like contacts page that takes ages to load.
by zdragnar | 2025-07-26 14:58:05+00:00
IIRC, it wasn't even that it contracted one firm, it contracted many, and the individual contracts were managed separately. None of the systems were actually required to work with each other in letter, only in spirit.

The major advantage of bringing in the engineers (only one ex-googler, most were oracle and redhat, again IIRC) was that they were all already bigwigs and knew how to take ownership of large systems, and were given the authority to do so.
by throwawayohio | 2025-07-26 14:58:42+00:00
I do find it tiring that tech oriented people still feel the need to denigrate people who are in the arts or athletes (tbh lumping them in with podcast grifters may be the greatest insult). Children can and should have a variety of role models.

Especially when we have seen over and over again that some youtubers (not pointing at any at this even specifically) have shown themselves to be of quite low character.
by fsckboy | 2025-07-26 14:58:44+00:00
>any span with the same start and end point must have length zero

"a year" is not a point, it's a span. so is a decade.

>Decade 1 is year(s) 10 through 19

but the property you are trying to describe goes hand in hand with 0-based indexing, and thus we see that ISO Decade 0 is >sad tuba< 9 years long
by ant_li0n | 2025-07-26 14:59:09+00:00
You come off like a dick, but it's really true.

I saw a tweet where some Zoomer was roasting an "Elder Millenial" for switching devices from a mobile phone to a desktop when making a big purchase (airline tickets? I forget).

I didn't feel like wading into that argument (what's the point? like spitting in a campfire), but... yeah.

Some folks say that we are regressing wrt technological proficiency, but it's really just that more people use technology than they used to. Regression to the mean, maybe? Is that the right expression?
by coldtea | 2025-07-26 14:59:16+00:00
One starter article for how the market works - there are lots more. This one was discussed in HN too:

https://overengineer.dev/blog/2021/04/25/usb-c-hub-madness/

Now, for hubs, I didn't need a full blown thunderbolt one, but my current hub this:

https://www.amazon.com/dp/B0F5PY4F2N?ref=ppx_yo2ov_dt_b_fed_...

which works fine - I looked at some competitors with 2x and 3x the money for the same and sometimes lesser specs.
by travisgriggs | 2025-07-26 14:59:26+00:00
I’ve poked around a little the site. There’s a lot of “this is awesome” advertising.

I still don’t know where this fits with Phoenix/liveview/bandit. Does it replace them? Why and to what end? Am I to use it as a companion? For which parts?

In other words, which problems do I need to have to appreciate how cool this is?
by ants_everywhere | 2025-07-26 14:59:41+00:00
Genuine question since you seem to care about the performance:

As an outsider, where we are with GPUs looks a lot like where we were with CPUs many years ago. And (AFAIK), the solution there was three-part compilers where optimizations happen on a middle layer and the third layer transforms the optimized code to run directly on the hardware. A major upside is that the compilers get smarter over time because the abstractions are more evergreen than the hardware targets.

Is that sort of thing possible for GPUs? Or is there too much diversity in GPUs to make it feasible/economical? Or is that obviously where we're going and we just don't have it working yet?
by aiisjustanif | 2025-07-26 14:59:44+00:00
CVS and Walgreens in the USA sell adult toys.

Bookstores have adult book with images and kids books.

Walmart also sells some adult toys, lubricant, and condoms. They also sell magazines with nudity.

ESPN did The Body Issue magazine in stores for a decade [1]

If a kid has access to steam, do they not have access to the internet? If you are parental blocking the internet, then why not steam?

[1]: https://www.espn.com/espn/feature/story/_/id/27400369/the-bo...
by MichaelZuo | 2025-07-26 15:00:17+00:00
This seems circular… capital has become such an important gatekeeper in society in the first place because most people aren’t that trustworthy, and will likely betray any trust or faith placed in them if put under enough pressure.

So society has to depend on something fully independent of any specific person or group and that cannot be changed without leaving behind a long papertrail.

In other words nobody dreams of becoming a banker/accountant/auditor/etc. at 5 year old. Probably even double entry bookkeeping would be superfluous if everyone were virtuous paragons.
by __MatrixMan__ | 2025-07-26 15:00:39+00:00
I don't think there's a good way to compare the amounts of these things. I think the best you could do is ask how many bits would be flipped/added/removed had the thing not existed/happened.

Porn might involve large media files which gives it an up-front advantage re: "more", but it doesn't create shockwaves the way censorship does. Remove a porn video and the world stays largely unchanged. Undo an act of censorship and, well, maybe the world stays unchanged, or maybe everything is different.
by tetha | 2025-07-26 15:01:53+00:00
Yeah we got dinged by our pentesters a few years ago because the LB didn't clear X-Forwarded-For headers. So you could just set some trusted IP into the X-Forwarded-For header and various ip whitelists went "Well, it came from there, so we gonna let it though".

Oops :)

It is one of these trust-based headers that need to be cleared at the edge of your network / trust zone.
by dahart | 2025-07-26 15:01:58+00:00
Some people think porn is worse than censorship. Some of those people even feel that censorship is good, not damaging at all, and should be mandatory. I’m not one of those, though it does seem like there’s a possibility that some of the things we’re doing a lot of in society today, like porn and also social media and AI, are changing society in ways we don’t understand yet and don’t have control over. I don’t think it’s wrong to have fears about that.

Anyway, some people wouldn’t even call it censorship if private businesses disagree and decide not to do business, for any reason, even if it’s public pressure. Should private payment processors be free to choose whose money they process? If not, why not? Be really careful with your answer, because taking away their freedom to choose is a type of censorship, and possibly a worse one because it would be a public/government censorship and not a private transaction censorship. Steam and Itch.io do still have the right to ship all these games, they’re choosing not to. They also still have the right to use other payment processors, and/or create their own.

I’d be willing to bet the payment processors in question would rather not be forced to cut off business, and do not care whether people pay for porn. They are simply trying to avoid public backlash and avoid being blacklisted by a large number of people who happen to believe porn is damaging.
by rpdillon | 2025-07-26 15:02:38+00:00
There's probably a fundamental political question underlying a lot of these discussions: do you default to letting people do things or not?

My long-held belief is that there's a certain hubris to saying that you know best for everyone. So I default to letting people do things, since preventing them is exerting power over them. With that framing, you would need evidence that something is harmful if you're going to exert power over other people to prevent them from doing it.
by accrual | 2025-07-26 15:03:02+00:00
Totally agree. I rarely need to adjust my pf.conf but it's a joy when I do. The syntax is easy to read and I can easily get up to speed on my rules just by paging through the file.

FWIW I have the previous edition of the Book of PF on my bookshelf but I rarely reference it after reading through it a couple years back. Standard homelab-grade rulesets are pretty straightforward to setup.
by michalc | 2025-07-26 15:03:12+00:00
I was actually thinking this is all from the developer point of view (or at the very least mine: a developer). I try to deliver some value every working day, and I have to say I pretty much love it. This principle really pushes me to make sure I understand the problems and engineer solutions to them appropriately. And from feedback I get, I am, apparently, very productive doing this. And I do encourage others to work this way (as I was myself encouraged), but I do emphasise the point made repeatedly in the manifesto: the increments can _really_ be extremely small. And to also emphasise another point in the manifesto here - it's not a concern if the aim isn't fulfilled every day. If most developers currently aim for value every 2 weeks say, and that's what they're used to, then of course every day won't always happen, certainly in the beginning of working this way. Or yes, there may be unexpected things along the way. And this is all completely fine.

(This last point was a late addition to the manifesto: but I _think_ made before your comment)

Can you give a bit more detail on the destructive aspects though? If you mean if an organisation follows this, then it ends up as a stick to beat developers with if they don't deliver value every day? I guess my counter to that is, if management is toxic, they will always find a stick to beat developers with, no matter what.

What the manifesto does, or at least tries to do, is encourage developers to think about how larger pieces of work are tackled - so they end up really understanding what the problems are, and so engineer solutions to them appropriately. Wherever possible getting feedback, and if possible on a cadence of at least daily, to me seems such a good way of doing this - but do you have a better suggestion?

Edit: I see https://github.com/rayfrankenstein/AITOW and have started to give it a read… and… wow. I certainly understand where you’re coming from, and I would hate to see “Deliver value daily” make all these situations worse.

I think I’ve been really lucky - only maybe experienced light versions of the worlds described, and in the past few years have worked in a very supportive environment and had a lot of autonomy. In this environment I/my team decide on a lot, including ways of working like how to tackle bigger pieces of work. And in such an environment, “Deliver value daily” I think can really work, and essentially has.

But I think I am sticking with my point - I suspect toxic management will find any excuse, and the three words “Deliver value daily”, will do little to change that.

Although - I am tempted to make it clearer up front that autonomy and a supportive environment (and maybe other things?) are crucial, to try to at least limit how it could be “misused”
by Aurornis | 2025-07-26 15:03:30+00:00
> This needs to be corrected. Parkinson is caused by too much dopamine which after being metabolized creates oxidative stress that kills the dopamine neuron

This is not correct. The cause of Parkinson's is not fully understood and a simple Google search or visit to any medical website or Wikipedia could explain that.

The paper you linked is an editorial (it's in the title) commentary on another artificial experiment in mice that were genetically altered to have a hyperactive pathway for generating dopamine. This is not something found in nature nor do they claim it's something found in humans.

They're simply demonstrating that if they geneticially alter mice to overexpress dopamine and induce excess dopaminergic damage in the process, they can produce outcomes that kind of look like Parkinson's

Claiming that this editorial has explained Parkinson's disease is completely wrong.

> I will say one can see dopamine disorders in someone behavior and correlate them to genetics and nutrition if we cared.

Claiming that "if we cared" we'd see that everything is caused by dopamine, genetics, and nutrition is the current generation of pseudoscience that drives blog posts like this one. I don't know when people started reducing everything to dopamine, but it's neither accurate nor helpful. The number of people who have depression or learned behavioral problems who try to explain it away as "dopamine disorder" is becoming a problem.
by jcgl | 2025-07-26 15:04:10+00:00
The size of the whole pie has grown, and, yes, so have P2P networks.

However, centralized networks of various kinds have grown too. From application-level networks (e.g. networks messengers from Signal to Discord; payment networks from Visa to AliPay) to transport- and network-layer networks (e.g. cloud-oriented client-server topologies; Tailscale), you see growth in the centralized world too. While I don’t have hard data, I’d casually assert that that growth is comparatively far larger than the P2P growth.

Also, if you’re referring to Moxie’s classic post about centralization vs. decentralization[0], I think you’re mischaracterizing it; it doesn’t claim that P2P is altogether inferior, wrong, or any such thing. I’d summarize his point as being that anchoring your application to a decentralized P2P protocol makes your application development less agile. In other words, there are engineering tradeoffs there, between centralization and decentralization. When he weighed the tradeoffs for making Signal, he came down on the side of a centralized architecture.

[0] https://signal.org/blog/the-ecosystem-is-moving/
by coldtea | 2025-07-26 15:04:12+00:00
That's only "real" in that it's inflation adjusted. It's still the same balooney that GDP is inherently.

What this "growth" is based on is the same rent-seeking and money printing credit I mentioned. And of course even people getting paid to dig and then fill in holes would increase the GDP.

My "dismal results" refers to actual state of labor market and quality of jobs, actual purchasing power, actual production, actual innovation, actual infrastructure, actual quality of life changes, etc. Not GDP or stock market or how rich the 0.00001% gets.
by ToValueFunfetti | 2025-07-26 15:05:10+00:00
The terminology issue of abortion gets insane airtime for something that I have to assume has never been meaningfully persuasive to anyone. The guy thinks you think it's okay to kill babies. You think the guy thinks it's okay to control women's bodies and deny them medical care. At that point, who cares if he wants to call your position "pro-abortion" and you want to call his position "disturbing"?

Are people really wavering in the middle, eager to pick a side but terrified of being labelled as anti-choice or anti-life? Maybe kids are deciding their position based on which words sound nicer rather than agreeing with / rebelling against their parents? And these kids already know enough that "pro-abortion" means "villain" to them?

You rarely (or never) see a discussion about, say, Trump turn into a litigation of whether it's okay to call the opposition libtards/rwnjs/SJWs/MAGAts, but that stuff has to make up more than half of abortion discussion. Is it just that people are loath to actually talk about the issue at this point and this is another outlet?
by weinzierl | 2025-07-26 15:05:19+00:00
I enjoyed "Die Fugger" a lot. Unfortunately it never saw the success of "The Patrician".

The following funny little side story might have contributed to that:

The game's publisher Sonflower was sued by a descendant of the Fugger family because they claimed the game puts the name of his family in a bad light. They won and "Die Fugger II" could not be sold anymore. "Die Fugger III" appeared under the name "Die Gilde".
by tmerc | 2025-07-26 15:05:39+00:00
DJI drones are the industry standard because they are very good and typically cost significantly less than non Chinese manufactured drones. I can't currently substantiate this claim with data, but I would be shocked if less than 80% of commercial drone flights in America used DJI. I think the actual number is going to be in the 90%+ range.

There is one American company making comparable products, https://www.anzurobotics.com/. If I understand correctly, these are basically DJI hardware with American software. I don't know if they use DJI control boards or manufacturer their own but their FAQ does mention they license tech from DJI.
by Aurornis | 2025-07-26 15:06:08+00:00
There's a trend of people diagnosing themselves with medical conditions that explain away their shortcomings. In this case, the author wrote a long rant about how he believes other people are causing themselves harm through their choices of actions, but throws in an exemption for himself at the very end.

He believes he's different, as his condition is the result of genetics or something, which means he does not deserve any blame for his situation, unlike everyone else.
Show HN: I built an app that makes me exercise to scroll on social media
by nullderef | 2025-07-26 15:06:08+00:00
Hi HN! After catching myself doomscrolling way too often, I got obsessed with this problem. Everyone talks about it, but real fixes are scarce. So I quit my job to tackle it.

My first attempt was an app that intentionally made social media apps more annoying (https://speedbumpapp.com). It reminded me when I'd been scrolling for too long. But I still had to resist the urge to uninstall it - just like how my brain ignored Apple's Screen Time warnings.

Back at the drawing board, I noticed a pattern: people who don't doomscroll are just too busy for that. When my calendar is filled with friends or sports, I can't waste time on the couch.

This led me to Pushscroll, which helps you replace doomscrolling with exercise. 1 pushup = 1 minute of scrolling allowed. We also detect squats and plank with computer vision (on-device).

It won't fix everything - being bored is an important skill to master. But embracing boredom is the last step in this journey. Pushscroll is as easy to open as social media, and seeing progress is surprisingly motivating. We have a bunch of features planned - it's such a fun idea.

I'd love your feedback and hope it helps you swap some scrolls with reps :)

- iOS: https://apps.apple.com/us/app/pushscroll-screen-time-gym/id6...

- Android: https://play.google.com/store/apps/details?id=com.pushscroll...