MurphyA/hacker-news huggingface dataset:
by wizzwizz4 | 2025-07-06 10:08:14+00:00
The combination of being ready to forgive "good people", and ready to consider the enemies of "good people" your enemies too, can be horrifying – and yet, it feels incredibly righteous in the moment. (Related story: a lay preacher was a stalker, and the Bishop of Leicester helped retaliate against the victim. https://www.bbc.co.uk/news/articles/ce3velqy9rzo)
by jarofgreen | 2025-07-06 10:08:40+00:00
I'm not sure in which spirit you mean that, so I'm going to choose "approvingly" :-)

I do have thoughts for later about modes which could take all the config from .htaccess files and build them into the main config so then you avoid any performance issues - however you have to do that carefully to make sure people don't include any bad config that crashes the whole server. One of the nice things about using .htaccess files as intended is Apache has the Nonfatal flag on AllowOverride so you can avoid that. https://httpd.apache.org/docs/2.4/mod/core.html#allowoverrid...
by surgical_fire | 2025-07-06 10:09:51+00:00
> In the context of EOL of a game if you have to provide it for free to owners in perpetuity any third party content

You start your argument from a presumption that releasing an offline game is almost an impossibility. Are you trying yo argue that offline games have zero things licensed? This sounds like a major argument in favor of offline games.

Sounds to me that the simple solution is just stop licensing things with such draconian requirements. If I play a racing game I care about it being fun. If the car I am using in-game is a BMW or a made up brand for the game is immaterial.
by diggan | 2025-07-06 10:09:55+00:00
If I were to guess, it's about using "motor breaking" (not sure that's the correct English term for it) that you do if you travel downwards for a long time, in order to avoid over-heating the brakes so they are ineffective. I'm guessing doing motor breaking for too long, in a hot environment, might overheat the engine as well?
by pcollins123 | 2025-07-06 10:10:13+00:00
100% agree! I built Paisley (because it is the opposite of plaid), to host your personal finances locally and is 100% open source. Paisley pulls data from your financial institutions by scraping balances and importing CSV exports, storing everything locally in a simple SQLite database.

https://github.com/patrickcollins12/paisley
by trklausss | 2025-07-06 10:10:39+00:00
I don’t know the internals of the holding or Volvo, but the company that I work for is _technically_ American, and we operate like a full European company, developing everything in-house. The only thing the parent holding intermingles with us is numbers at the end of the year and strategic directions.

So this could be happening here as well: Chinese say “hey let’s do electric” and the rest happens in Sweden. Would it then be really a Chinese vehicle?
by StopDisinfo910 | 2025-07-06 10:10:53+00:00
There are no such things as ‘good guys’ especially for states.

States only believe in their own interests and the narrative always go towards the powerful and the one which won.

That’s the fatal flaw in international "justice" and has been from the start. Where were the people who allowed the nuclear bombing of civilians during the Nuremberg trials? Why was nothing said about the western nation entering the war so late despite what they knew? Because that’s not justice, merely retribution.

Then, you have to considered the role played by secret institutions in democratic countries. Do they serve the citizenship, the national interests (what does that even mean?), the people in power, themselves first and foremost? From history, I wouldn’t trust them very much, even less as a foreigner.

Be wary of any institution or person holding power. Check and balance are deeply needed and we should be horrified every times they are being limited or abused.

If the UK is still serious about being a liberal democracy, this should have sever consequences. I’m sadly fairly sure it won’t.
by latexr | 2025-07-06 10:11:22+00:00
> If you know which car you want to buy it doesn't matter what the salesman has to say.

Sure it does. The salesman may have information you were not aware of. They could even tell you something which satisfies your needs better and is cheaper. Not all salesman are out to screw you, some really care about a happy customer.

I’m reminded of an old Hypercritical episode. If you ever heard John Siracusa, you know he does his research and knows what he wants. Yet when it came time buy a TV, which he had intensively researched, the salesman mentioned plasma and how the tech had improved and it threw a wrench in Siracusa’s whole decision.

https://overcast.fm/+AA3EXrnIDrA/1:23:08
by withinboredom | 2025-07-06 10:11:54+00:00
Drama is pretty much non-existent; but when it happens, it can be a day or two where things are in a not-great state. Backups help a lot here, to easily get into a known working state -- also practicing restoring from those backups is a good exercise, so I don't mind it too much. There's nothing like learning your backup was missing some component or something, especially when the risks aren't high.

I think the worst drama ever was a partial disk failure. Things kinda hobbled along for awhile before things actually started failing, and at that point things were getting corrupted. That poofed a weekend out of my life. Now I have better monitoring and alerting.
by rollcat | 2025-07-06 10:12:57+00:00
Honestly, I'm not worried about the batteries. Thanks to FFI, you can just talk to libc, and vendor any native Lua code you need. (That's my approach for LÖVE.)

LuaJIT, release-wise, has been stuck in a very weird spot for a long time, before officially announcing it's now a "rolling release" - which was making a lot of package maintainers anxious about shipping newer versions.

It also seems like it's going to be forever stuck on the 5.1 revision of the language, while continuing to pick a few cherries from 5.2 and 5.3. It's nice to have a "boring" language, but most distros (certainly Alpine, Debian, NixOS) just ship each release branch between 5.1 and 5.4 anyway. No "whatever was master 3 years ago" lottery.
by gvalkov | 2025-07-06 10:14:13+00:00
We're still serving a cgi-bin directory at work for the occasional quick and dirty internal web app. The ergonomics are great as long as you keep it simple. The fact that it's cgi doesn't mean you have to print http/1.0 to stdout manually. For example, in python the builtin wsgiref.handlers.CGIHandler lets you run any wsgi app as a cgi script:

import wsgiref.handlers, flask app = flask.Flask(__name__) wsgiref.handlers.CGIHandler().run(app)

The way we run the scripts is with uwsgi and its cgi plugin[1]. I find it simpler and more flexible than running apache or lighttpd just for mod_cgi. Since uwsgi runs as a systemd unit, we also have all of systemd's hardening and sandboxing capabilities at our disposal. Something very convenient in uwsgi's cgi handling that's missing from mod_cgi, is the ability to set the interpreter for a given file type:

cgi = /cgi-bin=/webapps/cgi-bin/src cgi-allowed-ext = .py cgi-helper = .py=/webapps/cgi-bin/venv/bin/python3 # all dependencies go here

Time to first byte is 250-350ms, which is acceptable for our use case.

[1]: https://uwsgi-docs.readthedocs.io/en/latest/CGI.html
by TheOtherHobbes | 2025-07-06 10:14:37+00:00
> Increased productivity means greater leisure time.

Productivity has been increasing steadily for decades. Do you see any evidence that leisure time has tracked it?

IMO what will actually happen is feudal stasis after a huge die-off. There will be no market for new products and no ruling class interest in solving new problems.

If this sounds far-fetched, consider that this we can see this happening already. This is exactly the ideal world of the Trump administration and its backers. They have literally slashed funding for public health, R&D, and education.

And what's the response? Thiel, Zuckererg, Bezos, and Altman haven't said a word against the most catastrophic reversal of public science policy since Galileo and the Inquisition. Musk is pissed because he's been sidelined, but he was personally involved, through DOGE, in cutting funding to NASA and NOAA.

So what will AI be used for? Clearly the goal is to replace most of the working population. And then what?

One clue is that Musk cares so much about free speech and public debate he's trying to retrain Grok to be less liberal.

None of them - not one - seem even remotely interested in funding new physics, cancer research, abundant clean energy, or any other genuinely novel boundary-breaking application of AI, or science in general. They have the money, they're not doing it. Why?

The focus is entirely on building a nostalgic 1950s world with rockets, robots, apartheid, corporate sovereignty, and ideological management of information and belief.

And that includes AI as a tool for enforcing business-as-usual, not as a tool for anything dangerous, original, or unruly which threatens their political and economic status.
by surgical_fire | 2025-07-06 10:14:41+00:00
> For some people, paying the premium to jump the queue is the point. What they didn't forsee is what happens when everyone has wound up paying the premium, and the queue is now with you again

There's a freedom that comes with not caring and just accepting I am last in the line. I don't pay the premium and I can sit and relax in the lobby while the sheep that paid wait in line. Only when the queue is nearly depleted it is my turn.
by tristramb | 2025-07-06 10:14:49+00:00
Back in 1987 I was standing outside Thorns Bookshop in Newcastle upon Tyne. In its window was a display of books by Professor Paul C. W. Davies. I was saying to someone beside me that Davies wrote too many books for them to be any good. Then I turned round and almost bumped into the man himself. Fortunately he hadn't heard what I'd said and just carried on his way. He was hurrying to give a lecture at the university commemorating the 300th anniversary of Newton's Principia. Several years later I was to revise my view of his writings after reading his 'Fifth Miracle' which I enjoyed very much.
by metalman | 2025-07-06 10:15:21+00:00
In parts of the world bieng able to eliminate mosquitos(other more deadly bugs) will outweigh a great deal of risk assosiated with lasers.

and there are things that can be done.

heat and motion detectors that disarm the system if people/pets are present fields of fire that are above 99.999 % of peoples eyes fields of fire very close to walls, where mosquitos alight, but it is almost impossible to get in the way for humans multiple laser turrets that indivualy dont have the power to hurt a human badly, but can zap a bug through co ordinated action.....perhaps set up outdoors with artificial breath and infra red bait traps to bring the mosquitos above a crowd. more robust systems to be used in agricultural contexts. this will be about comfort and protecting vulnerable populations, mosquitos/other bugs wont be going anywhere, chemical control has proven to cause ecological probelms worse than the bugs, and the attempts at useing biological methods is only a partial solution.
by JdeBP | 2025-07-06 10:15:30+00:00
I hope that no-one merges that code, because it would be baking erroneous control sequences into OpenBSD. Exotic Silicon is making the mistake that we all have made, of getting ITU/IEC T.416 wrong.

Most of the rest of us have been though the process of discovering this error, some years ago, and by now have switched to the correct control sequence that T.416 actually specifies. It requires colons for sub-parameters, and there is a colour space sub-parameter that means that the RGB sub-parameters are actually off by one position in what Exotic Silicon is emitting. There are also sub-parameters that follow the RGB sub-parameters.

Another error in what is done here, and another reason not to merge this code, is the invasion into the standardized space for control sequences when there is a long-standing mechanism for private extensions like this. Exotic Silicon has invented a bogus SGR 128 (with sub-parameters that are not correctly colon-delimited, again) for something that is not even a Graphics Rendition.

There is an accepted extension mechanism for this that has been around since the 1980s: additional parameter characters. Many DEC private control sequences use the question mark as a parameter character to turn (for example) SM and RM into DECSM and DECRM.

SCO did this as well with SCO Multiscreen, one of the precursors of wscons, and SCO's parameter character of choice was the equals sign. There are CSI '=' control sequences, with various final characters, for setting several PC-like things like BEL pitch and duration, overscan colour, and the MC6845 blink/bright bit. They are laid out on the screen(4) manual page.

Setting blink mark/space pattern and frequency fits squarely into SCO's system and cries out for something like CSI '=' n ';' m 'q' .
by rbanffy | 2025-07-06 10:16:31+00:00
In Ireland it’d be the Audi drivers. It’s not that they are terrible drivers, or even below average, but when you hear the conversation a couple times, you start paying attention and confirmation bias kicks in.

I’m not afraid of Tesla drivers. I’m concerned about uncommanded action such as accelerating without driver input. Over reliance on an unreliable autopilot can be considered reckless. My own car has a number of features, from lane keeping to adaptive cruise control that make long and boring trips easier, but it’ll complain loudly if I drive with a single hand for more than a couple seconds.

Even the bad design of the door handles, which should open when airbags are deployed, the door loses power, or the vehicle comes to a stop, is a red flag for me.
by imiric | 2025-07-06 10:16:38+00:00
The thing is that you don't really learn Emacs. Emacs is just an interface to programs written in Elisp that happens to have editor-like functionality out of the box. There are specific conventions it follows, and Elisp has its own set of quirks and a steep learning curve if the user is not fluent in other Lisp languages, so those can be challenging to learn. But boiled down to its core, there's not much to Emacs itself. It's actually a pretty bad editor OOB, but that might be subjective.

What is more challenging is actually customizing Emacs to suit your own preferences, which is the main reason you would want to use it. Deciding which external packages to install, how to use and customize them, and writing your own packages. That is a lifelong endeavor and learning experience, just like programming. So it's to be expected that someone might be a long-time Emacs user, but not be aware of some of its features. You're not expected to know everything, nor do you need to. Just learn as much as you need to make it useful for you. Essentially, every Emacs installation is different, since it's purpose built for a specific use case according to very specific preferences. There's no singular "Emacs". And that is a beautiful thing. :)
by alisonatwork | 2025-07-06 10:16:42+00:00
Basically, this. I already spend all the energy I have available for socializing just going to work five days a week. The idea of people socializing outside of work for the sake of work is supremely depressing to me. It's like, so now I need to do something I find utterly exhausting in order to succeed better at this other thing that already completely destroyed me because... capitalism?

I can at least understand on an intellectual level that there could be personal benefits to socializing with people outside of work, but when work already sucks everything out of you then it just feels like a cruel joke to suggest an introvert get into "networking" and here's a list of weird, creepy, manipulative tricks to do it better. Surely the article must be a parody?
by rvz | 2025-07-06 10:16:46+00:00
> Given the enormous risk involved even with a read-only MCP against your database, I would encourage Supabase to be much more explicit in their documentation about the prompt injection / lethal trifecta attacks that could be enabled via their MCP!

What if MCP itself is a completely flawed standard? You can easily manipulate the agent to leak sensitive data with really basic prompt injection attacks.

We already have seen many flaws and attacks on other MCP servers such as one from Heroku's MCP server [0] and one from Anthropic's MCP inspector [1]. This issue from Supabase for poor documentation is no different.

This protocol is quickly becoming one of the most insecure standards I have seen and once again, nobody cares.

(Until we get a totally avoidable data breach via a MCP server left wide open somewhere).

[0] https://news.ycombinator.com/item?id=44434776

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-49596
by whoisyc | 2025-07-06 10:20:11+00:00
Universal connectivity was the internet’s biggest promise and it turned out to be its biggest flaw. It turns out if you allow literally anyone on this planet to walk up to your front door, you will end up with the world’s criminals, psychopaths, you know, the ones in a more civilized time would be driven out of town by townsfolk wielding pitchforks, all hanging out on your porch figuring out how to pick your lock, or just to spray paint your house for the lulz and cred.

Look around and you will see every piece of cybersecurity knowledge assumes your porch will be inhabited by bad actors and there is nothing to stop them, so you absolutely need to harden your server as if you are a bank. Have you ever lived somewhere you genuinely don’t need to lock your front door to feel safe? I have, it was amazing, and it depresses me to no end to see the polar opposite to be what is expected on the internet. We were promised a world of peace and unity and total freedom of information but instead we got the tyranny of the petty cyberdelinquent, with no way to enforce prosocial values as we ought to do in a sane society. “On the internet no one knows you are a dog” was a warning, but we would be in a much better world if it’s only dogs we have to share an internet with. When humans get low they can get way lower than the worst dogs ever born.

We are already seeing a Brazilification of the internet. Crime is rampant, so you live in a gated community with private security if you can afford it. On the internet the name of this private security operation is Cloudflare. I hate one private company becoming the de facto gatekeeper of the internet but I cannot blame any individual website (including the one in the article) for using Cloudflare. It’s the thin orange line between a somewhat usable service and getting knocked off the internet by smart fridges every other day because some kid somewhere on the planet got bored.

How will this end? I honestly don’t know.
by djtango | 2025-07-06 10:20:31+00:00
> The best way to network well is to stop giving a shit about doing it well.

As someone who has played piano for over 30 years and by any sane person's assessment I play at least "adequately", I can attest that worrying about how you play is the least constructive thing you can do and I have many times over my life crashed and burned when trying to play on the spot and in those moments people would question whether I knew how to play at all.

When I finally realised to stop caring (at least in the moment) everything got a lot better. Even if you screw up, owning it and laughing about it is better than curling up in fear and anxiety and making the moment worse and more awkward for everyone.

"stop caring" sounds like such unhelpful advice but when one finally realises you have agency over that, its like having a superpower
by tharkun__ | 2025-07-06 10:22:07+00:00
Not at all. But you might know them or they come to you naturally.

See I asked someone at a training course on this stuff once to give me concrete things to do instead of the two days of blah blah in the course that basically boiled down to "you just gotta figure it all out yourself" - gee Thanks!

So the guy told me to use people's names when talking to or about them because most people, even if they don't realize or are outward extroverts, like hearing their own name.

Never in my life would I have come to that realization by myself because I'm the exact opposite. I hate it when other people do that with me but now I use it with others.
by diggan | 2025-07-06 10:22:28+00:00
Back in 2016 (holy shit, ~ten years ago?!) when Atom was the editor of choice, I built a small extension that let you preview and interact with React components inside of the editor: https://github.com/victorb/atom-react-preview

I don't use Atom or Visual Studio Code today, nor much JavaScript, and my most-used language kind of gives me this for free nowadays (ClojureScript) but I expected there would be entire businesses today offering the functionality I built back in 2016, but as a all-in-one package with even more bells and whistles. There is so much we could do to make the experience better.

It seems to me like "interactive development" is just a thing for some section of programmers. Personally I couldn't live without my repl-connected editor, but judging by the amount of people who live and swear by the "edit -> compile -> view -> repeat" loop they spend all day doing, it seems like not everyone is wired the same.
by antihero | 2025-07-06 10:22:54+00:00
> What could MI5 possibly stand to gain from hiding a person who is described as "a violent misogynist abuser with paedophilic tendencies who had used his MI5 role as a tool of coercion"?

Because people like that are useful to get inside organisations full of other evil people and prevent those organisations doing even worse things.

I hate it, but that is the logic.
by greatgib | 2025-07-06 10:23:27+00:00
It is crazy how secret services in a lot of "democratic" countries now have a green pass to violate the national law for their own interests without real consequence.

It reminds me of the secret service in a Nordic country (maybe Denmark?) that shared national secret info with the US without any right to do so, without approval of the national assembly.

Also, what should be the scariest thing in the report:

"as on board as other journalists"
Ask HN: Go to stack for an local-first mobile app in 2025?
by _1tem | 2025-07-06 10:24:21+00:00
I have more than a decade of experience in web apps (Laravel/Django) but zero experience in mobile apps. Now I’ve decided to a launch a new startup which will probably be mobile first.

What stack would you choose in 2025?

- needs to work on Android/iOS and web

- I hate overcomplicated JS frameworks but I realize it may be necessary in this case.

- the app will be pretty standard CRUD, nothing technically difficult. It will, however, have in-app messaging so realtime mobile notifications are necessary (the only reason I’m not building a Laravel web app)

- I don’t want to build an API. I like the idea of a local-first synced database like RxDb or InstantDB or WatermelonDB. However I’ve never done this before: what should I look out for? Will this work for realtime in-app messaging?

- I’m a sole dev and I’m lazy so I want a UI library, minimal backend, reducing complexity is priority #1
Show HN: BingeBlock: a Chrome extension similar to ScreenTime
by msgodel | 2025-07-06 10:24:29+00:00
BingeBlock lets you set daily time limits for addictive web sites so you can keep using them without them taking over your life. I've recently learned iOS actually has this built in to "screen time."

This was supposed to be a closed beta but I had to resubmit a couple times and forgot to uncheck "immediately publish" this round so I guess I'm doing a public beta. It still has a couple rough bits (no countdown when the timer is about to expire etc) but it's personally helped me a lot, I'm sure there are plenty of other people here who could use.

I'd love to hear feedback.