MurphyA/hacker-news huggingface dataset:
by lotsofpulp | 2025-07-27 22:54:56+00:00
>You can also fake passports and many other things. Do you also want to add online ID verification to purchase alcohol in a convenience store because someone can trick the salesman with fake ID?

And yet we still use passports. And yes, it would be super convenient to not have to have a physical ID on me to verify my identity. Nothing is changing legal rights or government surveillance capability wise, except that people gain convenience.

>You're not analyzing any tradeoffs and going directly to the total surveillance total government power. I was spot on in my assessment from the first comment.

As if the government cannot secretly subpoena and force Apple and Google to reveal anything they want.

https://en.wikipedia.org/wiki/United_States_Foreign_Intellig...

https://en.wikipedia.org/wiki/Five_Eyes

At least if the government operates an identity verification API, it can be subject to the constitution. Businesses are not subject to the laws that restrict the government, and governments love that loophole. If all the banks or tech companies ban you, tough shit, that is their business right. If a government service bans you, then you can fight it in court.

>Internet freedom is severely curtailed with different excuses around "protecting against foreign actors, drugs, porn, protecting the children, etc". The police can show up at your house and arrest you in a European country for posting political opinions on Twitter. ISPs will block websites and the government will force sites to require authentication to read about Israel criticism in relation to gaza.

This has nothing to do with government providing an identity verification API. This is a separate issue about not having sufficient civil rights.

>Everything the government does in a country is good by definition,

Not at all, and that is why the government should be the one doing it, so that it can be litigated in court, transparently. Currently, governments are loving the use of businesses to do bad things, and throwing their hands up because it isn't the government doing it, it's the business doing it.
Show HN: I built a desktop reminder app using Rust and Vue.js
by tack1234 | 2025-07-27 22:55:17+00:00
I've been meaning to learn the basics of Rust, build my first desktop application ever and replace with it the only 2 desktop reminder apps I've known to fulfill my requirements, as both are 15 years+ old at this point.

It's still a work in progress, but after weeks of development I feel I've achieved an acceptable state for a first release.

My main use case for this is reminding myself of things which I would definitely ignore if I used Google Calendar or similar push/browser notification based apps (e.g. meetings coming up, bills to pay, etc.). I do have ADHD, how did you know?
by Andoryuuta | 2025-07-27 22:55:21+00:00
In the context of snooping on the SNI extension, you definitely can.

The SNI extension is sent unencrypted as part of the ClientHello (first part of the TLS handshake). Any router along the way see the hostname that the client provides in the SNI data, and can/could drop the packet if they so choose.
by LinguaBrowse | 2025-07-27 22:55:46+00:00
I've heard nothing but high praise for GraalJS, yeah. I wonder whether it'd make any sense inside mobile apps – not due to any feature in mind, but simply out of interest because that's more the area I'm using JavaScript. The first-class interop with Java would be great for Android, though I wonder how cheap its interop with iOS (C-family languages) would be.
by ActorNightly | 2025-07-27 22:56:23+00:00
Just like any tool, the use case varies.

If you are playing around locally, and or uploading to open source like github or pypi, then its fine to use.

For production code that is critical, the entire "build" process needs to be pure local processing/copy - i.e nothing downloaded from the internet, anything that is compiled needs to be done with local tools that are already installed.

I.e for python project deployments, the right way of doing this with containers for is to build a core image where you do run all the install commands that download stuff from the internet, and the actual production build dockerfile involves only copying files to the library locations, and the final run command. You don't need to "build" packages with anything (unless of course your package contains C dependencies, which is a whole nother can of worms).

I think the desire for something like UV comes from the fact that people just don't think about what is going under the hood. Its somewhat understandable if you are a data scientist that just uses python for math, but for people in computer science/engineering, they really should be able to use python as is without any external tools.
by bsder | 2025-07-27 22:57:00+00:00
> Why isn't there a decently done code editor with VSCode level features but none of the spyware garbage?

Because no other company was willing to spend enough money to reach critical mass other than Microsoft. VSCode became the dominant share of practically every language that it supported within 12-18 months of introduction.

This then allowed things like the Language Server Protocol which only exists because Microsoft reached critical mass and could cram it down everybody's throat.
by pentamassiv | 2025-07-27 22:58:08+00:00
Unless you are using a rooted Android, putting your own certificates on your phone is annoying. They need to be in the system certificate store which is, as far as I know, only possible with a Magisk module.

An easier way is to run an Android virtual device with an older Android version on your computer. You can then use some scripts to add the certificates and proxy the traffic to Burpsuite or mitmproxy. That way you also don't have to switch devices.

It would also be interesting to use APKLab or Jadx to look at the code of the app. Maybe you can find the key derivation algorithm. The app and the washing machine must somehow generate keys or have pre-shared secrets.

If I understand correctly, the app only works if both devices are in the same network? I like that
by const_cast | 2025-07-27 22:58:12+00:00
> Also, engineers are not the reason VCs have a job.

How are they not? VCs don't actually do any productive work - they don't make anything.

In order to invest in something, anything, you need the something. That's a pre-requisite for investing. Engineers build the product. Doesn't even just apply to software, this applies to everything.
by amy214 | 2025-07-27 22:58:16+00:00
> Cars, dogs, and water.

Just to go off of this, springs as well. Usually it's garage door springs or suspension of a car springs. People will DIY thinking it's a small thing but they can easily decapitate you. Some garage door springs have been known to level the families of entire neighborhoods or small townships. Garage door spring related deaths are far more common that you will ever know. Garage door springs also are known to be the main transmission vector for tetanus so if you survive the unspringing be advised there's a 90% chance it flung a deadly dose of tetatus and botulism (also grows on springs) into your every bodily orifice. You may think "well why is a kid fixing a car's suspension" but of course kids like poke around and explore because they're curious or they could be exploring your shop or your garage door mechanism.
by guilhas | 2025-07-27 22:58:58+00:00
You can give a phone with very restricted social media

My child under 10 has a tablet. She can message the family, draw, make videos, take pictures, has a album, some musics. Some, limited time, video cartoons and mostly educational games

Companies should provide better tolling to help parents follow their children online. Especially now with AI would be quite easy to make smart policies
by red369 | 2025-07-27 22:59:54+00:00
On my personal laptop, I run Windows 11 in a virtual machine. Sometimes I intentionally choose "Shut down" instead of "Update and shut down" because I just want to turn it off ASAP and pack up, and it cracks me up when it proceeds to install updates anyway. I just close the virtual machine, powering it off instantly, and later I can restore from a snapshot from before my brutality and let the update happen properly.

I don't find it funny when it's bare metal! On my work laptop I put Windows to sleep 100% of the time, and restart for updates when I'm forced to with 3 hours notice before a mandatory reboot.

This battle with Windows doesn't even need to be happening! I am very good with updates and go looking for them in the settings without needing them to be pushed, at least on less hostile OSs! I run beta iOS on my old phone, and get a little disappointed when I see no changes required when running an update through apt or nix-env or whatever.

I highly recommend running virtualised Windows somewhere for the sanity preserving feeling of vengeful control :)
by isaacremuant | 2025-07-27 22:59:58+00:00
So many people advocating for this in HN and elsewhere when it's so clearly a draconian slippery slope for invasive surveillance and choice restriction. After these things get implemented people pretend it was always like this.

We don't need the governments to mass surveil us to protect us. We need them to sort the economy and stop invading countries and being deferential to corporate interests instead of the people they represent.

It's such an obvious push that If you don't want to see it, it makes me think you're shielding yourself to avoid contending with the reality: These politicians and govs all around, including the countries you claim "work" are absolutely power hungry and beholden to interests other than yours and will push for as much total surveillance as they can, including as much curtailment of freedoms as they can.

Obviously that won't mean elites will actually face justice or crimes will actually be solved because more surveillance is not accompanied with more government transparency, quite the opposite and bigger and more powerful burocracies, with more authoritarianism, allow for easy hidden exceptions that you can't question.

It's nothing new. Corruption is common. It's just mediocre to see "hackers" pushing for it just because the government and corporations tell them to, because foreign country bad, bad social media influences kids, drugs, word-ism, etc.
by elcritch | 2025-07-27 23:00:06+00:00
Sorry to hear friend. It may seem hopeless but you can change things. If people can hack chatgpt you can hack your rain. ;)

Often depression is just that, a sign you need to change something. The what is hard.. Often it's our mindset. Sometimes it's healing old injuries or abuses. Sometimes it's chemical. CBT can really help. Hope you find healing.
by laurencei | 2025-07-27 23:00:43+00:00
I did something with my Bosch washing machine (not like the OP). My washing machine is at the other end of the house from my home office. Sometimes I would put a load of washing on, and despite setting an alarm, might forget (perhaps I am in an important meeting etc).

So I decided to solve it.

Using the Bosch API - I can tell both when a cycle is complete, and if the door is open. Currently I use their default version, but there is a local hosted option I'll be switching too now the proof of concept works.

So using Home Assistant I have a simple script that detects when a washing machine cycle is complete AND the door has NOT been opened. This implies my washing machine has wet clothes still in it.

So Home Assistant will alert my phone (and my wife only if she is home based upon presence detection) once every 15mins that there are wet clothes waiting in the washing machine.

Very simple - works perfectly.
by LinguaBrowse | 2025-07-27 23:01:22+00:00
Thank you very much, really appreciate it! There's a respectable article on engines (https://en.wikipedia.org/wiki/List_of_JavaScript_engines), but indeed, no article on runtimes. I did feel that they were under-discussed compared to engines, though, with most analysis focusing on browsers and Node-alikes, so wanted to add something to the literature.
by don-code | 2025-07-27 23:01:34+00:00
This strategy was actually used during World War II, to ensure pilots could come home safely. Weather forecasting not being what it is today, meteorologists determined what conditions would result in the _most_ lives being lost, then together with mission commanders "designed" missions to simply not meet those conditions.

Source: https://medium.com/butwhatfor/suppose-i-wanted-to-kill-a-lot...
by DiogenesKynikos | 2025-07-27 23:02:03+00:00
> Their science missions are inspiring, but not as inspiring as they ought to be.

NASA's science missions have been incredible.

The James Webb Space Telescope, a 6.5-meter-diameter infrared telescope at Lagrange Point 2 that can measure the atmospheric chemistry of planets orbiting other stars and measure the spectra of galaxies that were around 10 billion years ago.

The Curiosity rover landed on Mars by being lowered to the ground from a rocket-powered "sky-crane." It was powered by a radioactive battery, has been driving around and taking measurements for more than a decade, and has shown that Mars was likely habitable billions of years ago.

What kind of inspiration do you feel is lacking there?
by m463 | 2025-07-27 23:02:26+00:00
sorry, I looked again and I think it was either llama-2-7b or llama-2-13b from TheBloke on huggingface. It is very old and my vm no longer runs it (I must have installed too much conflicting software since). I used ggerganov llama and ggml ggerganov llama, and when I run ./main ... it now coredumps.
by cchance | 2025-07-27 23:03:02+00:00
Am i the only one that finds

System Information: Hardware specs, OS details, architecture Usage Patterns: Active time, session duration, feature usage Performance Metrics: Response times, resource consumption Unique Identifiers: Machine ID, user ID, device fingerprints Workspace Details: Project information, file paths (obfuscated)

Not to really bad that obtrusive? Like i don't really see anything there that i'd be offended in them taking?
by twic | 2025-07-27 23:03:38+00:00
There's some funny square bracketing in here.

> “We don’t do things like that here at all. So, Vauxhall [MI6] will almost never outsource meaningful intelligence work to the private sector,” they said.

That one explains that "Vauxhall" is a metonym for MI6, whose headquarters is in Vauxhall.

> Still, trading in knowledge is commonplace. The same person added that there is a “lot of frustration from both sides of the river [Thames] that the old boys’ network was getting a bit too informal, with people telling their clients that they can call their old buddies.”

That one completely fails to explain that "both sides of the river" means MI6 and MI5 (whose headquarters are on different sides of the Thames).
by WarOnPrivacy | 2025-07-27 23:03:47+00:00
In the case of Android, genuine means:

The operating system was licensed by Google The app was downloaded from the Play Store (thus requiring a Google account) Device security checks have passed

While there is value to verify device security, this strongly ties the app to many Google properties and services, because those checks won't pass on an aftermarket Android OS

The issue is being raised here: https://github.com/eu-digital-identity-wallet/av-app-android...

I would like to strongly urge to abandon this plan. Requiring a dependency on American tech giants for age verification further deepens the EU's dependency on America and the USA's control over the internet. Especially in the current political climate I hope I do not have to explain how undesirable and dangerous that is.

As a resident of the aforementioned political climate, I find their concerns to be reasonable.

There are a number of comments in that same thread that indicate a mandate to utilize Google services may run afoul of EU member nations' integrity and privacy laws.
by benderbreaker | 2025-07-27 23:04:36+00:00
I have followed Cerebras for sometime. Several comments: 1. Yes I think that is Feldman. I have seen him intervene at hacerknews before thou don't remember the handle specifically 2. Yes, the OP technical assumption is generally correct. Cerebras load the model onto the wafer to get the speed. It's the whole point of their architecture to minimize the distance between memory and compute. They can do otherwise in a "low cost" model, they announced something like that in a partnership with Qualcomm that AFAIK has never been implemented. But it would not be a high-speed mode. 3. The OP is also incorrect on the costs. They pick these costs up from dated customer quotation seen online (in which the Cerebras has incentive to jack it up), but this is not how anything works commercially, and at that time Cerebras was at much smaller scale. But you wouldn't expect Feldman to tell you what their actual costs are. That would be nuts. My thinking is the number could be off by up to 80% by now assuming Cerebras was making progress in their cost curve and the original number had very high margins (which it must have).
by theluketaylor | 2025-07-27 23:05:06+00:00
That's true on grid connections, but containers full of batteries could probably overcome that problem.

Porsche has a 2.1 MWhr battery trailer that can deliver 3.2 MW peak they bring to electric track days to keep all the cars charged. That's enough power for some serious industrial processes, and if more is required horizontal scale is pretty simple.

A quick trip overnight to a high powered car charger could fill the batteries by morning. For many loads a simple grid connection constantly trickle charging would be enough power to operate indefinitely.
by canucker2016 | 2025-07-27 23:06:36+00:00
What are your sources?

Peter Attia has a blog entry about the weak xylitol-cardiovascular disease research. For Xylitol, see https://peterattiamd.com/xylitol-and-cvd/

The problem with interpreting these results as a condemnation of xylitol consumption is that diet isn’t the only source of circulating xylitol. This compound is also produced by our own bodies through a process known as the glucuronate pathway, one of the pathways by which we metabolize glucose. So how did the authors ensure they were investigating the relationship between dietary xylitol intake and MACE risk? They didn’t. ...

Attia also brings up something the study authours noted:

The rapid rate of xylitol excretion observed in healthy volunteers with return to near baseline (fasting) levels within hours following ingestion of a significant dietary exposure suggests that the plasma levels observed in our observational (validation) cohort represent variations in endogenous production/levels and not food intake.
by pmvpeter | 2025-07-27 23:07:27+00:00
For those also wondering about rough calorie equivalents of 7000 steps in other forms of exercise:

7000 steps ≈ 280 calories ≈ 3.5 METs

- Yoga (flow/vinyasa) – 3 METs – 82 minutes

- House cleaning (vacuuming, mopping) – 3.3 METs – 74 minutes

- Brisk walking (4 mph / 6.4 km/h) – 3.5 METs – 70 minutes

- Elliptical trainer (moderate) – 5 METs – 49 minutes

- Swimming (moderate) – 6 METs – 41 minutes

- Basketball (half-court, casual) – 6 METs – 41 minutes

- Bicycling (moderate, 12–14 mph) – 7 METs – 35 minutes

- Rowing machine (moderate) – 7 METs – 35 minutes

- Soccer (casual) – 7 METs – 35 minutes

- Light jogging (5 mph / 8 km/h) – 8 METs – 30 minutes

- Strength training (circuit, vigorous) – 8 METs – 31 minutes

- Running (6 mph / 9.6 km/h) – 10 METs – 25 minutes

- Jump rope (moderate) – 11.8 METs – 21 minutes
by isaacremuant | 2025-07-27 23:07:50+00:00
I think if you use critical thinking to read you may easily find I'm talking about my experience with reading comments in relation to imposing age verification for online access, which means digital ID for internet access.

HN and even the GitHub comments mostly start with the assumption that of course we should do this. Of course we should restrict social media to under 16/18s and either are in favor of ID to access the Internet or pretend it won't happen by consequence of this.

Now try to address what I said instead of poorly calling me out.
by bsder | 2025-07-27 23:08:07+00:00
The problem with self-medication is that it doesn't get coverage when it doesn't work. And it rarely gets coverage when it makes things worse.

Faecal transplants have been tried. And we know that it works sometimes. The problem is that it also sometimes does great harm.

There is currently no way to separate and categorize the good flora that helps from the bad flora that can harm.

This is, however, an active area of research. Sure, it could be going faster.

But, of course, the US is busy wiping out the NIH, the very people who fund this kind of research ...
by brookst | 2025-07-27 23:08:11+00:00
People who consider themselves exceptionally smart, who are well educated and write well, who only ever need to communicate in their native tongue ye, and who have the luxury of investing time in developing a personal writing style.

It is a good analogy. There is great concern that the unwashed masses won’t know how to handle this tool and will produce information today’s curators would not approve of.
by GuB-42 | 2025-07-27 23:10:18+00:00
If you like these kind of posts, maybe you should go to https://hackaday.com/ it is all articles like this every day, though usually more on the hardware side.

Here is one in the same vein: https://hackaday.com/2023/04/15/internet-of-washing-machines... => https://tratt.net/laurie/blog/2023/displaying_my_washing_mac...
by Buttons840 | 2025-07-27 23:10:20+00:00
You claim sole responsibility. Do you accept sole legal and financial liability?

I think allowing red-teams to run wild is a better solution, but I can agree with other solutions too.

If those who claim sole responsibility want to be responsible, I'm okay with that too. I really just want us to pick a lane.

So again, are you willing to accept sole legal and financial liability?
by cosmic_cheese | 2025-07-27 23:11:16+00:00
There were quite a few nice looking XP and 7 themes on DeviantArt. It’s too bad that there’s no good way to browse the modern day version of that site, with how they’ve removed categories and search being somewhat broken. Snapshots from archive.org provide a small window into that era, though.

https://web.archive.org/web/20140511174529/http://www.devian...
by kiitos | 2025-07-27 23:11:33+00:00
For the purposes of this discussion, sure: https://go.dev/ref/mem

Relevant bit for the OP is probably:

A data race is defined as a write to a memory location happening concurrently with another read or write to that same location, unless all the accesses involved are atomic data accesses as provided by the sync/atomic package.

Which describes exactly what is happening in the OP's program:

func repeat_get() { for { x := globalVar // <-- unsynchronized read of globalVar x.get() // <-- unsynchronized call to Thing.get() } }

By itself this isn't a problem, these are just reads, and you don't need synchronization for concurrent reads by themself. The problem is introduced here:

func repeat_swap() { var myval = 0 for { globalVar = &Ptr { val: &myval } // <-- unsynchronized write to globalVar globalVar = &Int { val: 42 } // <-- unsynchronized write to globalVar } } func main() { go repeat_get() // <-- one goroutine is doing unsynchronized reads repeat_swap() // <-- another goroutine is doing unsynchronized writes }

Just a (chef's kiss) textbook example of a data race, and a clearly unsound Go program. I don't know how or why the OP believes "this program ... [is] according to Wikipedia memory-safe" -- it very clearly is not.

But, you know, I think everyone here is basically talking past each other.
by const_cast | 2025-07-27 23:12:02+00:00
It depends on what you value. For example, if you want a high quality of life and acceptable work-life balance, that is very, very hard to find in the US. IMO, 500K a year doesn't matter too much if you're fat, lonely, and want to kill yourself. Not saying that everyone in the US is like that, but certainly it seems to be a much higher degree.